last executing test programs: 6.104023271s ago: executing program 2 (id=764): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff81, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r1, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000000c0021"], 0x48}}, 0x0) 6.008116439s ago: executing program 2 (id=765): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0xfffffd5c, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/17, 0x11}}], 0x1, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0xd4, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa306000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x140, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3f}, @remote, [0xffffff00, 0x0, 0xffffff00, 0xff], [0x0, 0x0, 0xff, 0xff000000], 'macvlan1\x00', 'nr0\x00', {0xff}, {}, 0x2f, 0x2, 0x2, 0x22}, 0x0, 0xf8, 0x140, 0x0, {0x0, 0x2000000000000}, [@common=@hl={{0x28}, {0x2, 0x4}}, @common=@ipv6header={{0x28}, {0x94, 0x0, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x4, 0x6, '\x00', {0x5}}}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x0, 0x39}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@deltaction={0x80, 0x31, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xffffffffffffff2a, 0x1, 'mirred\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}]}]}, 0xf}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_create(0x8, 0x180000) 4.89590041s ago: executing program 2 (id=781): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xfc, 0xd, 0x2, 0x1b, 0x0, 0x0, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x4cc0, 0xfffffffffffffffa}, 0x50, 0x5, 0x6, 0x8, 0x8001, 0xae6, 0x5, 0x0, 0x7f, 0x0, 0x2}, r0, 0xf, r1, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/igmp\x00') pread64(r3, &(0x7f0000000440)=""/249, 0xf9, 0x359) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) (fail_nth: 1) 4.867240043s ago: executing program 2 (id=783): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11ee, &(0x7f0000001280)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500)={0xb}, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) sendfile(r1, r1, &(0x7f0000000240), 0x7f06) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r3, 0x12081ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f00000003c0)=""/40, 0x28) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80000000000000}}, r4, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000480)=0x2, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_clone(0x88000000, &(0x7f00000002c0)="5fcfcccc49a123883703b2aa0a33e646605e860ecc9f820c692b1c5702c9075a9abaa7b504cce0391c58d88fb4ef43fa6f5d1653872c281ca27fef5dcdb247549b2cef520cf7f55ed1f4dac42ae83e22e3c6923517fe404ae466d6725bdab7ed79e40f635afbf1fe78f6910c609b7941be78de7404db6124b585e3696eaa1f11b9e51258d0f78d47", 0x88, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)="9f8e2d5606092e9e54af5edb492402a085e1d87d6c343a7b") sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000040)) 3.91568523s ago: executing program 4 (id=795): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@orlov}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000340)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e657665000010000280060005"], 0x48}}, 0x0) 3.849411466s ago: executing program 2 (id=797): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x9}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) io_uring_setup(0x3ffe, &(0x7f00000000c0)={0x0, 0xe2b8, 0x80, 0xfffffffd, 0x5}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r4, 0x4, 0xc0, 0x3, 0x2, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x700, 0x40, 0x1, 0xea2e}}) connect$tipc(r2, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201", @ANYBLOB="0bfbf6c0e8053f0616a09664c1749787015a251bf487738d697e060324824de75a"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057000000"], 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x65, 0x403, 0x28, 0x8, "4115292afb1b293a"}, 0x28, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e2900fe8000000000000000000000000000bbff02"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='cachefiles_rename\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x4, &(0x7f00000005c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 3.469840477s ago: executing program 4 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x19, 0x1ff, {{0xd, 0x4, 0x0, 0xc, 0x34, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x1, [{@empty, 0x5af}, {@multicast1}]}, @generic={0x89, 0x9, "3a63aaf7c8f4e8"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x80044944, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r7], 0x144}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_delroute={0x5c, 0x19, 0x200, 0x70bd2a, 0x25dfdbfc, {0xa, 0x10, 0x80, 0x9, 0xfe, 0x3, 0x37, 0x0, 0xa00}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_GATEWAY={0x14, 0x5, @local}, @RTA_PRIORITY={0x8, 0x6, 0x2f9c5dcb}, @RTA_MULTIPATH={0xc, 0x9, {0x7ff, 0x1, 0x7, r2}}, @RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) setsockopt$inet6_buf(r8, 0x29, 0x44, &(0x7f0000000200)="7e0ea9a5732d36113d5881dd7d2c279aeee9c24cedfca4b0cbe501cfbc7e6e5eaa413d978ac924f903dc5e2843586f5381457d5932649a55e6f66946039e81ffca371fdda424878d573589c7f4dd4d1cc30d7ef090da63e2c03ec68335e9b3f796", 0x61) 3.394374233s ago: executing program 4 (id=807): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c94a6fb08bb1fb4, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.542599083s ago: executing program 4 (id=837): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 2.476072368s ago: executing program 4 (id=838): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11ee, &(0x7f0000001280)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500)={0xb}, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) sendfile(r1, r1, &(0x7f0000000240), 0x7f06) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r3, 0x12081ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f00000003c0)=""/40, 0x28) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80000000000000}}, r4, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_clone(0x88000000, &(0x7f00000002c0)="5fcfcccc49a123883703b2aa0a33e646605e860ecc9f820c692b1c5702c9075a9abaa7b504cce0391c58d88fb4ef43fa6f5d1653872c281ca27fef5dcdb247549b2cef520cf7f55ed1f4dac42ae83e22e3c6923517fe404ae466d6725bdab7ed79e40f635afbf1fe78f6910c609b7941be78de7404db6124b585e3696eaa1f11b9e51258d0f78d47", 0x88, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)="9f8e2d5606092e9e54af5edb492402a085e1d87d6c343a7b") sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000040)) 1.637656967s ago: executing program 4 (id=848): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x60b300) 772.199387ms ago: executing program 0 (id=867): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000002180)=[{0x0, 0x4}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000002240)=[0x7fff]) 707.712393ms ago: executing program 0 (id=868): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000840)=""/86) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000020000000000000460000000e0001"], 0x54}}, 0x4000) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r7, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048110}, 0x24044091) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="5d354b04d248de8f0576ac73d9225a32af268099e28a0e12a7074dd3c2073c72d7dcb8ab0fab0e0670a7200d3070cfc6a0f81cddce7fc3970091a8d0a018e34710ecff5e6261e432e331902ab19248883a4db340c48b99a3dc90f4f5d32cc6bd9356bf3060967e539489e2456de723fd79e5b376e1408f0812396afcf259bfd7909825bc9a9ac88380614bbcd34c1597", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572300000"], 0x38}}, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r8, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) epoll_create1(0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000040)) 685.943144ms ago: executing program 0 (id=869): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53c, &(0x7f00000025c0)="$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") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) gettid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0xfffffd92}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="e4", 0x8ec0}], 0xc0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000004"], 0x38}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 604.261901ms ago: executing program 0 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @empty, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r1, 0x8000, 0x80, 0x4, 0x25b, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x68, 0x0, 0x5f, 0x29, 0x0, @local, @remote, {[@noop]}}}}}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000631108000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socket$netlink(0x10, 0x3, 0xf) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000500)=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) unshare(0x22020600) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r6, 0x2ff8) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r7, &(0x7f0000000140)=0x40000000000001, 0x12) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000080)={0x0, r6}) 601.965821ms ago: executing program 0 (id=873): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) r0 = dup(0xffffffffffffffff) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) move_pages(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000617000/0x1000)=nil], 0x0, &(0x7f0000001180), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x40044581, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="5300000007000046009d40edce68510449b8a5038a12741265"], 0x53) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 560.869885ms ago: executing program 3 (id=875): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r0, 0xee72) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @dev}, &(0x7f0000000580)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000240)=""/234, 0xea, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) lseek(0xffffffffffffffff, 0x10004e9, 0x0) r4 = open(0x0, 0x64842, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfea7}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_remove_blocks\x00', r6}, 0x10) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000400)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1, 0x7bff, 0x0, 0x3) creat(&(0x7f0000000300)='./bus\x00', 0x0) 481.898201ms ago: executing program 3 (id=876): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast, 0xa000000}, 0x10) 428.248155ms ago: executing program 1 (id=877): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x238, 0x65, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_INDEV={0x0, 0x8, 'ipvlan0\x00'}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}, @TCA_U32_INDEV={0x0, 0x8, 'macsec0\x00'}, @TCA_U32_FLAGS={0x0, 0xb, 0x5}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN, @filter_kind_options=@f_route={{0xa}, {0xfffffffffffffe98, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xed}, @TCA_ROUTE4_ACT={0x190, 0x6, [@m_sample={0x0, 0x1f, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x7f}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x4e}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0xfffffffc}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0xfffffff7, 0xe, 0x8, 0xd, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x10001}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x3}]}, {0x0, 0x6, "0638f30e8f5167d75e36aed53d156d68666a7142c710e6a317c3f51947430cf91d275225e6aa2207fd"}, {}, {0x0, 0x8, {0x3}}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x238}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x680}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 427.967485ms ago: executing program 1 (id=878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 392.985818ms ago: executing program 1 (id=879): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000002180)=[{0x0, 0x4}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000002240)=[0x7fff]) 355.474812ms ago: executing program 0 (id=880): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x9, 0xfffffffa, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) io_uring_setup(0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 244.326441ms ago: executing program 1 (id=881): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 244.078701ms ago: executing program 2 (id=882): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0xd, 0x2, 0xfffff000}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x2010, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47) recvmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000026c0)=""/4111, 0x100f}], 0x1}, 0x140) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000180)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet6(0xa, 0x6, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(r7, 0x0, 0x0) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x9, 0x0) (async) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0) 220.355792ms ago: executing program 3 (id=883): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000007b00010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000a0000001b0000000600050088a8000008000500", @ANYRES32=r4], 0x60}}, 0x0) 197.639384ms ago: executing program 1 (id=884): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 116.229071ms ago: executing program 3 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x19, 0x1ff, {{0xd, 0x4, 0x0, 0xc, 0x34, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x1, [{@empty, 0x5af}, {@multicast1}]}, @generic={0x89, 0x9, "3a63aaf7c8f4e8"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x80044944, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe8000"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r7], 0x144}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_delroute={0x5c, 0x19, 0x200, 0x70bd2a, 0x25dfdbfc, {0xa, 0x10, 0x80, 0x9, 0xfe, 0x3, 0x37, 0x0, 0xa00}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_GATEWAY={0x14, 0x5, @local}, @RTA_PRIORITY={0x8, 0x6, 0x2f9c5dcb}, @RTA_MULTIPATH={0xc, 0x9, {0x7ff, 0x1, 0x7, r2}}, @RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) setsockopt$inet6_buf(r8, 0x29, 0x44, &(0x7f0000000200)="7e0ea9a5732d36113d5881dd7d2c279aeee9c24cedfca4b0cbe501cfbc7e6e5eaa413d978ac924f903dc5e2843586f5381457d5932649a55e6f66946039e81ffca371fdda424878d573589c7f4dd4d1cc30d7ef090da63e2c03ec68335e9b3f796", 0x61) 94.146973ms ago: executing program 3 (id=886): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)) 47.170777ms ago: executing program 3 (id=887): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11ee, &(0x7f0000001280)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500)={0xb}, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) sendfile(r1, r1, &(0x7f0000000240), 0x7f06) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ftruncate(r3, 0x12081ff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f00000003c0)=""/40, 0x28) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_clone(0x88000000, &(0x7f00000002c0)="5fcfcccc49a123883703b2aa0a33e646605e860ecc9f820c692b1c5702c9075a9abaa7b504cce0391c58d88fb4ef43fa6f5d1653872c281ca27fef5dcdb247549b2cef520cf7f55ed1f4dac42ae83e22e3c6923517fe404ae466d6725bdab7ed79e40f635afbf1fe78f6910c609b7941be78de7404db6124b585e3696eaa1f11b9e51258d0f78d47", 0x88, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)="9f8e2d5606092e9e54af5edb492402a085e1d87d6c343a7b") sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000040)) 0s ago: executing program 1 (id=888): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x76, "f795dc2f5ac0fc8c2abf517accfa78a2d711cf898ae2d34fccc51ec558f4092b12dc0f474934003891cf31594ade2feeae2d63564b092e26c8eacdbf2b620d7e9c3fe5fa6ff6277a7abdc85e64c74da5c662457deb22fcbc735f374034fbb9b222dde7be2ad305f8b3480c2bd0737b4e3a06ed9d5633"}, &(0x7f0000000100)=0x7e) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000a80)='?', 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40286608, &(0x7f0000000080)) sendmmsg$sock(r5, &(0x7f0000002480)=[{{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x1, @private=0xa010101}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="9edf7cc2c2dbdbd789355f8cdf0df3058018243018e1c4e438078dad04799e19be87d7e189705ddd8d79f524fc0aa8705ff65d19869c96bc2d9545e9e898e10c86710f482bf71a14f72355e5227d8b1a8ba03facae2d250e1f0809ef2ac62affb9dbd5d6e014e6a6c321f8ab43fe", 0x6e}, {&(0x7f0000000640)="cc44910fbb6e233c969c6525175f7c8de15781d116ce8b09da67403570581fd426f7e86b101f0bcea2b0c0fdd27861a033f95ceb", 0x34}], 0x2, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0xc5}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xae9}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x935}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}], 0xa8}}, {{&(0x7f0000000780)=@nl=@unspec, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000800)="7b2944f0f777a74b9f707d7f1aa07882a75b644316fc76693acf5447d4467ad083ab29173aa6d25024bcee427d7535284497c9bb361daa014f04a9106e536aeb2e95cba768f524eee341382cd186c19497768debeb5a74d142f36b060ca87494a97a0fc8dea4b8c6c2e6c68d9996f668bede7288f0b1b1bd5e21c04c05be0dfb84635259f5f379ca60fa71934a9418935368577d0af9a41060b1d62e8e94ea1a41049fda58767bc5942abc931a9ab3f2c5db6a71499e3bc1c871067da57e770a4647f6ddf91a1f5486aef0ba9ec5c1d94407e345a883a9057b5735af0c826bd57c497bbae8", 0xe5}, {&(0x7f0000000900)="0ed581ec7e4a24ca336ce4e8d64f8896e3bc72e157119904547bb15f6d91a0572917f09b7051694a8816105f053ceeaa3aaab46b8ddd", 0x36}, {&(0x7f0000000940)="21547a8e1c7f839de5bafdd061bd3bd10a2bac7f510b280d7400c64a0f9e635d696838000beb2057d1b3a017890efee970af40e1fb5b4c418b6e9492a750353913827512d6", 0x45}, {&(0x7f0000000ac0)="33abb50b72a076fff9cad9a3610617e3de8666730f0494473ba13563cb893af3bead9f59f9c38e13a9936b3ab9d7b2d1eda8760de9aed71a2b4ae0ed67d7318a56d5d338360449119f1d2577ee32a95ad914a52bfba63964d424966864b232e51d5729fb319803aa85f4a50a1f293e5d909d1a81c8c57bb419dec4598f2a6d27730279ae43809fa2c0da8b7556021dccab3aa704dec7b1ab8aeeb6fea4db91704bfda851b0306e2a4b631d6f8d9c6ff9d9d8ed6ee9b20a7e8273fbc1d46ba121d4ec6bab7b1ceaebb20822db8c3cbbd46f88404e04d01437d9f53bbdb53619aa6fb7cf77e74e5790f2a993f42137725accfea954196e", 0xf6}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f00000009c0)="bd39b9e9ed35f91af0b526a09519787c90e9bcf8878139513d20d6f66e9047e8f0a7d34bc5a2ce56ddc2c40f59f84e6cb80433e3ca68e9f4a65268b9a8fc02494de13ca496df9d332ad1d63bb76e7e4b89ef957e3e19c087f64d2fd7f5e52fa48bf1d28a96018687a4687bb47423fb6484b6f9c60548b80e99919232645f5aceede7f4bd13dbb26f3d296d8a75c3cc3c66404c818df0f1770b0e2a6a9b5c17f2e7", 0xa1}, {&(0x7f0000001bc0)="09d3fcea25200c755a1e6a4423d12535cb6895d22a8b75c1b09fa2b5bb219fe5e293a455", 0x24}], 0x8}}, {{&(0x7f0000001c80)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001d00)="cc1100e9ce541dfb5e4138d781328125ee2b8e405cb7e682430d78a4a186dbf183e288c8b9c92a12824575f293b378ccf284e440d7f8d0f0fb046194b172b5898c22656465abd6643d6d0c9539199dee1cf41864aaae8e22b337c7c497bebc54da06cf64dea22a79d58fd591309e309184", 0x71}, {&(0x7f0000001d80)="fd5059bddf8dcf5056c6493b0a3ef63d95e2d8cd4f1d71a3fd89258588256f26b104a33eaac588a4405bb14f580b1bb78c7202ce133750ae4c5ec898b91138caa931df66fe44af408eda24d81f95a93f019d6dee788f0c020cc8242f1856255d54fe119ae78fad8ab510f35e4975eafec717af8a084987713b472dc90e779ea135ffaf66bec3982700a1", 0x8a}, {&(0x7f0000001e40)="3a73de629b1681a9445a3088c92a7faa2533e3a60c97728aaf511a9e4d68aac95a68ff8bedab2cf0aa1f4f9347e8c7cd04b89479caa4aac8de273fd6db9376df47738a5e46dac4baef81f88359a7415b3b06a4d3e22536753157b7e8f84adca6bb9dffe82222230eef3c2ff30d4b5b907a0136c7fdc8b2b72ed65bc2a51699fa994b902ee937fa7a1946b83e8bc0642cbf6496d2af5a545d39d96a2b7ec277c3a9fc6695414c8c2e5198d36ae32a072d1acf2b1184c06f86176b3479b547bc3f0b7af173a63328b3e08153d66e77", 0xce}, {&(0x7f0000001f40)="6ce5f6701cb87867258b402688ab266585fd52392db626d9613821b7977b03b2f19f73eb13140ebe424e7783003b62a00ad006945a7e54a5b7553adb546bf7f8a7fe53256753e8ea90dbbd79baa18bb94f9d7e03238959191f7524724952cfe967de5aa958ef4fc2cf541bfbdcbbf259797944196c5965ea7d0c21697fe8b300a09423461628e109e53bf39dcb74535c24d5f9f1de8378ad08d8ea6a1d390834fbfab7cfa466318793deb5cfffcf3e1943bafff1104bf72c206a0f3b72091edfd92289ffd933fedcadf72af3144c879124c942a91498c26ace1384c96dde6bdb0ea7152364ffc3f61530912637040dfc", 0xf0}], 0x4, &(0x7f0000002080)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18}}], 0x30}}, {{&(0x7f00000020c0)=@xdp={0x2c, 0xe, r3, 0x2b}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002140)="968c3602f577d77bae7ea193d206ef861e697d1176b9264b5e6d8fac3f1bb94d9b6bb402e5fb58c203e646305eb47301a137a99cc114e0e3f4ec9da3e1a8d2f7b116a39b8f9d0b1906a3d58518d093c8bae82ff50a336038d7340a9c48c5eb3390faaf79f37f2b1cfd117ead1e244e2327df032f3ac8bf6d3c396e041d1c7699863fcbe190636833c9c8a7265214e694713486e762fb941051d726259e96cdd3f7aebd85a39bd9291e6bf645a2b25151916a386963c3942380d43050d23570878e36f7ac68e089c91921b70ccea6139909", 0xd1}, {&(0x7f0000002240)="374773ee0025093ddd82c87f0e3346ab95edb4c3d5b76b41e94341667fe9c4617ac7de2bfc3c6f63da84d642fa9000b122249ba4b05436a2d6dd6ebacefc21784e82a6291482e885beda340a564a7b02d2e6403eb693e644f4fc5ac4c88ddf5a350eaf394457bdb4a8b6b7646d862e19b87a8d4709802cc32b8dcf377dae69ddc946c4e57a3ec58c1d93d446ba5a5b1b081e421f7b25ab8e9c84288c3e610144d372d4d1d4534c5a018a1b47cb263328978eb0a9fe17f6e7bebfa72fe923bece051abc82533fed1970", 0xc9}, {&(0x7f0000002340)="fc4f8f3040514b57dfa5f222025a88264d71f2d6f2fd01c4a62b8d60c58b6552f1268d7e7f8ca49d08bbc7ce1b4688ccac632fe88aec5937d1f20c212908ae48950392c66d9e79fa82dedad93dacc1e2c2c93238bce0e5e1e440c6a7b3f2612040a172c33badc6bad9f4666378260b6866c3d2aac5bae60573c4d8ff0fb54949c8751245dc4d469c3f44140ebcc2e730890417b70068e49be75165908ac030b35a40d0acbe48c4326b1b72dd5e2a4cb1926f4efd56245177532c94936f3c5f65c4b3b05f55a0c172631cd297930c1af2", 0xd0}, {&(0x7f0000003800)="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", 0x1000}], 0x4}}], 0x4, 0x80) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f00000027c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xbeeae6e6f3e6ac24}}]}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): audit: type=1400 audit(1724071621.556:570): avc: denied { execute_no_trans } for pid=5342 comm="syz.0.436" path="/74/file0" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.760146][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.772000][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.782592][ T55] bond0 (unregistering): Released all slaves [ 81.861386][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.868583][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.876241][ T5308] bridge_slave_0: entered allmulticast mode [ 81.882895][ T5308] bridge_slave_0: entered promiscuous mode [ 81.892501][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.900375][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.907840][ T5308] bridge_slave_1: entered allmulticast mode [ 81.914638][ T5308] bridge_slave_1: entered promiscuous mode [ 81.937895][ T55] hsr_slave_0: left promiscuous mode [ 81.943850][ T55] hsr_slave_1: left promiscuous mode [ 81.949700][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.957513][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.966200][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.974190][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.984052][ T55] veth1_macvtap: left promiscuous mode [ 81.989674][ T55] veth0_macvtap: left promiscuous mode [ 81.995456][ T55] veth1_vlan: left promiscuous mode [ 82.000969][ T55] veth0_vlan: left promiscuous mode [ 82.096799][ T55] team0 (unregistering): Port device team_slave_1 removed [ 82.107145][ T55] team0 (unregistering): Port device team_slave_0 removed [ 82.160653][ T5308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.175087][ T5308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.201931][ T5308] team0: Port device team_slave_0 added [ 82.215633][ T5308] team0: Port device team_slave_1 added [ 82.224931][ T5356] loop0: detected capacity change from 0 to 512 [ 82.232466][ T5356] EXT4-fs: Ignoring removed orlov option [ 82.238844][ T5356] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.250598][ T5356] EXT4-fs (loop0): 1 truncate cleaned up [ 82.256860][ T5356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.269848][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.277108][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.303303][ T5308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.314678][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.321698][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.348212][ T5308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.364041][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 82.375684][ T5356] geneve2: entered promiscuous mode [ 82.393985][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 82.403610][ T5320] chnl_net:caif_netlink_parms(): no params data found [ 82.448631][ T5308] hsr_slave_0: entered promiscuous mode [ 82.456031][ T5308] hsr_slave_1: entered promiscuous mode [ 82.456088][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.473231][ T5308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.482247][ T5308] Cannot create hsr debugfs directory [ 82.496720][ T5370] loop0: detected capacity change from 0 to 128 [ 82.531423][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.538661][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.547720][ T5320] bridge_slave_0: entered allmulticast mode [ 82.554547][ T5320] bridge_slave_0: entered promiscuous mode [ 82.561646][ T5370] netlink: 'syz.0.442': attribute type 4 has an invalid length. [ 82.576779][ T5376] loop4: detected capacity change from 0 to 512 [ 82.582148][ T5377] netlink: 'syz.0.442': attribute type 4 has an invalid length. [ 82.591106][ T5376] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 82.610689][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.617989][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.625636][ T5320] bridge_slave_1: entered allmulticast mode [ 82.632529][ T5320] bridge_slave_1: entered promiscuous mode [ 82.667905][ T5320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.699945][ T5320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.728999][ T5320] team0: Port device team_slave_0 added [ 82.736047][ T5320] team0: Port device team_slave_1 added [ 82.758620][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.770999][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.778315][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.804780][ T5320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.817408][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.824406][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.850433][ T5320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.864900][ T5383] FAULT_INJECTION: forcing a failure. [ 82.864900][ T5383] name failslab, interval 1, probability 0, space 0, times 0 [ 82.877584][ T5383] CPU: 1 UID: 0 PID: 5383 Comm: syz.4.443 Not tainted 6.11.0-rc4-syzkaller #0 [ 82.886516][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 82.896569][ T5383] Call Trace: [ 82.899861][ T5383] [ 82.902787][ T5383] dump_stack_lvl+0xf2/0x150 [ 82.907521][ T5383] dump_stack+0x15/0x20 [ 82.911681][ T5383] should_fail_ex+0x229/0x230 [ 82.917094][ T5383] ? jbd2__journal_start+0xe8/0x3e0 [ 82.922375][ T5383] should_failslab+0x8f/0xb0 [ 82.927173][ T5383] kmem_cache_alloc_noprof+0x4c/0x290 [ 82.932629][ T5383] jbd2__journal_start+0xe8/0x3e0 [ 82.937744][ T5383] __ext4_journal_start_sb+0xd5/0x340 [ 82.943121][ T5383] ext4_alloc_file_blocks+0x258/0x6f0 [ 82.948488][ T5383] ext4_zero_range+0x77c/0x890 [ 82.953384][ T5383] ext4_fallocate+0x3af/0x1190 [ 82.958145][ T5383] vfs_fallocate+0x392/0x3e0 [ 82.962728][ T5383] do_vfs_ioctl+0x1481/0x1560 [ 82.967479][ T5383] ? __fget_files+0x1da/0x210 [ 82.972142][ T5383] __se_sys_ioctl+0x81/0x150 [ 82.976776][ T5383] __x64_sys_ioctl+0x43/0x50 [ 82.981537][ T5383] x64_sys_call+0x15cc/0x2d60 [ 82.986345][ T5383] do_syscall_64+0xc9/0x1c0 [ 82.990875][ T5383] ? clear_bhb_loop+0x55/0xb0 [ 82.995579][ T5383] ? clear_bhb_loop+0x55/0xb0 [ 83.000281][ T5383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.006203][ T5383] RIP: 0033:0x7f78d6c29e79 [ 83.010619][ T5383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.027852][ T29] audit: type=1400 audit(1724071622.716:571): avc: denied { mounton } for pid=5375 comm="syz.4.443" path="/proc/26/task" dev="proc" ino=14941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.030260][ T5383] RSP: 002b:00007f78d5865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.061084][ T5383] RAX: ffffffffffffffda RBX: 00007f78d6dc6130 RCX: 00007f78d6c29e79 [ 83.069238][ T5383] RDX: 0000000020000240 RSI: 0000000040305839 RDI: 0000000000000007 [ 83.077199][ T5383] RBP: 00007f78d5865090 R08: 0000000000000000 R09: 0000000000000000 [ 83.085158][ T5383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.093126][ T5383] R13: 0000000000000000 R14: 00007f78d6dc6130 R15: 00007ffe53a08088 [ 83.101099][ T5383] [ 83.126105][ T5320] hsr_slave_0: entered promiscuous mode [ 83.134139][ T5320] hsr_slave_1: entered promiscuous mode [ 83.142732][ T5320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.150564][ T5320] Cannot create hsr debugfs directory [ 83.160695][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.203973][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.311800][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.360198][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.372892][ T5308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.381803][ T5308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.389282][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.391584][ T5308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.407390][ T5308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.479158][ T55] bridge_slave_1: left allmulticast mode [ 83.484956][ T55] bridge_slave_1: left promiscuous mode [ 83.490656][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.503829][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.518686][ T55] bridge_slave_0: left allmulticast mode [ 83.524658][ T55] bridge_slave_0: left promiscuous mode [ 83.530473][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.542859][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.751529][ T5404] loop0: detected capacity change from 0 to 512 [ 83.759490][ T29] audit: type=1400 audit(1724071623.616:572): avc: denied { mounton } for pid=5403 comm="syz.0.450" path="/80/file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.786340][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.799501][ T5404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.813580][ T5404] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.826002][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.836559][ T55] bond0 (unregistering): Released all slaves [ 83.844039][ T5404] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.870256][ T5308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.899423][ T5308] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.911686][ T3348] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.919055][ T3348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.930798][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.937916][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.970985][ T5412] loop4: detected capacity change from 0 to 512 [ 84.000537][ T5412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.007670][ T5308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.013831][ T5412] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.035291][ T55] hsr_slave_0: left promiscuous mode [ 84.042272][ T55] hsr_slave_1: left promiscuous mode [ 84.051466][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.059375][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.067531][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.075305][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.084398][ T55] veth1_macvtap: left promiscuous mode [ 84.089945][ T55] veth0_macvtap: left promiscuous mode [ 84.095418][ T55] veth1_vlan: left promiscuous mode [ 84.100834][ T55] veth0_vlan: left promiscuous mode [ 84.118330][ T5149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.141451][ T5424] loop4: detected capacity change from 0 to 128 [ 84.199365][ T55] team0 (unregistering): Port device team_slave_1 removed [ 84.211287][ T55] team0 (unregistering): Port device team_slave_0 removed [ 84.225035][ T29] audit: type=1400 audit(1724071624.076:573): avc: denied { read } for pid=5428 comm="syz.4.454" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.249256][ T29] audit: type=1400 audit(1724071624.076:574): avc: denied { open } for pid=5428 comm="syz.4.454" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.275454][ T29] audit: type=1400 audit(1724071624.106:575): avc: denied { ioctl } for pid=5428 comm="syz.4.454" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.301878][ T5429] loop4: detected capacity change from 0 to 256 [ 84.308991][ T5429] msdos: Unknown parameter 'nodº' [ 84.325018][ T5320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.334793][ T29] audit: type=1326 audit(1724071624.186:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d6c29e79 code=0x7ffc0000 [ 84.358445][ T29] audit: type=1326 audit(1724071624.186:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f78d6c29e79 code=0x7ffc0000 [ 84.381720][ T29] audit: type=1326 audit(1724071624.186:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d6c29e79 code=0x7ffc0000 [ 84.407336][ T5320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.416733][ T5320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.445800][ T5320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.459311][ T5308] veth0_vlan: entered promiscuous mode [ 84.468464][ T5308] veth1_vlan: entered promiscuous mode [ 84.485725][ T5308] veth0_macvtap: entered promiscuous mode [ 84.500255][ T5308] veth1_macvtap: entered promiscuous mode [ 84.516342][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.527008][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.537040][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.547622][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.557462][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.568038][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.579253][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.593843][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.604565][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.614517][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.625183][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.635085][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.645901][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.657280][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.667752][ T5308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.676575][ T5308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.685420][ T5308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.694340][ T5308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.722757][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.742509][ T5320] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.756706][ T3348] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.763833][ T3348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.776771][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.784030][ T3268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.856233][ T5441] loop1: detected capacity change from 0 to 8192 [ 84.867371][ T5320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.946548][ T5320] veth0_vlan: entered promiscuous mode [ 84.960274][ T5320] veth1_vlan: entered promiscuous mode [ 84.976825][ T5320] veth0_macvtap: entered promiscuous mode [ 84.984897][ T5320] veth1_macvtap: entered promiscuous mode [ 84.993484][ T5461] loop1: detected capacity change from 0 to 256 [ 84.997646][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.010252][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.020100][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.030627][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.040491][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.050957][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.060836][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.071248][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.082028][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.093639][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.104225][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.114398][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.124882][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.134784][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.145266][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.155293][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.165840][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.176553][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.190140][ T5320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.199001][ T5320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.208011][ T5320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.216868][ T5320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.231337][ T5464] SELinux: failed to load policy [ 85.250523][ T5464] loop1: detected capacity change from 0 to 2048 [ 85.257404][ T5464] EXT4-fs: Invalid want_extra_isize 2 [ 85.320469][ T5472] netlink: 'syz.1.462': attribute type 2 has an invalid length. [ 85.398242][ T5489] loop4: detected capacity change from 0 to 512 [ 85.404808][ T5489] EXT4-fs: Ignoring removed orlov option [ 85.411553][ T5489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.423684][ T5489] EXT4-fs (loop4): 1 truncate cleaned up [ 85.432154][ T5489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.447994][ T5500] sg_write: data in/out 54/14 bytes for SCSI command 0x0-- guessing data in; [ 85.447994][ T5500] program syz.1.470 not setting count and/or reply_len properly [ 85.475399][ T5489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 85.486776][ T5489] geneve2: entered promiscuous mode [ 85.550835][ T5149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.677630][ T5522] syz.4.477[5522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.677745][ T5522] syz.4.477[5522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.735182][ T5529] loop4: detected capacity change from 0 to 512 [ 85.755448][ T5529] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.480: invalid block [ 85.768014][ T5529] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.480: couldn't read orphan inode 15 (err -117) [ 85.780479][ T5529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.797099][ T5529] program syz.4.480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.816704][ T5149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.190752][ T5537] loop2: detected capacity change from 0 to 512 [ 86.209153][ T5537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.221857][ T5537] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.274377][ T5320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.574537][ T5551] FAULT_INJECTION: forcing a failure. [ 86.574537][ T5551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.587969][ T5551] CPU: 0 UID: 0 PID: 5551 Comm: syz.1.485 Not tainted 6.11.0-rc4-syzkaller #0 [ 86.596951][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.607133][ T5551] Call Trace: [ 86.610540][ T5551] [ 86.613473][ T5551] dump_stack_lvl+0xf2/0x150 [ 86.618136][ T5551] dump_stack+0x15/0x20 [ 86.622436][ T5551] should_fail_ex+0x229/0x230 [ 86.627345][ T5551] should_fail+0xb/0x10 [ 86.631631][ T5551] should_fail_usercopy+0x1a/0x20 [ 86.637066][ T5551] _copy_to_user+0x1e/0xa0 [ 86.641500][ T5551] simple_read_from_buffer+0xa0/0x110 [ 86.646925][ T5551] proc_fail_nth_read+0xff/0x140 [ 86.651849][ T5551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.657403][ T5551] vfs_read+0x1a2/0x6e0 [ 86.661607][ T5551] ? __rcu_read_unlock+0x4e/0x70 [ 86.666530][ T5551] ? __fget_files+0x1da/0x210 [ 86.671200][ T5551] ksys_read+0xeb/0x1b0 [ 86.675373][ T5551] __x64_sys_read+0x42/0x50 [ 86.679890][ T5551] x64_sys_call+0x27d3/0x2d60 [ 86.684689][ T5551] do_syscall_64+0xc9/0x1c0 [ 86.689202][ T5551] ? clear_bhb_loop+0x55/0xb0 [ 86.693898][ T5551] ? clear_bhb_loop+0x55/0xb0 [ 86.698691][ T5551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.704686][ T5551] RIP: 0033:0x7fa805aa88bc [ 86.709097][ T5551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 86.728727][ T5551] RSP: 002b:00007fa8046df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.737135][ T5551] RAX: ffffffffffffffda RBX: 00007fa805c46130 RCX: 00007fa805aa88bc [ 86.745114][ T5551] RDX: 000000000000000f RSI: 00007fa8046df0a0 RDI: 0000000000000007 [ 86.753091][ T5551] RBP: 00007fa8046df090 R08: 0000000000000000 R09: 0000000000000000 [ 86.761093][ T5551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.769167][ T5551] R13: 0000000000000001 R14: 00007fa805c46130 R15: 00007ffd49c34c58 [ 86.777137][ T5551] [ 86.840306][ T5560] loop4: detected capacity change from 0 to 2048 [ 86.883704][ T5560] Alternate GPT is invalid, using primary GPT. [ 86.890385][ T5560] loop4: p2 p3 p7 [ 86.904841][ T5558] bond0: entered promiscuous mode [ 86.909968][ T5558] bond_slave_0: entered promiscuous mode [ 86.915906][ T5558] bond_slave_1: entered promiscuous mode [ 86.928135][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 86.928149][ T29] audit: type=1400 audit(1724071626.786:697): avc: denied { write } for pid=5557 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.959482][ T5566] loop0: detected capacity change from 0 to 512 [ 87.002776][ T5566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.008442][ T29] audit: type=1400 audit(1724071626.866:698): avc: denied { getopt } for pid=5557 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.017781][ T5566] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.046422][ T5557] bond0: left promiscuous mode [ 87.051311][ T5557] bond_slave_0: left promiscuous mode [ 87.056859][ T5557] bond_slave_1: left promiscuous mode [ 87.065736][ T5572] loop4: detected capacity change from 0 to 512 [ 87.073931][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.084442][ T5572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.091410][ T5576] loop1: detected capacity change from 0 to 512 [ 87.104072][ T5572] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.120779][ T5576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.137295][ T29] audit: type=1400 audit(1724071626.976:699): avc: denied { bind } for pid=5577 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.141861][ T5576] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.156770][ T29] audit: type=1400 audit(1724071626.976:700): avc: denied { name_bind } for pid=5577 comm="syz.0.492" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 87.187964][ T29] audit: type=1400 audit(1724071626.976:701): avc: denied { node_bind } for pid=5577 comm="syz.0.492" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 87.213174][ T29] audit: type=1400 audit(1724071627.036:702): avc: denied { ioctl } for pid=5571 comm="syz.4.491" path="/26/bus/cgroup.controllers" dev="loop4" ino=18 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.241531][ T5149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.264296][ T5589] syz.0.497[5589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.264388][ T5589] syz.0.497[5589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.276901][ T5589] FAULT_INJECTION: forcing a failure. [ 87.276901][ T5589] name failslab, interval 1, probability 0, space 0, times 0 [ 87.301050][ T5589] CPU: 0 UID: 0 PID: 5589 Comm: syz.0.497 Not tainted 6.11.0-rc4-syzkaller #0 [ 87.309922][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 87.319997][ T5589] Call Trace: [ 87.323258][ T5589] [ 87.326178][ T5589] dump_stack_lvl+0xf2/0x150 [ 87.330767][ T5589] dump_stack+0x15/0x20 [ 87.334919][ T5589] should_fail_ex+0x229/0x230 [ 87.340288][ T5589] ? __kvmalloc_node_noprof+0x72/0x170 [ 87.345834][ T5589] should_failslab+0x8f/0xb0 [ 87.350430][ T5589] __kmalloc_node_noprof+0xa8/0x380 [ 87.355631][ T5589] __kvmalloc_node_noprof+0x72/0x170 [ 87.361074][ T5589] alloc_fdtable+0xa2/0x190 [ 87.365592][ T5589] dup_fd+0x56d/0x6c0 [ 87.369626][ T5589] copy_files+0xc1/0x130 [ 87.373901][ T5589] copy_process+0xe45/0x1fc0 [ 87.378506][ T5589] kernel_clone+0x167/0x5e0 [ 87.383007][ T5589] ? vfs_write+0x5a5/0x900 [ 87.387455][ T5589] __x64_sys_clone+0xe8/0x120 [ 87.392240][ T5589] x64_sys_call+0x2d23/0x2d60 [ 87.396947][ T5589] do_syscall_64+0xc9/0x1c0 [ 87.401488][ T5589] ? clear_bhb_loop+0x55/0xb0 [ 87.406188][ T5589] ? clear_bhb_loop+0x55/0xb0 [ 87.410883][ T5589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.416787][ T5589] RIP: 0033:0x7fba31ec9e79 [ 87.421313][ T5589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.441427][ T5589] RSP: 002b:00007fba30b46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 87.450003][ T5589] RAX: ffffffffffffffda RBX: 00007fba32065f80 RCX: 00007fba31ec9e79 [ 87.457973][ T5589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.466008][ T5589] RBP: 00007fba30b47090 R08: 0000000000000000 R09: 0000000000000000 [ 87.473983][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.482000][ T5589] R13: 0000000000000000 R14: 00007fba32065f80 R15: 00007ffddb6ce9f8 [ 87.489987][ T5589] [ 87.521924][ T5601] loop3: detected capacity change from 0 to 256 [ 87.535871][ T5308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.561969][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 87.570390][ T5599] netlink: 'syz.2.499': attribute type 2 has an invalid length. [ 87.600435][ T5607] FAULT_INJECTION: forcing a failure. [ 87.600435][ T5607] name failslab, interval 1, probability 0, space 0, times 0 [ 87.613249][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz.4.503 Not tainted 6.11.0-rc4-syzkaller #0 [ 87.616756][ T29] audit: type=1400 audit(1724071627.446:703): avc: denied { getopt } for pid=5604 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.622093][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 87.622110][ T5607] Call Trace: [ 87.622119][ T5607] [ 87.622181][ T5607] dump_stack_lvl+0xf2/0x150 [ 87.663308][ T5607] dump_stack+0x15/0x20 [ 87.663369][ T5607] should_fail_ex+0x229/0x230 [ 87.663397][ T5607] ? kstrdup_const+0x3e/0x50 [ 87.663415][ T5607] should_failslab+0x8f/0xb0 [ 87.663442][ T5607] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 87.663472][ T5607] kstrdup+0x3a/0x80 [ 87.663522][ T5607] kstrdup_const+0x3e/0x50 [ 87.663537][ T5607] __kernfs_new_node+0x41/0x380 [ 87.663582][ T5607] ? make_kgid+0x115/0x310 [ 87.663604][ T5607] ? net_ns_get_ownership+0xae/0xd0 [ 87.663631][ T5607] ? __pfx_net_get_ownership+0x10/0x10 [ 87.663720][ T5607] kernfs_create_dir_ns+0xc8/0x1b0 [ 87.663744][ T5607] sysfs_create_dir_ns+0xd7/0x1e0 [ 87.663765][ T5607] kobject_add_internal+0x49e/0x7a0 [ 87.663792][ T5607] kobject_add+0xdc/0x160 [ 87.663826][ T5607] ? kobject_get+0x99/0xd0 [ 87.663848][ T5607] ? kobject_put+0x10a/0x180 [ 87.663870][ T5607] ? device_add+0x2fa/0x790 [ 87.663922][ T5607] device_add+0x309/0x790 [ 87.664009][ T5607] netdev_register_kobject+0x100/0x230 [ 87.664033][ T5607] register_netdevice+0x910/0xe30 [ 87.664093][ T5607] register_vlan_dev+0x222/0x470 [ 87.670458][ T29] audit: type=1400 audit(1724071627.476:704): avc: denied { create } for pid=5610 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.672884][ T5607] vlan_newlink+0x2e3/0x320 [ 87.672914][ T5607] ? __pfx_vlan_newlink+0x10/0x10 [ 87.672953][ T5607] rtnl_newlink+0xeff/0x1690 [ 87.680940][ T29] audit: type=1400 audit(1724071627.536:705): avc: denied { ioctl } for pid=5610 comm="syz.1.505" path="socket:[16719]" dev="sockfs" ino=16719 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.682081][ T5607] ? security_capable+0x64/0x80 [ 87.743854][ T29] audit: type=1400 audit(1724071627.586:706): avc: denied { map } for pid=5608 comm="syz.2.504" path="/proc/20/task/23/cmdline" dev="proc" ino=16727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 87.745083][ T5607] ? ns_capable+0x7d/0xb0 [ 87.859846][ T5607] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.859874][ T5607] rtnetlink_rcv_msg+0x6aa/0x710 [ 87.859915][ T5607] ? ref_tracker_free+0x3a5/0x410 [ 87.859937][ T5607] ? __dev_queue_xmit+0x161/0x1fe0 [ 87.860013][ T5607] netlink_rcv_skb+0x12c/0x230 [ 87.860210][ T5607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.860265][ T5607] rtnetlink_rcv+0x1c/0x30 [ 87.860283][ T5607] netlink_unicast+0x599/0x670 [ 87.860301][ T5607] netlink_sendmsg+0x5cc/0x6e0 [ 87.860321][ T5607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.860339][ T5607] __sock_sendmsg+0x140/0x180 [ 87.860460][ T5607] ____sys_sendmsg+0x312/0x410 [ 87.860515][ T5607] __sys_sendmsg+0x1e9/0x280 [ 87.860547][ T5607] __x64_sys_sendmsg+0x46/0x50 [ 87.860605][ T5607] x64_sys_call+0x2689/0x2d60 [ 87.860626][ T5607] do_syscall_64+0xc9/0x1c0 [ 87.860651][ T5607] ? clear_bhb_loop+0x55/0xb0 [ 87.860673][ T5607] ? clear_bhb_loop+0x55/0xb0 [ 87.860722][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.860744][ T5607] RIP: 0033:0x7f78d6c29e79 [ 87.860759][ T5607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.860775][ T5607] RSP: 002b:00007f78d58a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.860860][ T5607] RAX: ffffffffffffffda RBX: 00007f78d6dc5f80 RCX: 00007f78d6c29e79 [ 87.860870][ T5607] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 87.860881][ T5607] RBP: 00007f78d58a7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.860891][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.860902][ T5607] R13: 0000000000000000 R14: 00007f78d6dc5f80 R15: 00007ffe53a08088 [ 87.860916][ T5607] [ 87.861499][ T5607] kobject: kobject_add_internal failed for vlan2 (error: -12 parent: net) [ 87.885331][ T5605] loop0: detected capacity change from 0 to 512 [ 87.937638][ T5626] loop1: detected capacity change from 0 to 512 [ 87.940675][ T5605] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.502: bg 0: block 35: padding at end of block bitmap is not set [ 87.958769][ T5626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.962310][ T5605] EXT4-fs (loop0): Remounting filesystem read-only [ 87.983754][ T5626] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.993990][ T5605] EXT4-fs (loop0): 1 truncate cleaned up [ 88.062483][ T5637] loop3: detected capacity change from 0 to 512 [ 88.065746][ T5605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.080259][ T5308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.090879][ T5605] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 88.108840][ T55] nci: nci_rx_work: unknown MT 0x6 [ 88.116509][ T5605] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.165776][ T5645] netlink: 'syz.1.512': attribute type 14 has an invalid length. [ 88.174218][ T5637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.186890][ T5637] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.199445][ T5645] loop1: detected capacity change from 0 to 256 [ 88.205785][ T5645] vfat: Unknown parameter '0xffffffffffffffff' [ 88.256808][ T5650] usb usb9: usbfs: process 5650 (syz.1.515) did not claim interface 0 before use [ 88.279777][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 88.290073][ T5651] delete_channel: no stack [ 88.336671][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.341210][ T5656] loop1: detected capacity change from 0 to 8192 [ 88.411020][ T5662] loop0: detected capacity change from 0 to 2048 [ 88.418090][ T5662] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.430277][ T5662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.473238][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 88.507934][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 88.512138][ T5662] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.520: bg 0: block 234: padding at end of block bitmap is not set [ 88.534031][ T5662] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 88.547228][ T5662] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.547228][ T5662] [ 88.638575][ T55] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 360 with error 28 [ 88.651405][ T55] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.651405][ T55] [ 88.661457][ T55] EXT4-fs (loop0): Total free blocks count 0 [ 88.667496][ T55] EXT4-fs (loop0): Free/Dirty block details [ 88.673406][ T55] EXT4-fs (loop0): free_blocks=0 [ 88.679493][ T55] EXT4-fs (loop0): dirty_blocks=368 [ 88.684703][ T55] EXT4-fs (loop0): Block reservation details [ 88.729121][ T5674] loop0: detected capacity change from 0 to 256 [ 88.814734][ T5677] loop0: detected capacity change from 0 to 512 [ 88.829648][ T5677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.857500][ T5677] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.877913][ T5682] netlink: 'syz.4.524': attribute type 14 has an invalid length. [ 88.897786][ T5682] loop4: detected capacity change from 0 to 256 [ 88.904758][ T5682] vfat: Unknown parameter '0xffffffffffffffff' [ 88.949149][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.222686][ T5724] loop3: detected capacity change from 0 to 512 [ 89.235520][ T5726] netlink: 'syz.4.539': attribute type 14 has an invalid length. [ 89.247531][ T5726] loop4: detected capacity change from 0 to 256 [ 89.253995][ T5726] vfat: Unknown parameter '0xffffffffffffffff' [ 89.287491][ T5724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.307235][ T5724] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.385660][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.422489][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.444534][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.484412][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.504957][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.581747][ T5746] usb usb9: usbfs: process 5746 (syz.0.547) did not claim interface 0 before use [ 89.958059][ T5747] netlink: 'syz.2.532': attribute type 4 has an invalid length. [ 90.286015][ T5762] loop4: detected capacity change from 0 to 512 [ 90.293685][ T5762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.312390][ T5762] EXT4-fs (loop4): 1 orphan inode deleted [ 90.318465][ T5762] EXT4-fs (loop4): 1 truncate cleaned up [ 90.324972][ T5762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.341786][ T5768] netlink: 'syz.2.553': attribute type 14 has an invalid length. [ 90.351868][ T5768] loop2: detected capacity change from 0 to 256 [ 90.358347][ T5768] vfat: Unknown parameter '0xffffffffffffffff' [ 90.365156][ T5767] loop3: detected capacity change from 0 to 8192 [ 90.388228][ T5149] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.486979][ T5779] loop2: detected capacity change from 0 to 512 [ 90.509378][ T5779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.514634][ T5777] loop4: detected capacity change from 0 to 8192 [ 90.522129][ T5779] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.621976][ T5787] loop0: detected capacity change from 0 to 512 [ 90.634896][ T5787] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.646626][ T5787] EXT4-fs (loop0): 1 orphan inode deleted [ 90.652462][ T5787] EXT4-fs (loop0): 1 truncate cleaned up [ 90.659920][ T5787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.709710][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.994072][ T5801] loop0: detected capacity change from 0 to 512 [ 91.018951][ T5801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.032449][ T5801] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.066237][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.121957][ T5805] loop0: detected capacity change from 0 to 512 [ 91.129938][ T5805] EXT4-fs: Ignoring removed orlov option [ 91.136436][ T5805] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.151707][ T5805] EXT4-fs (loop0): 1 truncate cleaned up [ 91.168783][ T5805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.210470][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 91.223758][ T5805] geneve2: entered promiscuous mode [ 91.334199][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.334281][ T5320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 91.361078][ T5811] netlink: 'syz.0.567': attribute type 14 has an invalid length. [ 91.371370][ T5812] loop3: detected capacity change from 0 to 256 [ 91.380696][ T5811] loop0: detected capacity change from 0 to 256 [ 91.391604][ T5811] vfat: Unknown parameter '0xffffffffffffffff' [ 91.402926][ T5816] usb usb9: usbfs: process 5816 (syz.2.569) did not claim interface 0 before use [ 91.513389][ T5828] mmap: syz.2.574 (5828) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.611170][ T5839] netlink: 'syz.2.579': attribute type 4 has an invalid length. [ 91.641748][ T5839] netlink: 'syz.2.579': attribute type 4 has an invalid length. [ 91.755059][ T5845] loop2: detected capacity change from 0 to 512 [ 91.761995][ T5845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.778416][ T5845] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 91.779659][ T5847] loop3: detected capacity change from 0 to 256 [ 91.813462][ T5850] loop2: detected capacity change from 0 to 512 [ 91.828867][ T5850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.841490][ T5850] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.873056][ T5856] FAULT_INJECTION: forcing a failure. [ 91.873056][ T5856] name failslab, interval 1, probability 0, space 0, times 0 [ 91.885954][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz.3.584 Not tainted 6.11.0-rc4-syzkaller #0 [ 91.894826][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 91.904892][ T5856] Call Trace: [ 91.908214][ T5856] [ 91.911146][ T5856] dump_stack_lvl+0xf2/0x150 [ 91.915757][ T5856] dump_stack+0x15/0x20 [ 91.919944][ T5856] should_fail_ex+0x229/0x230 [ 91.924638][ T5856] ? xfrm_policy_inexact_alloc_bin+0x12a/0xa10 [ 91.930851][ T5856] should_failslab+0x8f/0xb0 [ 91.935449][ T5856] __kmalloc_cache_noprof+0x4b/0x2a0 [ 91.940806][ T5856] xfrm_policy_inexact_alloc_bin+0x12a/0xa10 [ 91.946881][ T5856] xfrm_policy_inexact_insert+0x28/0x8a0 [ 91.952536][ T5856] ? perf_trace_run_bpf_submit+0xe7/0x110 [ 91.958393][ T5856] ? xfrm_policy_alloc+0x62/0x1c0 [ 91.963419][ T5856] ? policy_hash_bysel+0xab/0x310 [ 91.968442][ T5856] xfrm_policy_insert+0xaa/0x830 [ 91.973427][ T5856] ? init_timer_key+0x7a/0x170 [ 91.978190][ T5856] pfkey_spdadd+0x80e/0x900 [ 91.982706][ T5856] pfkey_sendmsg+0x6f9/0x970 [ 91.987351][ T5856] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 91.992583][ T5856] __sock_sendmsg+0x140/0x180 [ 91.997273][ T5856] ____sys_sendmsg+0x312/0x410 [ 92.002092][ T5856] __sys_sendmsg+0x1e9/0x280 [ 92.006764][ T5856] __x64_sys_sendmsg+0x46/0x50 [ 92.011620][ T5856] x64_sys_call+0x2689/0x2d60 [ 92.016383][ T5856] do_syscall_64+0xc9/0x1c0 [ 92.020959][ T5856] ? clear_bhb_loop+0x55/0xb0 [ 92.025647][ T5856] ? clear_bhb_loop+0x55/0xb0 [ 92.030400][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.036300][ T5856] RIP: 0033:0x7f49a7e49e79 [ 92.040794][ T5856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.060613][ T5856] RSP: 002b:00007f49a6ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.069043][ T5856] RAX: ffffffffffffffda RBX: 00007f49a7fe5f80 RCX: 00007f49a7e49e79 [ 92.077047][ T5856] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000006 [ 92.085057][ T5856] RBP: 00007f49a6ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.093034][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.101161][ T5856] R13: 0000000000000000 R14: 00007f49a7fe5f80 R15: 00007ffc15976418 [ 92.109447][ T5856] [ 92.124021][ T5320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.192558][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 92.192572][ T29] audit: type=1400 audit(1724071632.046:753): avc: denied { name_bind } for pid=5860 comm="syz.2.586" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.227832][ T29] audit: type=1400 audit(1724071632.076:754): avc: denied { read } for pid=5860 comm="syz.2.586" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.276513][ T5867] loop2: detected capacity change from 0 to 256 [ 92.285025][ T29] audit: type=1400 audit(1724071632.136:755): avc: denied { mounton } for pid=5860 comm="syz.2.586" path="/27/bus/bus" dev="loop2" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 92.456189][ T5873] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 92.519081][ T29] audit: type=1400 audit(1724071632.376:756): avc: denied { read write } for pid=5876 comm="syz.1.593" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 92.542861][ T29] audit: type=1400 audit(1724071632.376:757): avc: denied { open } for pid=5876 comm="syz.1.593" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 92.600669][ T29] audit: type=1400 audit(1724071632.456:758): avc: denied { create } for pid=5863 comm="syz.3.587" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.622719][ T29] audit: type=1400 audit(1724071632.456:759): avc: denied { read } for pid=5863 comm="syz.3.587" name="file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.645359][ T29] audit: type=1400 audit(1724071632.456:760): avc: denied { open } for pid=5863 comm="syz.3.587" path="/31/file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.714299][ T5890] loop1: detected capacity change from 0 to 512 [ 92.718573][ T5889] loop0: detected capacity change from 0 to 1024 [ 92.741637][ T5890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.761730][ T5890] EXT4-fs (loop1): 1 truncate cleaned up [ 92.768336][ T5889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.772178][ T5890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.787090][ T5889] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.595: missing EA_INODE flag [ 92.804101][ T29] audit: type=1400 audit(1724071632.636:761): avc: denied { write } for pid=5887 comm="syz.0.595" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.809755][ T5889] EXT4-fs (loop0): Remounting filesystem read-only [ 92.897180][ T29] audit: type=1400 audit(1724071632.736:762): avc: denied { execmem } for pid=5887 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.008774][ T5901] loop3: detected capacity change from 0 to 2048 [ 93.024710][ T5903] Cannot find del_set index 2 as target [ 93.032341][ T5903] loop1: detected capacity change from 0 to 164 [ 93.040230][ T5903] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 93.059898][ T5901] Alternate GPT is invalid, using primary GPT. [ 93.066288][ T5901] loop3: p2 p3 p7 [ 93.272453][ T3348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.301735][ T5913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.603'. [ 93.354708][ T5916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.606'. [ 93.369152][ T5913] loop1: detected capacity change from 0 to 512 [ 93.377457][ T3348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.456386][ T3348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.489387][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'. [ 93.498690][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'. [ 93.507650][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 93.530791][ T3348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.560333][ T5935] loop3: detected capacity change from 0 to 512 [ 93.599764][ T5935] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.688825][ T3348] bridge_slave_1: left allmulticast mode [ 93.694564][ T3348] bridge_slave_1: left promiscuous mode [ 93.700272][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.728845][ T3348] bridge_slave_0: left allmulticast mode [ 93.734541][ T3348] bridge_slave_0: left promiscuous mode [ 93.740422][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.787514][ T3268] nci: nci_rx_work: unknown MT 0x6 [ 93.889803][ T5947] FAULT_INJECTION: forcing a failure. [ 93.889803][ T5947] name failslab, interval 1, probability 0, space 0, times 0 [ 93.902496][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.0.610 Not tainted 6.11.0-rc4-syzkaller #0 [ 93.911397][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 93.921492][ T5947] Call Trace: [ 93.924793][ T5947] [ 93.927714][ T5947] dump_stack_lvl+0xf2/0x150 [ 93.932361][ T5947] dump_stack+0x15/0x20 [ 93.936551][ T5947] should_fail_ex+0x229/0x230 [ 93.941353][ T5947] ? __alloc_skb+0x10b/0x310 [ 93.945992][ T5947] should_failslab+0x8f/0xb0 [ 93.950690][ T5947] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 93.956505][ T5947] __alloc_skb+0x10b/0x310 [ 93.960911][ T5947] audit_log_start+0x368/0x6b0 [ 93.965663][ T5947] ? __bpf_prog_run32+0x74/0xa0 [ 93.970514][ T5947] audit_seccomp+0x4b/0x130 [ 93.975048][ T5947] __seccomp_filter+0x6fa/0x1180 [ 93.979977][ T5947] ? proc_fail_nth_write+0x130/0x160 [ 93.985253][ T5947] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.990882][ T5947] ? vfs_write+0x5a5/0x900 [ 93.995337][ T5947] ? __fget_files+0x1da/0x210 [ 94.000005][ T5947] __secure_computing+0x9f/0x1c0 [ 94.004935][ T5947] syscall_trace_enter+0xd1/0x1f0 [ 94.009993][ T5947] ? fpregs_assert_state_consistent+0x83/0xa0 [ 94.016199][ T5947] do_syscall_64+0xaa/0x1c0 [ 94.020800][ T5947] ? clear_bhb_loop+0x55/0xb0 [ 94.025522][ T5947] ? clear_bhb_loop+0x55/0xb0 [ 94.030249][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.036171][ T5947] RIP: 0033:0x7fba31ec9e79 [ 94.040611][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.060468][ T5947] RSP: 002b:00007fba30b47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b0 [ 94.068886][ T5947] RAX: ffffffffffffffda RBX: 00007fba32065f80 RCX: 00007fba31ec9e79 [ 94.076888][ T5947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.084935][ T5947] RBP: 00007fba30b47090 R08: 0000000000000000 R09: 0000000000000000 [ 94.092906][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.100968][ T5947] R13: 0000000000000000 R14: 00007fba32065f80 R15: 00007ffddb6ce9f8 [ 94.108939][ T5947] [ 94.144188][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.156791][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.172195][ T3348] bond0 (unregistering): Released all slaves [ 94.216298][ T5917] chnl_net:caif_netlink_parms(): no params data found [ 94.253853][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.260975][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.268500][ T5917] bridge_slave_0: entered allmulticast mode [ 94.275293][ T5917] bridge_slave_0: entered promiscuous mode [ 94.282698][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.289850][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.296965][ T5917] bridge_slave_1: entered allmulticast mode [ 94.303499][ T5917] bridge_slave_1: entered promiscuous mode [ 94.324913][ T3348] hsr_slave_0: left promiscuous mode [ 94.334396][ T3348] hsr_slave_1: left promiscuous mode [ 94.341475][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.348944][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.356620][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.364208][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.374018][ T3348] veth1_macvtap: left promiscuous mode [ 94.379686][ T3348] veth0_macvtap: left promiscuous mode [ 94.385298][ T3348] veth1_vlan: left promiscuous mode [ 94.385530][ T5793] syz.4.558 (5793) used greatest stack depth: 9944 bytes left [ 94.390819][ T3348] veth0_vlan: left promiscuous mode [ 94.473910][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 94.484091][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 94.518287][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.529437][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.555785][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 94.565238][ T5966] delete_channel: no stack [ 94.578502][ T5917] team0: Port device team_slave_0 added [ 94.592120][ T5917] team0: Port device team_slave_1 added [ 94.611149][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.618089][ T5975] loop3: detected capacity change from 0 to 512 [ 94.618274][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.650376][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.662455][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.668450][ T5978] loop0: detected capacity change from 0 to 512 [ 94.669485][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.701637][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.704054][ T5975] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.729281][ T5978] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.754669][ T5917] hsr_slave_0: entered promiscuous mode [ 94.761952][ T5917] hsr_slave_1: entered promiscuous mode [ 94.768079][ T5917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.775719][ T5917] Cannot create hsr debugfs directory [ 94.795601][ T5983] FAULT_INJECTION: forcing a failure. [ 94.795601][ T5983] name failslab, interval 1, probability 0, space 0, times 0 [ 94.808428][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.3.621 Not tainted 6.11.0-rc4-syzkaller #0 [ 94.817283][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 94.827409][ T5983] Call Trace: [ 94.830687][ T5983] [ 94.833622][ T5983] dump_stack_lvl+0xf2/0x150 [ 94.838283][ T5983] dump_stack+0x15/0x20 [ 94.842540][ T5983] should_fail_ex+0x229/0x230 [ 94.847233][ T5983] ? __kvmalloc_node_noprof+0x72/0x170 [ 94.852707][ T5983] should_failslab+0x8f/0xb0 [ 94.857465][ T5983] __kmalloc_node_noprof+0xa8/0x380 [ 94.862754][ T5983] __kvmalloc_node_noprof+0x72/0x170 [ 94.868173][ T5983] alloc_netdev_mqs+0x6b6/0x8d0 [ 94.873044][ T5983] rtnl_create_link+0x233/0x680 [ 94.877966][ T5983] rtnl_newlink+0xe12/0x1690 [ 94.882615][ T5983] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 94.888879][ T5983] ? _raw_spin_unlock+0x26/0x50 [ 94.893978][ T5983] ? __mutex_lock+0x221/0x8e0 [ 94.898687][ T5983] ? __pfx_rtnl_newlink+0x10/0x10 [ 94.903759][ T5983] rtnetlink_rcv_msg+0x6aa/0x710 [ 94.908813][ T5983] ? ref_tracker_free+0x3a5/0x410 [ 94.913855][ T5983] ? __dev_queue_xmit+0x161/0x1fe0 [ 94.919057][ T5983] netlink_rcv_skb+0x12c/0x230 [ 94.923993][ T5983] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.930287][ T5983] rtnetlink_rcv+0x1c/0x30 [ 94.934907][ T5983] netlink_unicast+0x599/0x670 [ 94.939779][ T5983] netlink_sendmsg+0x5cc/0x6e0 [ 94.944568][ T5983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.950084][ T5983] __sock_sendmsg+0x140/0x180 [ 94.954865][ T5983] ____sys_sendmsg+0x312/0x410 [ 94.959655][ T5983] __sys_sendmsg+0x1e9/0x280 [ 94.964259][ T5983] __x64_sys_sendmsg+0x46/0x50 [ 94.969049][ T5983] x64_sys_call+0x2689/0x2d60 [ 94.973745][ T5983] do_syscall_64+0xc9/0x1c0 [ 94.978304][ T5983] ? clear_bhb_loop+0x55/0xb0 [ 94.983072][ T5983] ? clear_bhb_loop+0x55/0xb0 [ 94.988000][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.994043][ T5983] RIP: 0033:0x7f49a7e49e79 [ 94.998465][ T5983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.018157][ T5983] RSP: 002b:00007f49a6ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.026766][ T5983] RAX: ffffffffffffffda RBX: 00007f49a7fe5f80 RCX: 00007f49a7e49e79 [ 95.034784][ T5983] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 95.042759][ T5983] RBP: 00007f49a6ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.050795][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.058781][ T5983] R13: 0000000000000000 R14: 00007f49a7fe5f80 R15: 00007ffc15976418 [ 95.066754][ T5983] [ 95.200047][ T3348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.312040][ T3348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.390855][ T3348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.469139][ T3348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.606732][ T3348] bridge_slave_1: left allmulticast mode [ 95.612440][ T3348] bridge_slave_1: left promiscuous mode [ 95.618192][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.658258][ T3348] bridge_slave_0: left allmulticast mode [ 95.664045][ T3348] bridge_slave_0: left promiscuous mode [ 95.669878][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.674328][ T6010] loop0: detected capacity change from 0 to 512 [ 95.690413][ T6010] EXT4-fs mount: 8 callbacks suppressed [ 95.690434][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 95.709770][ T6010] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.735301][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 95.789343][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.799680][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.809659][ T3348] bond0 (unregistering): Released all slaves [ 95.871537][ T3335] hid (null): unknown global tag 0xe [ 95.877742][ T3335] hid-generic 0002:0F8C:0002.0001: unknown main item tag 0xe [ 95.885252][ T3335] hid-generic 0002:0F8C:0002.0001: unknown main item tag 0x7 [ 95.885300][ T5989] chnl_net:caif_netlink_parms(): no params data found [ 95.892852][ T3335] hid-generic 0002:0F8C:0002.0001: unknown global tag 0xe [ 95.907272][ T3335] hid-generic 0002:0F8C:0002.0001: item 0 0 1 14 parsing failed [ 95.915266][ T3335] hid-generic 0002:0F8C:0002.0001: probe with driver hid-generic failed with error -22 [ 95.959323][ T6034] loop3: detected capacity change from 0 to 512 [ 95.967420][ T3348] hsr_slave_0: left promiscuous mode [ 95.973546][ T3348] hsr_slave_1: left promiscuous mode [ 95.980149][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.982273][ T6034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.987989][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.001741][ T6034] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.018732][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.026314][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.036893][ T3348] veth1_macvtap: left promiscuous mode [ 96.042608][ T3348] veth0_macvtap: left promiscuous mode [ 96.048272][ T3348] veth1_vlan: left promiscuous mode [ 96.053684][ T3348] veth0_vlan: left promiscuous mode [ 96.059917][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.132443][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 96.145517][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 96.183376][ T5917] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.202216][ T6040] validate_nla: 1 callbacks suppressed [ 96.202233][ T6040] netlink: 'syz.0.636': attribute type 4 has an invalid length. [ 96.219470][ T6043] netlink: 'syz.0.636': attribute type 4 has an invalid length. [ 96.231112][ T5917] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.243244][ T5917] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.253101][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.254964][ T6047] loop3: detected capacity change from 0 to 512 [ 96.260597][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.274634][ T5989] bridge_slave_0: entered allmulticast mode [ 96.281364][ T5989] bridge_slave_0: entered promiscuous mode [ 96.288842][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.296046][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.303489][ T5989] bridge_slave_1: entered allmulticast mode [ 96.304856][ T6047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.311177][ T5989] bridge_slave_1: entered promiscuous mode [ 96.322564][ T6047] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.338940][ T5917] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.351761][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.354847][ T6051] loop0: detected capacity change from 0 to 512 [ 96.378989][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.389832][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.400523][ T6051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.421667][ T6051] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.443074][ T5989] team0: Port device team_slave_0 added [ 96.450521][ T5989] team0: Port device team_slave_1 added [ 96.461001][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.643'. [ 96.471877][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.492166][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.499698][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.525870][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.541147][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.542043][ T6063] loop3: detected capacity change from 0 to 512 [ 96.558357][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.565502][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.575194][ T6065] loop0: detected capacity change from 0 to 512 [ 96.591752][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.618427][ T5989] hsr_slave_0: entered promiscuous mode [ 96.619884][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.626199][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.647548][ T5989] hsr_slave_1: entered promiscuous mode [ 96.650281][ T6063] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.656381][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.684909][ T5917] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.700384][ T6071] loop0: detected capacity change from 0 to 512 [ 96.705826][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.706937][ T6071] ext4: Unknown parameter 'fsmagic' [ 96.749421][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.756557][ T3268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.765019][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.772129][ T3268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.801010][ T6073] netlink: 'syz.3.648': attribute type 4 has an invalid length. [ 96.828896][ T6073] netlink: 'syz.3.648': attribute type 4 has an invalid length. [ 96.850276][ T6071] loop0: detected capacity change from 0 to 128 [ 96.864579][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.884871][ T6071] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.900220][ T6080] loop3: detected capacity change from 0 to 512 [ 96.913924][ T6071] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.934543][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.944430][ T4463] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.956689][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.973326][ T6080] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.007195][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.028284][ T6096] FAULT_INJECTION: forcing a failure. [ 97.028284][ T6096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.041455][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.3.652 Not tainted 6.11.0-rc4-syzkaller #0 [ 97.049174][ T5917] veth0_vlan: entered promiscuous mode [ 97.050383][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 97.050396][ T6096] Call Trace: [ 97.050402][ T6096] [ 97.050408][ T6096] dump_stack_lvl+0xf2/0x150 [ 97.050500][ T6096] dump_stack+0x15/0x20 [ 97.058637][ T5917] veth1_vlan: entered promiscuous mode [ 97.066059][ T6096] should_fail_ex+0x229/0x230 [ 97.066095][ T6096] should_fail+0xb/0x10 [ 97.066176][ T6096] should_fail_usercopy+0x1a/0x20 [ 97.066206][ T6096] _copy_from_user+0x1e/0xd0 [ 97.080349][ T5917] veth0_macvtap: entered promiscuous mode [ 97.081175][ T6096] copy_msghdr_from_user+0x54/0x2a0 [ 97.081212][ T6096] __sys_sendmsg+0x17d/0x280 [ 97.081242][ T6096] __x64_sys_sendmsg+0x46/0x50 [ 97.081268][ T6096] x64_sys_call+0x2689/0x2d60 [ 97.088401][ T5917] veth1_macvtap: entered promiscuous mode [ 97.091384][ T6096] do_syscall_64+0xc9/0x1c0 [ 97.091454][ T6096] ? clear_bhb_loop+0x55/0xb0 [ 97.091480][ T6096] ? clear_bhb_loop+0x55/0xb0 [ 97.091557][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.102814][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.105225][ T6096] RIP: 0033:0x7f49a7e49e79 [ 97.105304][ T6096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.105331][ T6096] RSP: 002b:00007f49a6ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.105359][ T6096] RAX: ffffffffffffffda RBX: 00007f49a7fe5f80 RCX: 00007f49a7e49e79 [ 97.105369][ T6096] RDX: 0000000004008000 RSI: 0000000020000140 RDI: 0000000000000003 [ 97.111286][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.116417][ T6096] RBP: 00007f49a6ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.116430][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.116442][ T6096] R13: 0000000000000000 R14: 00007f49a7fe5f80 R15: 00007ffc15976418 [ 97.116460][ T6096] [ 97.252557][ T6105] loop3: detected capacity change from 0 to 512 [ 97.255368][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.258812][ T6105] EXT4-fs: Ignoring removed orlov option [ 97.264692][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.281237][ T6105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.290741][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.304395][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 97.304476][ T29] audit: type=1400 audit(1724071637.156:797): avc: denied { bind } for pid=6097 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.311068][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.319886][ T29] audit: type=1400 audit(1724071637.176:798): avc: denied { setopt } for pid=6097 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.338129][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.346301][ T29] audit: type=1400 audit(1724071637.176:799): avc: denied { write } for pid=6097 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.373593][ T6105] EXT4-fs (loop3): 1 truncate cleaned up [ 97.399203][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.429352][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 97.442120][ T6105] geneve2: entered promiscuous mode [ 97.475344][ T5989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.487142][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.497625][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.507441][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.517947][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.527764][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.538257][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.549719][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.557611][ T5989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.574359][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.576445][ T5989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.593155][ T5989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.610969][ T5917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.619789][ T5917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.628532][ T5917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.637280][ T5917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.663545][ T6111] netlink: 'syz.3.657': attribute type 4 has an invalid length. [ 97.690043][ T6111] netlink: 'syz.3.657': attribute type 4 has an invalid length. [ 97.737701][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.752529][ T6115] FAULT_INJECTION: forcing a failure. [ 97.752529][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 97.765224][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.1.658 Not tainted 6.11.0-rc4-syzkaller #0 [ 97.769853][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.774050][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 97.783300][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.790901][ T6115] Call Trace: [ 97.790910][ T6115] [ 97.797968][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.801183][ T6115] dump_stack_lvl+0xf2/0x150 [ 97.816137][ T6115] dump_stack+0x15/0x20 [ 97.820307][ T6115] should_fail_ex+0x229/0x230 [ 97.825606][ T6115] ? __kernfs_new_node+0x6a/0x380 [ 97.830657][ T6115] should_failslab+0x8f/0xb0 [ 97.835450][ T6115] kmem_cache_alloc_noprof+0x4c/0x290 [ 97.840855][ T6115] __kernfs_new_node+0x6a/0x380 [ 97.845981][ T6115] ? rb_insert_color+0x6a/0x290 [ 97.850840][ T6115] ? up_write+0x30/0xf0 [ 97.855083][ T6115] ? kernfs_activate+0x256/0x270 [ 97.860064][ T6115] kernfs_new_node+0xc8/0x140 [ 97.864757][ T6115] __kernfs_create_file+0x49/0x180 [ 97.869965][ T6115] ? __pfx_slab_attr_store+0x10/0x10 [ 97.875315][ T6115] sysfs_add_file_mode_ns+0x136/0x1c0 [ 97.880748][ T6115] internal_create_group+0x464/0x9b0 [ 97.886038][ T6115] sysfs_create_group+0x1f/0x30 [ 97.891073][ T6115] sysfs_slab_add+0x157/0x290 [ 97.895763][ T6115] __kmem_cache_create+0x45e/0x5f0 [ 97.900882][ T6115] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 97.906579][ T6115] kmem_cache_create_usercopy+0x150/0x2c0 [ 97.912524][ T6115] p9_client_create+0x81c/0xa80 [ 97.917455][ T6115] v9fs_session_init+0xf9/0xda0 [ 97.922367][ T6115] ? __rcu_read_unlock+0x4e/0x70 [ 97.927295][ T6115] ? __rcu_read_unlock+0x4e/0x70 [ 97.932225][ T6115] ? v9fs_mount+0x53/0x560 [ 97.936630][ T6115] ? should_failslab+0x8f/0xb0 [ 97.941401][ T6115] v9fs_mount+0x69/0x560 [ 97.945657][ T6115] ? __pfx_v9fs_mount+0x10/0x10 [ 97.950544][ T6115] legacy_get_tree+0x77/0xd0 [ 97.955218][ T6115] vfs_get_tree+0x56/0x1d0 [ 97.959627][ T6115] do_new_mount+0x227/0x690 [ 97.964200][ T6115] path_mount+0x49b/0xb30 [ 97.968524][ T6115] __se_sys_mount+0x27c/0x2d0 [ 97.973277][ T6115] __x64_sys_mount+0x67/0x80 [ 97.977875][ T6115] x64_sys_call+0x203e/0x2d60 [ 97.982555][ T6115] do_syscall_64+0xc9/0x1c0 [ 97.987055][ T6115] ? clear_bhb_loop+0x55/0xb0 [ 97.991799][ T6115] ? clear_bhb_loop+0x55/0xb0 [ 97.996486][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.002380][ T6115] RIP: 0033:0x7fa805aa9e79 [ 98.006941][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.026716][ T6115] RSP: 002b:00007fa804721038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.035131][ T6115] RAX: ffffffffffffffda RBX: 00007fa805c45f80 RCX: 00007fa805aa9e79 [ 98.043180][ T6115] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 98.051191][ T6115] RBP: 00007fa804721090 R08: 0000000020000440 R09: 0000000000000000 [ 98.059271][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.067289][ T6115] R13: 0000000000000000 R14: 00007fa805c45f80 R15: 00007ffd49c34c58 [ 98.075247][ T6115] [ 98.080676][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.087860][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.103592][ T6121] loop3: detected capacity change from 0 to 512 [ 98.116151][ T6115] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 98.124210][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.1.658 Not tainted 6.11.0-rc4-syzkaller #0 [ 98.133206][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 98.143264][ T6115] Call Trace: [ 98.146602][ T6115] [ 98.149526][ T6115] dump_stack_lvl+0xf2/0x150 [ 98.154138][ T6115] dump_stack+0x15/0x20 [ 98.158400][ T6115] kmem_cache_create_usercopy+0x239/0x2c0 [ 98.164190][ T6115] p9_client_create+0x81c/0xa80 [ 98.169136][ T6115] v9fs_session_init+0xf9/0xda0 [ 98.174206][ T6115] ? __rcu_read_unlock+0x4e/0x70 [ 98.179226][ T6115] ? __rcu_read_unlock+0x4e/0x70 [ 98.184171][ T6115] ? v9fs_mount+0x53/0x560 [ 98.188698][ T6115] ? should_failslab+0x8f/0xb0 [ 98.193482][ T6115] v9fs_mount+0x69/0x560 [ 98.197723][ T6115] ? __pfx_v9fs_mount+0x10/0x10 [ 98.202569][ T6115] legacy_get_tree+0x77/0xd0 [ 98.207158][ T6115] vfs_get_tree+0x56/0x1d0 [ 98.211564][ T6115] do_new_mount+0x227/0x690 [ 98.216073][ T6115] path_mount+0x49b/0xb30 [ 98.220428][ T6115] __se_sys_mount+0x27c/0x2d0 [ 98.225166][ T6115] __x64_sys_mount+0x67/0x80 [ 98.229877][ T6115] x64_sys_call+0x203e/0x2d60 [ 98.234626][ T6115] do_syscall_64+0xc9/0x1c0 [ 98.239145][ T6115] ? clear_bhb_loop+0x55/0xb0 [ 98.243876][ T6115] ? clear_bhb_loop+0x55/0xb0 [ 98.248579][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.254597][ T6115] RIP: 0033:0x7fa805aa9e79 [ 98.259117][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.278918][ T6115] RSP: 002b:00007fa804721038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.287383][ T6115] RAX: ffffffffffffffda RBX: 00007fa805c45f80 RCX: 00007fa805aa9e79 [ 98.295425][ T6115] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 98.303404][ T6115] RBP: 00007fa804721090 R08: 0000000020000440 R09: 0000000000000000 [ 98.311408][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.319392][ T6115] R13: 0000000000000000 R14: 00007fa805c45f80 R15: 00007ffd49c34c58 [ 98.327364][ T6115] [ 98.341643][ T6115] 9pnet: p9_errstr2errno: server reported unknown error Í18446744073709551615 [ 98.344407][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.364485][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.384458][ T6121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.409206][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.415469][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.427310][ T6121] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.442398][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.456199][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.485053][ T6136] loop2: detected capacity change from 0 to 512 [ 98.500393][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.509728][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.510965][ T6136] EXT4-fs: Ignoring removed orlov option [ 98.525170][ T6136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.565937][ T6136] EXT4-fs (loop2): 1 truncate cleaned up [ 98.590443][ T6136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.611967][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.623428][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 98.635148][ T6136] geneve2: entered promiscuous mode [ 98.659690][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.704003][ T5989] veth0_vlan: entered promiscuous mode [ 98.722549][ T5989] veth1_vlan: entered promiscuous mode [ 98.738583][ T29] audit: type=1326 audit(1724071638.596:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 98.745233][ T6156] FAULT_INJECTION: forcing a failure. [ 98.745233][ T6156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.765070][ T5989] veth0_macvtap: entered promiscuous mode [ 98.775154][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.3.667 Not tainted 6.11.0-rc4-syzkaller #0 [ 98.789676][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 98.791473][ T5989] veth1_macvtap: entered promiscuous mode [ 98.799735][ T6156] Call Trace: [ 98.799785][ T6156] [ 98.805732][ T29] audit: type=1326 audit(1724071638.596:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 98.808756][ T6156] dump_stack_lvl+0xf2/0x150 [ 98.808807][ T6156] dump_stack+0x15/0x20 [ 98.811759][ T29] audit: type=1326 audit(1724071638.596:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 98.835336][ T6156] should_fail_ex+0x229/0x230 [ 98.835414][ T6156] should_fail+0xb/0x10 [ 98.835436][ T6156] should_fail_usercopy+0x1a/0x20 [ 98.840043][ T29] audit: type=1326 audit(1724071638.596:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 98.844144][ T6156] _copy_to_user+0x1e/0xa0 [ 98.867536][ T29] audit: type=1326 audit(1724071638.596:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49a7e48810 code=0x7ffc0000 [ 98.872122][ T6156] put_itimerspec64+0xd5/0x120 [ 98.876264][ T29] audit: type=1326 audit(1724071638.596:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49a7e4895f code=0x7ffc0000 [ 98.881360][ T6156] __x64_sys_timerfd_gettime+0x80/0xc0 [ 98.881411][ T6156] x64_sys_call+0x2d19/0x2d60 [ 98.881436][ T6156] do_syscall_64+0xc9/0x1c0 [ 98.904776][ T29] audit: type=1326 audit(1724071638.596:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 98.909130][ T6156] ? clear_bhb_loop+0x55/0xb0 [ 98.941598][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.960479][ T6156] ? clear_bhb_loop+0x55/0xb0 [ 98.966027][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.966041][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.970680][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.970710][ T6156] RIP: 0033:0x7f49a7e49e79 [ 98.975178][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.975191][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.998319][ T6156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.003076][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.013538][ T6156] RSP: 002b:00007f49a6ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 99.013558][ T6156] RAX: ffffffffffffffda RBX: 00007f49a7fe5f80 RCX: 00007f49a7e49e79 [ 99.018247][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.027999][ T6156] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 99.028014][ T6156] RBP: 00007f49a6ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.028027][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.038465][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.044305][ T6156] R13: 0000000000000000 R14: 00007f49a7fe5f80 R15: 00007ffc15976418 [ 99.055177][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.058592][ T6156] [ 99.198847][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.209450][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.219381][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.229915][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.238445][ T5917] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.239956][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.259322][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.269323][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.279850][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.305006][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.328962][ T6162] netlink: 'syz.3.669': attribute type 4 has an invalid length. [ 99.350573][ T5989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.359380][ T5989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.368209][ T5989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.377186][ T5989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.400008][ T6165] loop2: detected capacity change from 0 to 2048 [ 99.403320][ T6162] netlink: 'syz.3.669': attribute type 4 has an invalid length. [ 99.441682][ T6168] loop3: detected capacity change from 0 to 512 [ 99.449008][ T6168] EXT4-fs: Ignoring removed orlov option [ 99.449260][ T6165] Alternate GPT is invalid, using primary GPT. [ 99.461869][ T6165] loop2: p2 p3 p7 [ 99.463717][ T6168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.489188][ T6168] EXT4-fs (loop3): 1 truncate cleaned up [ 99.495228][ T6168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.514562][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 99.520604][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 99.534458][ T6171] delete_channel: no stack [ 99.541286][ T6168] geneve2: entered promiscuous mode [ 99.604124][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.610370][ T6180] loop4: detected capacity change from 0 to 512 [ 99.627910][ T6182] netlink: 'syz.3.675': attribute type 14 has an invalid length. [ 99.628774][ T6180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.641125][ T6182] loop3: detected capacity change from 0 to 256 [ 99.656434][ T6182] vfat: Unknown parameter '0xffffffffffffffff' [ 99.658070][ T6180] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.690451][ T5989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.743946][ T6197] netlink: 'syz.2.680': attribute type 4 has an invalid length. [ 99.781270][ T6199] bond0: option resend_igmp: invalid value (7540) [ 99.787790][ T6199] bond0: option resend_igmp: allowed values 0 - 255 [ 99.804278][ T6205] netlink: 48 bytes leftover after parsing attributes in process `syz.4.682'. [ 99.836159][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 99.846788][ T6206] delete_channel: no stack [ 99.881674][ T6213] loop4: detected capacity change from 0 to 512 [ 99.888535][ T6213] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.899839][ T6213] EXT4-fs (loop4): 1 truncate cleaned up [ 99.905747][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.921938][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 99.931523][ T6213] veth0: entered promiscuous mode [ 99.936609][ T6213] veth0: entered allmulticast mode [ 99.976411][ T6216] dccp_invalid_packet: P.Data Offset(0) too small [ 99.988014][ T5989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.007106][ T6218] loop4: detected capacity change from 0 to 512 [ 100.019079][ T6218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.031735][ T6218] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.054314][ T5989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.080272][ T6222] loop4: detected capacity change from 0 to 256 [ 100.086839][ T6222] vfat: Unknown parameter '0xffffffffffffffff' [ 100.157600][ T6234] loop2: detected capacity change from 0 to 512 [ 100.169491][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.183372][ T6234] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.204908][ T5917] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.213635][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 100.247237][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 100.257518][ T6249] delete_channel: no stack [ 100.307315][ T6254] loop4: detected capacity change from 0 to 2048 [ 100.313781][ T6254] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 100.359630][ T6259] loop4: detected capacity change from 0 to 512 [ 100.369042][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.381949][ T6259] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.405944][ T5989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.640646][ T6280] loop3: detected capacity change from 0 to 256 [ 100.647098][ T6280] vfat: Unknown parameter '0xffffffffffffffff' [ 100.693876][ T6282] loop3: detected capacity change from 0 to 512 [ 100.710028][ T6282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.722748][ T6282] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.744306][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.750820][ T6286] tc_dump_action: action bad kind [ 100.801686][ T6296] loop4: detected capacity change from 0 to 512 [ 100.830226][ T6296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.843300][ T6296] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.864213][ T5989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.339741][ T6305] FAULT_INJECTION: forcing a failure. [ 101.339741][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 101.355192][ T6305] CPU: 0 UID: 0 PID: 6305 Comm: syz.2.711 Not tainted 6.11.0-rc4-syzkaller #0 [ 101.364108][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 101.374207][ T6305] Call Trace: [ 101.377505][ T6305] [ 101.380534][ T6305] dump_stack_lvl+0xf2/0x150 [ 101.385159][ T6305] dump_stack+0x15/0x20 [ 101.389367][ T6305] should_fail_ex+0x229/0x230 [ 101.394147][ T6305] ? __crypto_alloc_tfmgfp+0xc4/0x220 [ 101.399531][ T6305] should_failslab+0x8f/0xb0 [ 101.404179][ T6305] __kmalloc_noprof+0xa5/0x370 [ 101.408974][ T6305] __crypto_alloc_tfmgfp+0xc4/0x220 [ 101.414286][ T6305] __crypto_alloc_tfm+0x27/0x30 [ 101.419187][ T6305] crypto_spawn_tfm+0x63/0xb0 [ 101.423859][ T6305] cmac_init_tfm+0x30/0x60 [ 101.428421][ T6305] crypto_shash_init_tfm+0xf1/0x180 [ 101.433668][ T6305] crypto_create_tfm_node+0xe7/0x230 [ 101.438976][ T6305] crypto_ahash_init_tfm+0xda/0x200 [ 101.444246][ T6305] crypto_create_tfm_node+0xe7/0x230 [ 101.449520][ T6305] crypto_alloc_tfm_node+0xd1/0x250 [ 101.454712][ T6305] crypto_alloc_ahash+0x2f/0x40 [ 101.459613][ T6305] ah6_init_state+0xe4/0x3b0 [ 101.464249][ T6305] __xfrm_init_state+0x772/0xa90 [ 101.469254][ T6305] xfrm_add_sa+0x1bb5/0x2010 [ 101.473850][ T6305] xfrm_user_rcv_msg+0x4a3/0x5c0 [ 101.478912][ T6305] ? __kfree_skb+0x102/0x150 [ 101.483512][ T6305] ? consume_skb+0x57/0x180 [ 101.488066][ T6305] netlink_rcv_skb+0x12c/0x230 [ 101.492880][ T6305] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 101.498385][ T6305] xfrm_netlink_rcv+0x47/0x60 [ 101.503481][ T6305] netlink_unicast+0x599/0x670 [ 101.508256][ T6305] netlink_sendmsg+0x5cc/0x6e0 [ 101.513084][ T6305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.518508][ T6305] __sock_sendmsg+0x140/0x180 [ 101.523258][ T6305] ____sys_sendmsg+0x312/0x410 [ 101.528068][ T6305] __sys_sendmsg+0x1e9/0x280 [ 101.532693][ T6305] __x64_sys_sendmsg+0x46/0x50 [ 101.537462][ T6305] x64_sys_call+0x2689/0x2d60 [ 101.542234][ T6305] do_syscall_64+0xc9/0x1c0 [ 101.546739][ T6305] ? clear_bhb_loop+0x55/0xb0 [ 101.551447][ T6305] ? clear_bhb_loop+0x55/0xb0 [ 101.556110][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.562046][ T6305] RIP: 0033:0x7f02f12a9e79 [ 101.566501][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.586196][ T6305] RSP: 002b:00007f02eff27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.594653][ T6305] RAX: ffffffffffffffda RBX: 00007f02f1445f80 RCX: 00007f02f12a9e79 [ 101.602730][ T6305] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 101.610889][ T6305] RBP: 00007f02eff27090 R08: 0000000000000000 R09: 0000000000000000 [ 101.618866][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.627099][ T6305] R13: 0000000000000000 R14: 00007f02f1445f80 R15: 00007ffd371fd5a8 [ 101.635170][ T6305] [ 101.680300][ T6309] loop1: detected capacity change from 0 to 128 [ 101.689684][ T6309] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.703694][ T6309] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.762241][ T6322] loop4: detected capacity change from 0 to 512 [ 101.796881][ T6322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.810190][ T6322] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.841366][ T6328] loop2: detected capacity change from 0 to 512 [ 101.849539][ T5308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.858733][ T6328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.860898][ T5989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.871583][ T6328] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.929982][ T5917] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.200144][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.209451][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.218822][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.226651][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.240426][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.249919][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.314513][ T28] tipc: Subscription rejected, illegal request [ 102.519057][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 102.519074][ T29] audit: type=1400 audit(1724071642.376:887): avc: denied { bind } for pid=6359 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.557218][ T29] audit: type=1400 audit(1724071642.376:888): avc: denied { write } for pid=6359 comm="syz.0.729" lport=52504 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 102.581298][ T29] audit: type=1400 audit(1724071642.376:889): avc: denied { setopt } for pid=6359 comm="syz.0.729" lport=52504 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 102.614260][ T29] audit: type=1400 audit(1724071642.466:890): avc: denied { module_request } for pid=6363 comm="syz.0.731" kmod="net-pf-16-proto-18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.672854][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 102.681685][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.689466][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.697237][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.704793][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.814173][ T6369] loop1: detected capacity change from 0 to 512 [ 102.817272][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 102.838966][ T6369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.844110][ T6376] loop0: detected capacity change from 0 to 512 [ 102.857802][ T6369] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.901527][ T5308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.928022][ T6390] loop1: detected capacity change from 0 to 128 [ 102.936535][ T6390] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.949947][ T6390] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.984606][ T6390] SELinux: Context system_u:object_r:dhcp_sta is not valid (left unmapped). [ 102.993764][ T29] audit: type=1400 audit(1724071642.846:891): avc: denied { relabelto } for pid=6389 comm="syz.1.739" name="bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_sta" [ 103.024737][ T5308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.064012][ T6407] validate_nla: 3 callbacks suppressed [ 103.064084][ T6407] netlink: 'syz.1.745': attribute type 14 has an invalid length. [ 103.065378][ T6402] raw_sendmsg: syz.0.744 forgot to set AF_INET. Fix it! [ 103.072003][ T6407] loop1: detected capacity change from 0 to 256 [ 103.091792][ T6407] vfat: Unknown parameter '0xffffffffffffffff' [ 103.135722][ T29] audit: type=1400 audit(1724071642.986:892): avc: denied { read write } for pid=6411 comm="syz.0.747" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.159464][ T29] audit: type=1400 audit(1724071642.986:893): avc: denied { open } for pid=6411 comm="syz.0.747" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.159549][ T6419] netlink: 'syz.1.750': attribute type 4 has an invalid length. [ 103.193034][ T6419] netlink: 'syz.1.750': attribute type 4 has an invalid length. [ 103.257466][ T29] audit: type=1400 audit(1724071643.106:894): avc: denied { ioctl } for pid=6423 comm="syz.1.751" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.301938][ T29] audit: type=1400 audit(1724071643.156:895): avc: denied { connect } for pid=6432 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.453878][ T6452] batman_adv: batadv0: Adding interface: dummy0 [ 103.460248][ T6452] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.491294][ T6452] batman_adv: batadv0: Interface activated: dummy0 [ 103.500484][ T6451] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.539845][ T6451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6451 comm=syz.2.759 [ 103.570439][ T6459] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 103.593127][ T6459] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 103.648986][ T6466] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 103.660714][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.668159][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.676009][ T6466] bridge0: entered allmulticast mode [ 103.956998][ T6480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.976635][ T29] audit: type=1326 audit(1724071643.826:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f12a9e79 code=0x7ffc0000 [ 104.030849][ T6486] loop0: detected capacity change from 0 to 512 [ 104.049973][ T6486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.067227][ T6486] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.255259][ T4463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.449074][ T6505] loop0: detected capacity change from 0 to 2048 [ 104.480036][ T6510] loop1: detected capacity change from 0 to 512 [ 104.487688][ T6505] loop0: p1 < > p4 < > [ 104.498228][ T6505] tap0: tun_chr_ioctl cmd 35108 [ 104.499141][ T6510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.515872][ T6510] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.515920][ T6505] __nla_validate_parse: 2 callbacks suppressed [ 104.515935][ T6505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'. [ 104.544743][ T5308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.562224][ T6515] loop1: detected capacity change from 0 to 512 [ 104.568851][ T6515] EXT4-fs: Ignoring removed nobh option [ 104.575608][ T6515] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 104.583947][ T6515] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.778: attempt to clear invalid blocks 2 len 1 [ 104.600170][ T6515] EXT4-fs (loop1): Remounting filesystem read-only [ 104.617586][ T6515] EXT4-fs (loop1): 1 truncate cleaned up [ 104.623716][ T6515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.637908][ T6515] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 104.646922][ T6520] loop0: detected capacity change from 0 to 512 [ 104.655576][ T6515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.656763][ T6523] FAULT_INJECTION: forcing a failure. [ 104.656763][ T6523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.677724][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.2.781 Not tainted 6.11.0-rc4-syzkaller #0 [ 104.686591][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 104.696669][ T6523] Call Trace: [ 104.699941][ T6523] [ 104.702861][ T6523] dump_stack_lvl+0xf2/0x150 [ 104.707599][ T6523] dump_stack+0x15/0x20 [ 104.711752][ T6523] should_fail_ex+0x229/0x230 [ 104.716532][ T6523] should_fail+0xb/0x10 [ 104.720682][ T6523] should_fail_usercopy+0x1a/0x20 [ 104.726223][ T6523] strncpy_from_user+0x25/0x270 [ 104.732735][ T6523] __se_sys_add_key+0x81/0x320 [ 104.738474][ T6523] __x64_sys_add_key+0x67/0x80 [ 104.743422][ T6523] x64_sys_call+0x157d/0x2d60 [ 104.753108][ T6523] do_syscall_64+0xc9/0x1c0 [ 104.758081][ T6523] ? clear_bhb_loop+0x55/0xb0 [ 104.762885][ T6523] ? clear_bhb_loop+0x55/0xb0 [ 104.767956][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.775368][ T6523] RIP: 0033:0x7f02f12a9e79 [ 104.779832][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.803982][ T6523] RSP: 002b:00007f02eff27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 104.813920][ T6523] RAX: ffffffffffffffda RBX: 00007f02f1445f80 RCX: 00007f02f12a9e79 [ 104.821897][ T6523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 104.830060][ T6523] RBP: 00007f02eff27090 R08: fffffffffffffffc R09: 0000000000000000 [ 104.838315][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.846368][ T6523] R13: 0000000000000000 R14: 00007f02f1445f80 R15: 00007ffd371fd5a8 [ 104.854403][ T6523] [ 104.860681][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 104.879358][ T6526] loop3: detected capacity change from 0 to 512 [ 104.938880][ T6529] loop2: detected capacity change from 0 to 8192 [ 104.972120][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.004822][ T6526] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.032042][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.056753][ T6533] loop3: detected capacity change from 0 to 1024 [ 105.079948][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.114002][ T6515] tc_dump_action: action bad kind [ 105.164675][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.435870][ T6549] loop4: detected capacity change from 0 to 512 [ 105.469566][ T6549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.515023][ T6549] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.616021][ T5989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.701898][ T6559] loop3: detected capacity change from 0 to 512 [ 105.714421][ T6561] loop4: detected capacity change from 0 to 1024 [ 105.730867][ T6563] loop0: detected capacity change from 0 to 512 [ 105.737767][ T6559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.760513][ T6561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.773741][ T6563] EXT4-fs (loop0): failed to initialize system zone (-117) [ 105.784125][ T6559] EXT4-fs (loop3): 1 truncate cleaned up [ 105.794992][ T6561] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 105.797550][ T6559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.818123][ T6563] EXT4-fs (loop0): mount failed [ 105.847740][ T5989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.880245][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.884433][ T5102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.887969][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.904628][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.912511][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.914357][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'. [ 105.920248][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.935792][ T6575] loop4: detected capacity change from 0 to 512 [ 105.936491][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.950190][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.953307][ T6575] EXT4-fs: Ignoring removed orlov option [ 105.958165][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.971364][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.979047][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.986513][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 105.992307][ T6575] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.994128][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.012579][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.020112][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.024478][ T6575] EXT4-fs (loop4): 1 truncate cleaned up [ 106.027521][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.040654][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.048084][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.055534][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.062963][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.070478][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.077941][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.085430][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.092960][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.100365][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.107785][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.115250][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.122650][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.130161][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.137598][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.145005][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.152441][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.159910][ T982] hid-generic 0000:0040:0000.0002: unknown main item tag 0x0 [ 106.169129][ T982] hid-generic 0000:0040:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 106.169642][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 106.194366][ T6575] geneve2: entered promiscuous mode [ 106.232617][ T6586] loop0: detected capacity change from 0 to 512 [ 106.258237][ T6586] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.276866][ T6592] loop3: detected capacity change from 0 to 512 [ 106.285451][ T6592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.803'. [ 106.334246][ T6597] netlink: 84 bytes leftover after parsing attributes in process `syz.4.804'. [ 106.348694][ T6596] delete_channel: no stack [ 106.367998][ T6600] netlink: 'syz.3.806': attribute type 21 has an invalid length. [ 106.375764][ T6600] netlink: 128 bytes leftover after parsing attributes in process `syz.3.806'. [ 106.385669][ T6600] netlink: 3 bytes leftover after parsing attributes in process `syz.3.806'. [ 106.397244][ T6598] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 106.410986][ T6606] loop3: detected capacity change from 0 to 128 [ 106.425606][ T6598] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 106.436402][ T6606] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.517054][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 106.571326][ T6618] loop1: detected capacity change from 0 to 512 [ 106.589552][ T6618] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.602381][ T6616] IPv4: Oversized IP packet from 172.20.20.24 [ 106.608784][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 106.615059][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 106.697617][ T6627] delete_channel: no stack [ 106.723722][ T6635] netlink: 'syz.0.820': attribute type 4 has an invalid length. [ 106.745239][ T6635] netlink: 'syz.0.820': attribute type 4 has an invalid length. [ 106.784674][ T6642] loop0: detected capacity change from 0 to 128 [ 106.929251][ T6655] x_tables: ip_tables: osf match: only valid for protocol 6 [ 106.973536][ T6660] delete_channel: no stack [ 107.066967][ T6672] loop1: detected capacity change from 0 to 512 [ 107.075462][ T6672] EXT4-fs: Ignoring removed orlov option [ 107.081510][ T6672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.093126][ T6672] EXT4-fs (loop1): 1 truncate cleaned up [ 107.101629][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 107.113399][ T6672] geneve2: entered promiscuous mode [ 107.286030][ T6681] loop4: detected capacity change from 0 to 8192 [ 107.462634][ T6687] loop3: detected capacity change from 0 to 512 [ 107.477534][ T6687] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 107.569092][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 107.569106][ T29] audit: type=1326 audit(1724071647.426:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.3.839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x0 [ 107.879540][ T6696] delete_channel: no stack [ 107.952841][ T6703] loop0: detected capacity change from 0 to 256 [ 107.960430][ T6703] vfat: Unknown parameter '18446744073709551615' [ 108.073321][ T6710] loop1: detected capacity change from 0 to 512 [ 108.090259][ T6710] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.181250][ T6726] delete_channel: no stack [ 108.199463][ T6730] IPv4: Oversized IP packet from 172.20.20.24 [ 108.205762][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 108.211927][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 108.255338][ T6734] loop1: detected capacity change from 0 to 512 [ 108.262296][ T6734] EXT4-fs: Ignoring removed orlov option [ 108.269418][ T6734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.281006][ T6734] EXT4-fs (loop1): 1 truncate cleaned up [ 108.293111][ T6734] geneve2: entered promiscuous mode [ 108.358214][ T29] audit: type=1326 audit(1724071648.216:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.388406][ T29] audit: type=1326 audit(1724071648.216:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.411865][ T29] audit: type=1326 audit(1724071648.216:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.436366][ T29] audit: type=1326 audit(1724071648.286:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.459885][ T29] audit: type=1326 audit(1724071648.296:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.483520][ T29] audit: type=1326 audit(1724071648.306:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.506826][ T29] audit: type=1326 audit(1724071648.306:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.530573][ T29] audit: type=1326 audit(1724071648.306:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.554212][ T29] audit: type=1326 audit(1724071648.306:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a7e49e79 code=0x7ffc0000 [ 108.738499][ T6753] vhci_hcd: invalid port number 0 [ 108.797171][ T6757] loop1: detected capacity change from 0 to 512 [ 108.826036][ T6758] delete_channel: no stack [ 108.848950][ T6761] IPv4: Oversized IP packet from 172.20.20.24 [ 108.855131][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 108.861256][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 108.894462][ T6763] loop1: detected capacity change from 0 to 512 [ 108.908769][ T6763] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.955822][ T6767] loop1: detected capacity change from 0 to 512 [ 108.966784][ T6767] EXT4-fs: Ignoring removed orlov option [ 108.973343][ T6767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.986381][ T6767] EXT4-fs (loop1): 1 truncate cleaned up [ 108.998782][ T6767] geneve2: entered promiscuous mode [ 109.075703][ T6775] loop0: detected capacity change from 0 to 512 [ 109.088812][ T6775] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.159703][ T6788] loop0: detected capacity change from 0 to 2048 [ 109.176286][ T6789] delete_channel: no stack [ 109.204713][ T6793] loop3: detected capacity change from 0 to 512 [ 109.224269][ T6788] Alternate GPT is invalid, using primary GPT. [ 109.230770][ T6788] loop0: p2 p3 p7 [ 109.238746][ T6793] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.349566][ T3268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.448290][ T3268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.501775][ T3268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.540122][ T6814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6814 comm=syz.3.883 [ 109.568791][ T3268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.605484][ T6821] __nla_validate_parse: 4 callbacks suppressed [ 109.605497][ T6821] netlink: 84 bytes leftover after parsing attributes in process `syz.3.885'. [ 109.633425][ T6820] delete_channel: no stack [ 109.719760][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.888'. [ 109.754079][ T3268] bridge_slave_1: left allmulticast mode [ 109.759795][ T3268] bridge_slave_1: left promiscuous mode [ 109.765448][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.823442][ T6834] loop3: detected capacity change from 0 to 8192 [ 109.841378][ T3268] bridge_slave_0: left allmulticast mode [ 109.847073][ T3268] bridge_slave_0: left promiscuous mode [ 109.852842][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.977409][ T6834] ================================================================== [ 109.985702][ T6834] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 109.994549][ T6834] [ 109.996907][ T6834] write to 0xffff888126aaac20 of 8 bytes by task 6837 on cpu 1: [ 110.004669][ T6834] sync_mapping_buffers+0x162/0x7e0 [ 110.010077][ T6834] fat_file_fsync+0xad/0x100 [ 110.014756][ T6834] vfs_fsync_range+0x122/0x140 [ 110.019532][ T6834] generic_file_write_iter+0x191/0x1d0 [ 110.025005][ T6834] iter_file_splice_write+0x5e6/0x970 [ 110.030409][ T6834] direct_splice_actor+0x16c/0x2c0 [ 110.035669][ T6834] splice_direct_to_actor+0x305/0x670 [ 110.041098][ T6834] do_splice_direct+0xd7/0x150 [ 110.045978][ T6834] do_sendfile+0x3ab/0x950 [ 110.050442][ T6834] __x64_sys_sendfile64+0xbd/0x150 [ 110.055614][ T6834] x64_sys_call+0xed5/0x2d60 [ 110.060239][ T6834] do_syscall_64+0xc9/0x1c0 [ 110.064759][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.070694][ T6834] [ 110.073031][ T6834] read to 0xffff888126aaac20 of 8 bytes by task 6834 on cpu 0: [ 110.080639][ T6834] mark_buffer_dirty_inode+0x96/0x1c0 [ 110.086026][ T6834] fat16_ent_put+0x4f/0x60 [ 110.090554][ T6834] fat_alloc_clusters+0x4c9/0xa80 [ 110.095597][ T6834] fat_get_block+0x25c/0x5e0 [ 110.100194][ T6834] __block_write_begin_int+0x417/0xfa0 [ 110.105788][ T6834] block_write_begin+0x7b/0x170 [ 110.110782][ T6834] cont_write_begin+0x486/0x6b0 [ 110.115676][ T6834] fat_write_begin+0x61/0xf0 [ 110.120367][ T6834] generic_perform_write+0x1b4/0x580 [ 110.125647][ T6834] __generic_file_write_iter+0xa1/0x120 [ 110.131215][ T6834] generic_file_write_iter+0x7d/0x1d0 [ 110.136614][ T6834] vfs_write+0x78f/0x900 [ 110.140873][ T6834] ksys_write+0xeb/0x1b0 [ 110.145139][ T6834] __x64_sys_write+0x42/0x50 [ 110.149853][ T6834] x64_sys_call+0x27dd/0x2d60 [ 110.154535][ T6834] do_syscall_64+0xc9/0x1c0 [ 110.159038][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.164931][ T6834] [ 110.167243][ T6834] value changed: 0xffff8881068f6908 -> 0x0000000000000000 [ 110.174334][ T6834] [ 110.176658][ T6834] Reported by Kernel Concurrency Sanitizer on: [ 110.182882][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.3.887 Not tainted 6.11.0-rc4-syzkaller #0 [ 110.191772][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 110.201849][ T6834] ================================================================== [ 110.285985][ T3268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.300691][ T3268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.311576][ T3268] bond0 (unregistering): Released all slaves [ 110.398118][ T6815] chnl_net:caif_netlink_parms(): no params data found [ 110.415107][ T3268] hsr_slave_0: left promiscuous mode [ 110.421386][ T3268] hsr_slave_1: left promiscuous mode [ 110.429257][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.436991][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.447624][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.455123][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.470425][ T3268] veth1_macvtap: left promiscuous mode [ 110.475924][ T3268] veth0_macvtap: left promiscuous mode [ 110.481517][ T3268] veth1_vlan: left promiscuous mode [ 110.486925][ T3268] veth0_vlan: left promiscuous mode [ 110.579080][ T3268] team0 (unregistering): Port device team_slave_1 removed [ 110.590404][ T3268] team0 (unregistering): Port device team_slave_0 removed [ 110.662683][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.670009][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.679754][ T6815] bridge_slave_0: entered allmulticast mode [ 110.686397][ T6815] bridge_slave_0: entered promiscuous mode [ 110.693900][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.701052][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.710824][ T6815] bridge_slave_1: entered allmulticast mode [ 110.717397][ T6815] bridge_slave_1: entered promiscuous mode [ 110.738016][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.750273][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.772473][ T6815] team0: Port device team_slave_0 added [ 110.783428][ T6815] team0: Port device team_slave_1 added [ 110.799420][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.806496][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.832486][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.845153][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.852194][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.878641][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.916104][ T6815] hsr_slave_0: entered promiscuous mode [ 110.922233][ T6815] hsr_slave_1: entered promiscuous mode [ 110.928364][ T6815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.935903][ T6815] Cannot create hsr debugfs directory [ 111.166907][ T6815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.176617][ T6815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.186079][ T6815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.195548][ T6815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.213483][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.220556][ T6815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.227827][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.234960][ T6815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.273719][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.286851][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.295310][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.310561][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.321211][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.328280][ T3268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.340752][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.347855][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.447237][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.536722][ T6815] veth0_vlan: entered promiscuous mode [ 111.549090][ T6815] veth1_vlan: entered promiscuous mode [ 111.571685][ T6815] veth0_macvtap: entered promiscuous mode [ 111.583161][ T6815] veth1_macvtap: entered promiscuous mode [ 111.595636][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.606340][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.616322][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.626784][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.636676][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.647212][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.658283][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.677790][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.688522][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.698531][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.708991][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.718869][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.729363][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.749309][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.780382][ T6815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.789194][ T6815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.798032][ T6815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.806828][ T6815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.968662][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.031049][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.081137][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.150611][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.255207][ T28] bridge_slave_1: left allmulticast mode [ 112.260942][ T28] bridge_slave_1: left promiscuous mode [ 112.266608][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.275015][ T28] bridge_slave_0: left allmulticast mode [ 112.280917][ T28] bridge_slave_0: left promiscuous mode [ 112.286613][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.390811][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.421971][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.450241][ T28] bond0 (unregistering): Released all slaves [ 112.539915][ T28] hsr_slave_0: left promiscuous mode [ 112.545641][ T28] hsr_slave_1: left promiscuous mode [ 112.557619][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.565085][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.587669][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.595308][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.627302][ T28] veth1_macvtap: left promiscuous mode [ 112.632939][ T28] veth0_macvtap: left promiscuous mode [ 112.638612][ T28] veth1_vlan: left promiscuous mode [ 112.643839][ T28] veth0_vlan: left promiscuous mode [ 112.825594][ T28] team0 (unregistering): Port device team_slave_1 removed [ 112.840030][ T28] team0 (unregistering): Port device team_slave_0 removed