last executing test programs: 8.675609589s ago: executing program 2 (id=692): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240), 0x0) open(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280080001001000000008000300010000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2], 0x58}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a801000048007000480"], 0x34}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 8.591669146s ago: executing program 2 (id=696): syz_io_uring_setup(0x78f2, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x4, 0x32c}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000009c0)={0x0, 0xf065, 0x4, 0x0, 0x21d, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x2) fcntl$getflags(r0, 0x401) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000002000000000280001007665746800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900), 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940), 0x48}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x100342, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x100342, 0xa0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.543450909s ago: executing program 2 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0xf, 0xf5ffffff, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) 8.507560552s ago: executing program 2 (id=702): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@data_ordered}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@delalloc}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1, r1], 0x2}, 0x58) r2 = syz_clone(0x80400, &(0x7f0000000340)="d72dc5165d459b9bed422351f1f90a8bed48e74633db5bcf09692ed8a3f25ad2c721c89b88abe71119ea9dda7ece32dc8ecaf19aea2e1a401fa767a2ef8c495a6e6d019a9041f9e4ab8d81d8b9c422b970423d14960f28ee6543e13d34932062c13b471e4191d17fef83d4903f1ea298d4d5c86ce831e745eb06e6e3ed120ed372bb034e5f3fe59e91bdf1855f379b89e5e3cf270fe4f4bc636a151da7bd3e5ffe696198c8d40ea9ea5a3fc5c8cd7cec8c4febd44c6af7680960edfdf71cba63cf50bab9cf2bdccbb7e17bde37962a3833f7f178fd34f0494e4a58b07b6da2b61ca48662ba53728e099bee81fe631a70f7650efb113835c120a838918602", 0xfe, &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000a40)="0bdb3f4c78f859f1bd32bc66b901e8c465350d71f0bc0b459d7d7dbf58cd6b6fe1e4cc224c82fe37acfaeddc0e8487618f70a67ea39aff77fec52b3854d1b22646ae10cc48198ffd6cf7e82048bdfe013947a9ac08b20c0d1f669b7a2009ac057e0787ad3a017315c683457b878a58864338770a1e5e244719e93f581dcc3c95e316b144c64d9db6c5eaf85c9a319f66ca01b63393cee1eb7282764c92c00ed204dee8716abc96bb39") r3 = syz_open_procfs(r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a400000000009000200737a7a32000000000900010073797a30000000000800054000000006400000000c0a01080000000000000000010000000900020073797a30000000001400038010000080080003400000000204000b800900010073797a3000000000140000001000010000000000000000000000000af710d9150da68c577f419782ced5a7a8898521cb1c900d21abc78a8de7e00ee14e3463c3e54ae132261783ec82585b72918a2ed6130867fe3a679ba2ed7c21c9af0ba87c5b3947c8cbcae622a6a3e2f47024bce96d332ba7fda874e25ec65b0e6513420c2de81dcb6aefd16ca26098f9f66b"], 0xc4}}, 0x0) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) fchdir(r3) iopl(0x3) prctl$PR_SET_MM_AUXV(0x34, 0xc, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000140), 0x9) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) mount(&(0x7f0000000480)=@md0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='virtiofs\x00', 0x33886ea4d02d05e3, &(0x7f0000000c00)='@\x00') listen(r7, 0x9b5b) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r6, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) 7.661884912s ago: executing program 2 (id=718): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='1-0\n', @ANYRESOCT], 0x31) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000200000000000000000850000006100000085000000050000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x1014, &(0x7f00000026c0)=""/4116}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x27, 0xe, 0x0, &(0x7f0000000300)="f897adf9fffcd92f4c931e8188a8", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)='/proc/s\x00\x00s/\xfc\x12\x7f\xdbfS\x80|\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) syz_clone(0x2200200, &(0x7f0000000240)="7ceeb119f3294216b43813e6afaf81962b8b191b44efe0", 0x17, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000001380)="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") (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f3757f0086dd6317ce800000000000e0865a6596aff57b00000000000000000000000000ac1414"], 0xfe1b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071185100000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000000000957b72fb9900010045"], 0x0}, 0x90) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 7.472079027s ago: executing program 2 (id=720): r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r1, &(0x7f0000000180)='9', 0x1, 0x840, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) 4.539651708s ago: executing program 4 (id=782): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1ff, 0x4, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000001ab2850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="51a03f680c450a00000000000061119400000000001800"/45], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x6}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x4}, @IFLA_MACSEC_PROTECT={0x5}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xf8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}]}, 0x70}}, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) 4.247262282s ago: executing program 4 (id=787): bpf$MAP_CREATE(0x0, &(0x7f00000004c0), 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x0, 0xffffffff}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)={0x0, 0x10000, 0xc, 0x7e, 0xffffffff, 0x400000}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@stripe={'stripe', 0x3d, 0xb52b}}, {@resgid}]}, 0x1, 0x4e8, &(0x7f0000000a80)="$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") (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000a80)=ANY=[], 0x118) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1800086, &(0x7f0000000280)=ANY=[], 0x1, 0x36b, &(0x7f0000000a00)="$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") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000680)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) ioctl$TCSETS(r5, 0x5410, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.003925332s ago: executing program 4 (id=797): r0 = socket$caif_stream(0x25, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a14000, &(0x7f0000000480)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x4000000}}, {@block_validity}, {@i_version}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noquota}, {@stripe={'stripe', 0x3d, 0xff}}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES16=r2]) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 3.896830511s ago: executing program 4 (id=798): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x110, 0x9, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x5, 0x8, 0x80, 0x0, 0x0, 0x26, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x53de, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x343c, 0x0, 0xffffffffffffff77}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000b000000000002f9078e0000002e000000100000000009c90780100000000000000f3d006e2ceee356eac3b5747c91b1218f12ae680b8445224f7397fda7ff495eb57cc16326488918e9bbf5e5a48b9b96956886f0c308ec1be1fbb557b447f99cdc7224d89300ea4b9fd6ea214f544ca21d4e142ef162181b9df4f5e58c4a295a696208405003fa9be94c8476a1c07000000000000000047b8258132ab1a19"], 0x0) (async) clock_getres(0x9, &(0x7f0000000180)) (async) creat(&(0x7f0000000100)='./file0\x00', 0x0) (async) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) (async) llistxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140010"], 0x50}}, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) (async) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 3.816039827s ago: executing program 4 (id=799): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x300, 0xfc}, 0x1c) close(r0) 2.720995627s ago: executing program 4 (id=814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x401}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001000000000000066a0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001700000000000500160000000000"], 0x44}}, 0x0) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x1ff, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000001c0)) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000003c0)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic\x00', 0x6) (async, rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000001180)='net/vlan/config\x00') capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000003c0)) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x80000000000000) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fff, 0x1}, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000015c0)=ANY=[@ANYRES16=r2, @ANYBLOB="2e8d09df4e91f841060760a4df7a1c4a4d1130bad148243d9fc229cf11d18ab72d7de72afcc839d48b0f7fc3efa34af567e705b2bf0753a00b05553ae5bcfee2c441596dde3e7cea17631c818decae223748ebd8e92c66c2f5be822f3ed34879f087e1ad0597857ea6eb0904852a1a92476add2648a2e654f6861ddd2294c222983ef456af7d9bb25a4e1d175a9002aefd21f32abada73c1f7d704518b5617e9b41b394875c0fdc9f79adbf1fdda98501fee0d646ad9125c1a65cf7288573c69b5333d5ccfb8330cea9df90b44c7c3993942dfe0c1dede2936185493424553f99357f5ec79f92c4dc4418951d55b3774f108842cc0ba478651f82f778a0a5304d0113a5c875126e6c03edc33fa8f9640aa4161860f705a2ee27b7a59fe90895ca764504d72996970e490ba15cd08d657261ee698577e123174a5b3ccba9310b04ea7d5e76e139dcb79ca8e56da17643473b8df91e9bc77b1515d743f1ccc9b070f8aa6f05f35f7c60546f773f3c32daacf3c697bedd7ca8b340216e517427f41c69910da713d6d69384b3cd0efad2c0c45de17f6460e9c93e13de1886aa6680ad5167815113e4205ccac0722be119b3c02f81535843df936c615735c6f52f3d815f69bc6aaee8065c5be3b750e8dfa37a2bc2455e60f6f4b26508f92c0b374d01a9ba1aad727e67949545dd56f317e11b71b9b8ce2797cd578387e52c1af003b5451897644d2ba3dba28e77534702667380853b270e0537468c7992074c7457476bb9ce33f36bbb1ef08edfea2772a7ec41df98110846ab9123d94ae05ffcb6e42e58123b553aefbfa954fd1edfdd054d77125dd8e1299d1186bfb92241ebc92c27d972e23e2fd7eb9b20254ba3817e9183f457839837296882e1509457e7a5a28b767654327ac559ab3c605896238e728cc4bd0e2c4dd796e8e86228ced8ff14d9e4bf534c3f9b4f6fdbe6f7418c99f52c1ee6142780137c34fdb45f5068a8cc3e4a51acd09bba022cf19f88789e53a43f21ce468914377ece29c5e09d0af93759712d4d382c1ca994467e923c26172f20ec65b854ae8dd514ea5e92c861b322df064104de043736f53297c2d59ff1f2a62b6f350572ed5a2899a70cd71dadb9b7665226aa3ed3d1262d3dee837607eb6559b5ec21d5ff1c9449c2f44f570bed6ba09737a3cd22efb9c8f690a3c73bc76c71241ddfddafff42a0dd9db4102a06612ceac2eb4f95a0ff59ff622ba5e67d42404a69e7d10e0fa330c00e44395be4e698cb711a2f456274344e3121bd5a0790e4fbee4565921fb4e8081989912868ffeb3b9e37f905743fde5613af12103a92d3035b1ac754b126b3cda3b1020d82af9b24d96393e067ebbc3cf0822b15ac92d6093f29794efa338b5303b07caabd354cd8e21d6fa7bc328b28b0b36dcf4718c8d59e37015a3077bccd1908bcc37886a23d899c750b58a587064fac7c21d2b4326e84d46170a88e3b098cf20321416c62860e2d1bcf394defea8fdc8a87c98bfcb4b31daee148da1f493915d087b1a58007385a897a94627190b61c20727d97146ecedf6114a677aef50190a78c80dff3e5614983a9428db9f424a02a83ba9b9c43e8d82296221a91513bd672fd522700744dd592effe9e731af780ec259dc47ea9d3c7c5c0794bbf149e2dd891886fa320512925154b74b1f6d7f68edeaf8b4db42cc7c50a8c33f8f097ff684e481415b5317af2a2efd14bff61352fa38187071ebd109d0c73594c5094d827cd9113093a4ba9fed2fa3693d3e9274eef3781f25af52ff4f690a494a3f789b282a92bd81c11ddc250ba0c6ea41ea592b1ff877cc65509bff1304659e656a85548602d15ef3f108e739d9a2dc3722b45b760732aa90f12548a9d5303c0879ac5b1d13aa949fcdf3a58858f58a1856f2cffa89e1b385bd6e86e8f7eb1045927cf535183e8294cc306a819d90f71da9182aa32ac3f28eae436ddc1dc24b6db324de43b10edb2fe27bbf3bc4f487fd4a1de6e62bbecfca623d4bf844861776a4e8cc9813e6bb64d90faa57a32325fb865599ffdf983c1002ec92467ec425fbae810953fcc6610af7c6d75f9d6235b2c4de5d580885e7f9d0289024620a15a33aa91148a2a428838dc560f80a7978d7242323f6e861ef77fa14c0e87d23ead6d8a5fb7ef22bd8082fe3569266efaa84319a9fd257c2f2336d92273777dda026510a325619aac5639f8fa27dcfc834a7871cdf1db36264508b86f88a718fd3183fec602fcbd5c1cc66eba10bd188bb483f56a0cdaaa1047710e396ac0325c71aa3232a5864adb94d4d0d23104167500b0d549920783e26cfdae43af3654e29c63ddc2d40695323d45f6a3702ba1c6b48355ba176037d5a0d09d18f4ddcb988185a5398013e2b315573f9e6911f5d917838ac10a6095ad2a85beb5911d293733f06ff1ea6ff1eef50a83c80ba211e066ffe57bdb20cc004ef8c2028f809b275f21af3b47fc910c9c553ff28790c94b98db2fc02ee8f8c4265ffeaccf4b4fcc35ab4ae3baaf01a67010a4c6877349d90693fc58ff332ce6ea585808b1ad2f6f82a7bb57e2013b2150ae298c1254c36d3b4784b434ac68b95966c7056d71294d1822904f5f14e46061fef78b59bf3afce668c2ee0d84ef08514ccb654ab541cc834e36780338a2c63215435ef3672ed66b174cf4222d030130ae84c212776dfcdba9061db9cf1d63218d8c21d149541864b7b9952357313e414faa8140c32f724e5f49179b521971d2800ae59e84366d2de0b2a4d22e2f1b1eec3f9e2de7d30a323f42de129e48bee9fd8c66df7a2c9b01d5731a24869f1ac9d9316199e7d6c8bba93dc9a6fc1e8efe66a4c5beded90b0c01000d9df3d98da2b029ff76c00230a5e767f9416d44bf11b74aa417018daf84ab04dae1b422c2a69ed9c92e73c59983feb48188cba94d8656b5ce0297c07a8bc08d80d86a5fbace63273bc242f61da0e5d8a94e5efef0e235bcc6861518a6bf6a54dfade523ebe0133b06133bede85a60b88acd20427f8b4f72348ba9affa0f9ce8239d8f67d60d0b47b6c66131313b8bca6255ccd9593b2998bcaf0f0ab8754d6707f8efe5527bd9ed14c8ea4695ac538dcc81d0a34e04bff9bb4e595ed3f643c955e2456250f2d0b975b5d0d0a8176013583b2cf9c3ffefce60a2446cd3cb0788e4d5a680b5bc98413b9d246cc8feef985720b9c8dc60c08ca18d3bae9b5c11635539eec1bf5f9b7f99a37a776a80b13a801180a6eee4d25e93117ca929c420a87269e70a7f34d07cebb13048c19ff49cef4ad39327cd3a66e57b30542c89696a8fb254cbe8365859455e9dcf2fac2b0bc58d7966fc0ffe55aecc9b8e9ee8d0a6078247131540d0d28c11c5e15e51fa4e1f7eaf8ba3fc84d9b2795d04f47c46b9b7bdfa072cc7e34823d1bb093291caf4da34d8a0c87426975a1b99ce7c78c04fff0ece7632b0022ef63dc84c12db059cc61ced505741736546c403e72cfe7f419b5160d8f48ac01544609015e2123cbbcc9e950b9476363facecd4a73bcf545445853e3e3a6284a1d0e80041388cc12532a3f309a23348ba1274f14cc170b874cbae61f80a1c1b51cd74bcbdfcfaa5390ea75350a43f6a711e2dd9d7954b43661cbe40abc5db14708c7ae486db6906fecb00b295f46cc1374c55eddb4a97031eb175d9ee6cf10eabf0cd52091fd5c733118bc0d3ca5eeb2e08243798cb20ac38a9c9670719bc29eddc6ececc347650c9f764c6f634dc8b74f99d9f6565f966d52fd3a1723232d65e08263ef688e320d8427357479d738da14acb923594f32f4bcd3494836f2b9b52599d11a76f5251798e5e0dbf58687cc8b51b566f0b7d3fe53aab40c9306a8c798872b1ec318db6fa0ebb93d064440cf4a0ee108a258f0a60594bf66b08afbdecf60e1e15e2b799b6aa025e977953fb3150dfe2c8b685f3d92e229955858c205d830cbb86e9250e75069c51bffcba15c69026d390b430b3fb1b4409a44374e8d026eefe81eef56e9b9149a8049ba5a98512c0e7c841e2e1fbd4618168528cadfcc460b2a6da3a3f6a3f7b3eb65f3d8da0293c7bfd5531391c6cf05d803365de84c172ab92297c6b3c5a2a7055ebfc0abcff4907f880652ec333de7f362b0549673639d650f56a86561ff376c93f6ca9cbd9488a6b7ff25db09a974f4f8df5dcc30fd88ac1d1b00ef4d936ab80835d714a2ee52ba090300858fbc56112f0394b08ea7afca4b105cb5f63ea36e4c5c5444ef2e577a65888476eb808c2c0a8479c30c65bf7431be073d49521fcbedf3f3707f89fcc9a9eb2f788c5788891577b82f17f192c0593cc12b9e61b82f096f8e1671186e3e8755866a9d67775564abccf6a37204cb5b2e0fc8089b05f9e2a79a485bd0b962a414359b420df87d26710577a6d23121055130824afc77b33ab9b46c061b5ad842782aefb08a17348d26a8f5b24e5fa78f80a6a37b3b050f1bf9dd6fca2ab5a30dd6ce287ea9ac63621006c9737e3dfe3519763f9c3e67463a2ec3c85cd140520f8087947cbf9e1d3ca4e08aa992b51aa4147256f4c6b7b09ae6913d4f7377155e28df8a8be303dc54cbd4b4db8fdb16026e109ffbdc2bba5ff8bbe449689d0529e27dafb23155c6927ac135c6531dc0099895089d20f40504425f8d6fc68818c463b3c411929a55bda7a9190a50a373bfce02c85d6c327d0f9c444380cc5882782d3b15d6536e4c36b236279e9c36315662c4275556a47e99a47a1605857aa6234bd4145dc801b584dd866aa93db1178e1eafa03c67f76f1365241a85a5febc8a648ec3657491d00bfcbe8c9cd2d4c96a93607a5976a516ff2f8311f71f876aeb9abf5857bcd649476a86e0ddb912d49364bf873c192af51dbda857f681fbc11c63393386b555ed6f050d900f68fcadf5b2762a8c30aa0410157fe31e70528b6db7a63926f99ebae6f8cede55792c99ac25dca52d32e8629b1477a4a96c0e631c555b43dde3d08e6ab38f2f47e6cdad5bd247dfaee99ee9bc5d167ec94ffad5bf2e749fb21115ece4610f908bf772a634c45300587c4ba28b95bb4c085d0bad77c0539284b47e6281a44cd3eb2f96a392d4e2315379c2baa88af62655f5179bbadbd9afa8e183af031267877cc4faac652b891d677c93eea9774e06f3a6075a03be973cf7c4f00ce7cc943b0c176558f84c902d241da39b3f9a1330a40b105c1ef1fdfde2d1cb0ac2cc252784fbebe298fa62c8f35db6b8f1e2b3e1b0961cb7e8c8ff01953497506723344f2a27a300134ce68330fe688fa6247114ac6a403e2620a227b5a365382bb90a31317d17e10b135b22752b09bab3c46798080b1d3a6f7a4d5a4fd9954b72a2deea22e66a437d9294f781452a0abd2d7ceb018838dd2de366c49e4d07da8d9de7bf117e699ee93285686569c2afd3769f5e03020cd0ce144fdee45c589f6d604a96dce3730d1c87604f6fb06ede5b3c88963b8835bf8610839562a94054356ac0bd7972b6203450e476d09de788f263a0d74d04ddbe1019ef9ab001d15196539059579719c6290586f5a9294200a82c101507649add85336167819269d94e76c1b1cdda3d67bfe3185254875065af3ce22aacffa20f2e6d0fbf91f4133a96784d5c1f62aeaad598693b698ca4aab68b3ebaf428e32e64a1104bf8c2ce748b65b00ee78033abd1869bfc9d5bb96467aeca0251b9e7037bcb6cb2de4c7550243aa544511bdfb09e2e028a7479cfb3081bfad46c1ea886a7b6c61badd7329910cbbe8c54fd362d90a40ef3f44951", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) 1.744731787s ago: executing program 3 (id=821): r0 = memfd_create(&(0x7f0000000a40)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xd2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaaG\x19]kI\x0e\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xe1\xebKlb\xe5:\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xeb\x06\x00\x00\x00\x01O\xd3r\xa2\xa9u\x93\x00\x00', 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x100008a, &(0x7f0000000800)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES32=r2, @ANYRES16=0x0, @ANYRES32], 0x6, 0x2dc, &(0x7f0000000400)="$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") (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x11) (async) set_mempolicy(0x8000, &(0x7f0000000040)=0x81, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000"], &(0x7f0000000180)=""/206, 0x4a, 0xce, 0x1}, 0x20) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0x36, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioperm(0x0, 0x40, 0x80) getresuid(&(0x7f0000000300), 0x0, &(0x7f0000000380)) mq_open(0x0, 0x40, 0x180, &(0x7f0000000180)={0x6, 0xffffffffffffffff, 0x0, 0xe98}) (async) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000700)=ANY=[@ANYBLOB="2b0801000000000024010000000000000000000000000002fe8000"/36], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@mcast1, @broadcast, 0x8, 0xd}}) (async) socket(0x10, 0x3, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) (async) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) eventfd2(0x1fc, 0x1) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000900)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000081) 1.640865156s ago: executing program 3 (id=824): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0xfc}, 0x1c) close(r0) 1.5847134s ago: executing program 3 (id=826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x16, &(0x7f0000000180), 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000000)=""/157}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r2}, 0x10) sync() socket(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000180)="6f7afb2726d83f0db45ef2b17280d4bb64897890cc0378ed8e1720d49e0b6b20befd2fe0d1f0af90f4250b357c812f62e9a9da9f9d93af41370c350fa1864bf0b0eaa541de13efbb1e71b97552fc3ce9f1a1983050c5af64192640898b4b9539b92127a613493769d2430e3481fb563e2f612e975d9293339dee82652695b8a50f1b66a6345349bee6d21827ffe0202d22753f2cf685f2fc48f9b72356f4c0e2df5c5b40dcf4c5fa91f5d14ef556065f532b9ff399a9169f230c47fad36b426c16664225bc7cea6f577e4f3a", &(0x7f0000000100)=""/38, &(0x7f00000002c0)="8447823babdfe08cc541de3a54e8e5afa1611bffb297979071a58d387a1c7ce02f0f912b238c17515922a96b5445549a0364ec5e11c7d627630554d8d70b4c044d30c7701d030abf74bb49651656f0a9ee75498100456eb77f7f465ff19eebda2e1f243d95b6cdc85857bfea7e50d5c2777195", &(0x7f00000004c0)="1f516ba1c69b771abf4776443f1eb956817e240bf205c42900b927f3bdbea5254d747d31b3ef71bcfe5d322f2d18869a64f20e083ec4631b29f07b6dc2e1e15b8aaaf724e8bcb44023c87332c0311719db5f0836e6cc13f7ceb968f8eec9dcd78a5ecd5dab381d1f87ec27e942cd0ca498608961d310916102e674428380a2dd3c30a7bb0a3a5102b9f936148559782d55a74b1ab7e50d0d1ad2fb51a4d14f0807041a183bec9c432f0d24e6e4c9db413cc702694d87c6be1d2f2198bcb9dcae40e4ef6d98b2a74493f9d216c264ae6a09b78a0839b4190ef6d58ca19687b60a4f13f206570d2256c1221a0697", 0x1, r4}, 0x38) pwritev2(r4, &(0x7f0000000400)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1, 0x7bff, 0x0, 0x3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pause() mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r6, 0x4b48, &(0x7f0000003d40)=""/175) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000380)=@req3={0xe, 0x101, 0x8, 0x4, 0x8, 0x2}, 0x1c) 675.603595ms ago: executing program 1 (id=836): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, &(0x7f0000000040)) listen(r3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0x101}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x5e}, 0x0, @in=@local}}, 0xe8) 629.517508ms ago: executing program 1 (id=837): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5}]}}}]}, 0x3c}}, 0x100000000000000) 626.475749ms ago: executing program 3 (id=838): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @ib={0x1b, 0x3, 0x0, {"6e40db5d0076a1a5d48829eef778037c"}, 0xfff, 0x7}, @ib={0x1b, 0x0, 0x0, {"0e00000000ae00000000000004000001"}, 0x0, 0x0, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000680)={0x9, 0x108, 0xfa00, {r3, 0xb9, "77ecfb", "d8c6f975e55e3ca5d48074905c3735dab6fba9c9b79f157e8be70a9e44a98a6ed508c2efb64cec7f52689c9b2d36fa896fb323e47791c2738eac64861169b87a9d71c28e0154513f2ec310aec03132add26f952e1cb101a0f0d09975c39db317a74b832e57685687ffd83e04a3ae96b90a0558045dbee2b156f4c99332b52e78fe5975058990113c7504d2fd4fca87dc20b754e433be309090c999128523cb1f144a6f537c793044375bed9cea54cdd9ac3fd8688f23930112bddcb3b15c36da71e41be0fa1ec245f94207a183c06ce9026001e07fb989170a9eb2edcd995652ad8fa6409358b4b90a2b6a0c52b432e6846a03846b8c3e312b6bd3957c8beadc"}}, 0x110) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'lo\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) writev(r6, &(0x7f00000028c0)=[{&(0x7f0000000080)="20bf5fa90d784b6bb4e0b244c393c3320dc94b", 0x13}, {&(0x7f00000008c0)="cda480c6d16296663526d8b96c373acefe16b5df668dd3e6641e956e346e5237d8647f2cb3328e957035c3b42bc4d582d38f082468c2da076d58e7e05c4e185eb1a4f476debbc74b7aa81ca772f31f5174d456b7338e7aa986756aa926eea22dc3541bd61d7c59bc0f709da42ab5345721f005fe152c191d23834ac9423892627dcdd5bdb6d4d0f85aa235c0fa515d19b0605937ff3f65ceaa8dd87c74ccf0678d62e4473f8ff6280c2759032bcc728ce971b6b845fce6b67f82360fbe839302f19c395ae006b899602ac5882ee07eb0bfd83fa031ef816677114df8dd5eabfc83981516e25a7f3efde3504a02b0e7bfded5edc0bd494e2dc5cbaaf49b1d511e5434cd9575c4cf677c107c7f113c1f39138d7a0859510caae0e82afd0229736933103be5a6bda2a929fa9b906f033246512ecd1579a6a82d8b655a48da6b14ca8bcba41e4230ce61e7097409a9007d7628569498785e10209e5b52199cb42d90dacde712b28a6e9149173c3617333c9fee764701dde6a96e3e4627a1f04c9609efe8752c16bca88d3a1a504cc86badc92e07c1b7147e75a39b0b2895b35d3e08867b6ba742110d4c42436b8464a97f7c8f680d5660a11df670e79f08cd99c8a64b44c230777e37c394156f1445f465118c0b18b01f7e6c502ab96bbdeb9f9c5b0f76023643d9edb9982724186b34ee7b8b6ff716bb3f512a41bbf9482dc1eb510747ee1736d4b484eba9bacdc40b7b9f07c0b031b57ef3bdbc94eb33f7a514eda3016d10274f0f65159c0c252720b72aab2b144ac015db232008011e236df4f8e787d52889d5d48c41ac24baf1e7e35f3640ac566305c39194f4d2bf3b173b4b1aa81d65fb0ec445467614be50d7832ba690ac4ea08670d2b0df8670a46a6a14036da3fb336c7b19a401fa5366c6cf6999f80cddeff0c315e521faad9be1c95f6e237d9f73dccaef4bb8b39a88d2aeb2dcdc339f35bcba94c1acec927307d643d1aa3f2ad3ba5e2c660e8ccabd02f1ea975143d75d919c5b47dedeb24dd757e2df61c8cf84ef76c7f3607a660e49b94cbc68ad0275a9a7974671a399e55c9c7cdd70b736a6b2685e529abf2414a04dd5c3bdff34131c8a330721b97950580d6c3b411b91376d1853e8821d19137556d4c5e2a19fffa8b687776295e983d31d3bc2c042f7a43f54d906705304ce0b2cd3ced5479271d7029a57eba1bfd74305389404d5211a326c40a11174e4fb5b504fd895b176b708b9a52d707417e7c440b63ce276530b423099cd4b70f574d7b1bb42d0821ca1dc99077eff4ad4bf7a915b343d164f0dbd51aa1e592aa4ad1857f1b602bcf6fe83fc684b9ed24f4fb5638980c3eee52aa44e04acfde304c5afa6c4ba18ac1c107d289d738eaf7d17530be1d20c7d5993051ed675972ba71dfba186e9a019dd4efa9212d21bf52dc44d513fc82810ef1483f5e9dab2f6084365d82be4eac717d8c3a9d845f2a38dbedd46991985ee77b24be01f497736fe6db66a997854f13a0fa4be420d533f08b9b0d1654bc818e578ec624fae9c7b001d724ea9aabad7fd36f66a969500b981c5ba5c341bbdec7d67265bed4411b866ca53e20df944358b9f0eef29d48c446b891048f45146a5d9c5c66dce4139969c389feeebe2502c3669e76550a2ce69946369d0994218f90bf17668dab4a3b93bbca3dac79be1937954d04fe69ff11966bbe964729ad368b705c2c843df5f5c2326d2e0091a2c118e6c9a76ffe3326e886f30c4aa325d13df888c96cd9f6de21643e6bca4d9dfe96d4a571a04f77044c688e65a0fa967408cba18eadecb86b67d0072002e1bfbc845accf17b796c744690f19a8a9d623159ad136f00fe7d2bc608fafc7deea5c5d4b094ea627fe282983d6c59849fa4123762a866bb2a287ba4e5272fc8ecef8cb8e8e2084a9c05235605dbaee2c1961f17daf9f54bd315424ce2113901ff21bf1009af25a630ffd8a09bed8bf1e4f14d66cf9b762d8abf1a657e1dfe50ed6f2e6a5817c4ee431d723197055dab1ab2448d176bec06cc0f6d3389f8f3d9e6e8aaa6ae2f411bfc55562917fc2db6fcc7102aeacc111f0f714d515c10c393c074c491fbfbe67f6b4547744e766881cec90801dd19c34434b5328e35f20ec077bb47ab5bc229415cce942a190d541f1e2f02ef72b9c02395e2214f2dedfd81012655e3e10b681357c9dd5053263fc80f20ae1f2e9fbd3c3b479cb0a19b6de63c1823f2517fad4639e964fd4b39b9099ea68b6f15127251bbf29cf467f784b82ea141e7271bc983ecd97b57e9ba3b2c5b6dee8df11830a5f5bb65b78c635e5d217e079c94058779aafd4e1e2ab68ada9a5e192a44c7b11a3db46fcf8bf28713873404fe510b7fa6f2ceafa5f07b24530d6efd75e92e4cbfd80acd8418bbffe856c82217fc7e154556d7a7899f3fcc4585c5b0712913ee255d17ebb2ce462d0d5b401fda2bd9ceae57d3b7f5f250a008a83ad250fe62c8da9304af1afe4d6526a6d19c6ea0437ecd712b5e78b4c30b92f1f74c06c2b25fc48b88625ff446b9cddd2766a83c87a82a22a7788d0dc425173e47b1c6301d9fa6195d9c0fbd7136d16ad04984d8d60fab7f623013a3bde6110c0d462c8b2aec873d180ad92ba6f406979d4d600486c2b1c8b04ef572dd988f5ea2aa0d88a5b9b63c48415b6f19cd2cec07f2395ae293aa026a0206a926fdebcf52c7a4b0030685e6c6c34719272469706032d9bf3f2a310cb04cad3bd58726c7997b77a6b7c6a9df7e6394cd204401329a17e667f168d8b4fb60d35fb7aec18e75d00d11e1c9e85a991489aac831cb7734d5ca204eba2f2525b887a05a4801fea8a6df65a1f7495d72393603f0b18d77d6952a68b3411bf8053636104be88fd8fb6ea3da8c5a4adcee6ee871b89cf28b9cadfa3613ce5c29d1b18a4c120da684fd5241644d96a79b6ff8c4adc157f59bf2d9bdc2269d0aeb50c1da862603059a72e216ae9c2a4460a1f06615b27e5dcc53a891fea46c4955c13213e67fc602259a7cb019c4ba5893fa0f6ce3605ea9a5a4869b18f0b9017019a8a4719ed1cc4d8a1710d9082edef1af1ab392171d2a03e35529146d49407f5bb40e80c220c3100bdf57ec3180e62399b4b494b09db5c809809283703ba3735ad65d4f084c9f7f1118090ea8976e941aa2fd36ae14c03f86127412a96b64e5a8b74f302592dc19806f2a81d158e7d384e5447a376dcf4603a6f7eae548ea080d2839b13843beec754c7e58b5631926b5994ef210344f480b135b21efc1a1127467fe183e0e22b84c1dc70e14392b6415948fc0691f68e6a4c77e1b22ebee7b4355fb254dda00206e43c8109b01200f8a6bb017eb4cb9e726e1826a1d69ab7fbf2aa53921457055185a7b544e78f7d1b821266a904da3398c32a937b1eedcf01c870d3118878ce1577ac6a8a896c25f1c296615b8704cac971efff6e8b39e4121c2ce61882829274a1fd05400e486587a24efb584c8c8505d6bd3eeaef359a6629f27823d3fec68621709483d2677fbc4a635670c3528a7615a72fb9242a9c8a6115c242499d423073ad277293f423ba8ffd076649f134c5c5a1e59ac0265a82022111a015e3568b17b4dafb18f28686b91f559f5498649045ba47fb18e18148798e906a0d1b2c52818353cebc82c4a36fe02c659f975579e063e05b8436e412c9d34da087b1e018d842d20126c4960b47969ebd6db51d6b598bc7b61a6f93545c08bfc007b25a545dabc0ec4583689de979c6dd613d10cf312908f229aa2c983326d487846d2908bdda6f6ce697a3cf8d124ce991e137fcb053ced45a3822310e6af8c28ce1acf8eadbd9c112d24403197d870efe5f48cdfec0e84c04a4a578a9e0b6f7b86fe62dd1d759899079743a5df7297e0d6d590ff0d2009f14ea681946927d448d872a2ce82337b2a714448e359b373314e9dc778205f3fc069beadefb770929737af1f1ba4465fda9235ff5cd4b6d1b7c7164ee9540ebdeb6502734ec8e0fd9694c897611d5a4d07202232c774cf871b710148d79c2aee9850adc501763e3859361305b6b8881f6ea016e33661176c47d7b111a8756f12790c645688ee2a922f85c7d72333e161ee8acdbede84c29c305fb330b890fc9bd0756abaf1ccbfca6bf8dc1d2aca20a4b84e0ec85e1302d667d12d776809f8c9e2bcd4cd92e3f672a8993e71c38325c7fe65a31c9ec10e9ad8d2a531a10117daf5cc9cd37ad6c0f9c6503b1ce74b405d0db81bf278b108abbd2ec07aa5865527876607a3caa3109b2f6dc83d0bb5b5d8a0c3adb2aafa8ed044957509c1be791c3eb8b2760ba1cb4bab6a75e7d75874502446b228d2df6cf56b5f980c8aff82e5433438a88e8466f401942f8865f29c4be46350c719742ffd22cf4c29f1d418fc9fa0e8c8542398f420ef940873aa13441dea8c56b4d1eca2d77c726f5fd5123421c4583715578b28ba8d40729cf62510919164dff88e382feba5decc22d7a3a2fff6af5547b79b636df314eb48edddd853fcbf91b9048309c3d1507a2358cfe8f8269f2b6592ed1b4175e2bb0b953a0b262c2d9936fcdfcd4e0a7ff40a700e977ee7aae8ed1acd0f060e87fb1c5d0fdc233c466b7b1744971d976d3e3f77ca72f7b0819f34e60980e28fbf5c584c7d2380f1a2f084ff71a9a932ed834248a2fb8c22f6bea95a86a79e5f54f3b77f4a9a495308e40de412ab21afe745d3e5ed349a6e9e4cc6ee3ed88c59c26519f0881bfcda77de88012c47cae7252e8595fc9d8a8ae4f520315878c5a5620abc255f336de3f9cc120796da42beb71c38c2e9e3bdcc987c0e257483da869b9e13a634ecc667c3a51bdc2932efd0cc29d6aba410859404a398d98bdec4a44d3fe98d14bac3123966da174ea6d47f4bec7773cc663901c1c117e73cec3fd6e71732ab783e890f09d59c7cff24f302979b306aa7a3079a82b677619eff5305d19337fbe1fd124c96897dbfb70d5ec93f408c08f8e0419de738382ae1a09fe9b487f8501c82b0f678dfa247bc61620007276641065fd065bf45e47b621a42d7b4a1167810a1612f4f858fa7e56f8a439105f4df5a4056d63673cadedde90b5cbcce811442fafca661070ddf89ebf74cd467fb7f280f81f48e4271989c4bb5932430d43b6e9d61284d9fffaf119d0e3abf33c935419dec2059f57ddd433234b8969e74bd130e2a6ff56b5b6b2aefe37283168d969b7810ff00523972c03ac71f69221c62e78873d65b2e27c8c6be9e00de3f13f279b45babda8d8a730b6f967887bf969ac7ea50b55886a3049a0458b24636ec44ef99f2d1462f3d1795b9b233753481558b39347c6a7b34bf918aa521d1f46aeb9ed1e3c191ee310923250073a4882e59e15cdd013f903cbb34a581e063d7e0b83914a95021de729f52fde744cb02bc905c3c8c0e0ef642c448b014b2dbcf21250f8f891c182ca05cb6eb6e023ead5304bb8d7cad41a18b0f75fb80688aec364b873aab7e45a5fd07507c7bb6a93cb46892b90134f50331e332458ea32666898736eac057e6e6ea8656bffc633e76b313df8af0f51467d9907874d22c0e6a7461e1ad7cc8bccc598a43a749a5d7ad1705b2885298cd985365ca9b11fc3dfec81900621368db8b6f70319c54001b8a646325e7984577ec85114d5e2e4d94b082707e75b6e93156bc1788748af44059ed2131a5f1c68651fb564a859a7e5d5bd0257600dd49200344b08e662", 0xfdd}], 0x2) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9"], 0x3, 0x377, &(0x7f00000002c0)="$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") r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001000000000000000000000000050000000000000001000008005e18ffd5020000000900070000007a300000000028000240000000032c00000003a130030000e6ff00000000000000000000010073797a300000000100000000000000320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040044) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006578748e2e406297686472000024000280080001400000000e0500020000000000080004400000000008000140000000090900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000001980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf257b00000008000300", @ANYRES32=r10, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) getdents(r8, &(0x7f00000019c0)=""/193, 0xc1) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400483d795f20c2a24b000000000200ee226d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) 586.125602ms ago: executing program 1 (id=839): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7}, 0x8) (fail_nth: 1) 376.037479ms ago: executing program 1 (id=841): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000), 0x10) r1 = io_uring_setup(0x7f38, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0xe803, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x640f40) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)='\t', 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c2c036cd2501eeab5d7a826f4c80b244c87226cd85d16d1514afe3c3bf0940cfe3e5bea5e623775d8e1f4943c248079845572cda3194f81473248380b522aea7", "836dffd3d4ae94fc996c3879684cc35375cd37f293da6bc8d01df5734a8f2acf8a253753f3de6b26495edec4c1ecd9fd07f3c576d92250731e514fc50343ac04", "42878f7f4bdc14a4e031dab57106b48e519bab9ad153e99c9e32e5f93b6ac2e1"}}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, 0x0) 375.825809ms ago: executing program 0 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0xf, 0x0, 0x0, {0x0, 0x84}}}, 0x64}, 0x1, 0xfffffff5}, 0x0) 371.97736ms ago: executing program 1 (id=843): r0 = socket$inet6(0xa, 0x80002, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x4, 0xd5, 0x4, 0x2, 0x20, @remote, @remote, 0x20, 0x10, 0x5e62f393, 0xfffffffe}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30}, {0x6}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x241, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 333.111993ms ago: executing program 0 (id=844): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffee0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x90) (rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000100)=""/171, 0xab, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0xfa, 0x7, 0x8, 0xd, 0x0, 0x4810, 0x44c0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x208, 0x0, 0x7, 0x7, 0x100, 0x8, 0x1ff, 0x0, 0x0, 0x0, 0x3}, r3, 0x2, r0, 0x3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) (async) r4 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) (async) ftruncate(r4, 0x20cf01) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002000)=@newtfilter={0x24}, 0x24}}, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000004080), 0x1, 0x762, &(0x7f0000001180)="$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") r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) (async) write$cgroup_type(r5, &(0x7f0000000200), 0x175d9003) unshare(0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0xe93, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, r8, 0x0) (async) setfsgid(r8) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x800}) (rerun: 32) 271.911198ms ago: executing program 0 (id=845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)={0x0, 0x1, '\x00', [@pad1, @generic={0x0, 0x3, "e73cf3"}]}, 0x10) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000000c0)={{0x1, 0x8}, 0x100, './file0\x00'}) (async) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 270.534778ms ago: executing program 1 (id=846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@remote, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x100, 0xfffffff4, 0x8, 0x2003, 0x1, 0x3, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x48) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000540), 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e27, @empty}, 0x10) (async) r6 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x454}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800010076746900140002800800010030db38665e1c629528780e87c01876c7ed448117707c7ee2aa000db0b6049cab2237b5b8e85f2e193bb3e3287c8e081bfc9a740caccbdd712ef4a4f4457b11098fd7b1492eedeb3a3ff20fb3fc0444f2b21e14d5021f09dc0e0a286c4e03bc3278ee5afae83d75ce7989da0fac3dcae2bd0001e3bdccc70d33b7818e74de7e9b1101c20762bc8d7a96e9f6272c30b808826f79c12fe97c96", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x40}, 0x1, 0x8}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/237, 0x0, 0xed, 0x1, 0x1b}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r8}, 0xfffffe8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x53) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getpid() r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r12, 0x40505330, &(0x7f0000000100)={{0x60}, {0x9}, 0x20001, 0x0, 0x1}) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) 266.038688ms ago: executing program 0 (id=847): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) (fail_nth: 7) 52.266965ms ago: executing program 0 (id=848): socket$packet(0x11, 0x0, 0x300) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x12, 0x0, &(0x7f0000001040)) 47.302406ms ago: executing program 3 (id=849): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0xfc}, 0x1c) close(r0) 1.28539ms ago: executing program 0 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x9, 0x3, 0x2, 0x1}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x54, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {0x4}}]}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x2}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6637419a}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x82100, 0x20, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000140)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xb, 0x7, 0x8fc2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0], &(0x7f0000000300)=[{0x0, 0x2, 0x2, 0x7}], 0x10, 0x689e}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r0, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000100)={r7, &(0x7f0000000080), 0x0}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) 0s ago: executing program 3 (id=851): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7}, 0x8) (fail_nth: 2) kernel console output (not intermixed with test programs): 6.574859][ T4769] EXT4-fs (loop2): Total free blocks count 0 [ 46.588202][ T4785] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.593236][ T4769] EXT4-fs (loop2): Free/Dirty block details [ 46.593250][ T4769] EXT4-fs (loop2): free_blocks=68451041280 [ 46.615237][ T4769] EXT4-fs (loop2): dirty_blocks=32 [ 46.620458][ T4769] EXT4-fs (loop2): Block reservation details [ 46.626524][ T4769] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 46.646748][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.659047][ T3670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.702387][ T3571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.734041][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.759445][ T4804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4804 comm=syz.1.332 [ 46.773054][ T4806] FAULT_INJECTION: forcing a failure. [ 46.773054][ T4806] name failslab, interval 1, probability 0, space 0, times 0 [ 46.785692][ T4806] CPU: 0 UID: 0 PID: 4806 Comm: syz.3.333 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 46.796354][ T4806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 46.806408][ T4806] Call Trace: [ 46.809674][ T4806] [ 46.812591][ T4806] dump_stack_lvl+0xf2/0x150 [ 46.817193][ T4806] dump_stack+0x15/0x20 [ 46.821351][ T4806] should_fail_ex+0x229/0x230 [ 46.826141][ T4806] ? alloc_empty_file+0xd0/0x310 [ 46.831082][ T4806] should_failslab+0x8f/0xb0 [ 46.835734][ T4806] kmem_cache_alloc_noprof+0x4c/0x290 [ 46.841096][ T4806] ? mntput+0x49/0x70 [ 46.845142][ T4806] alloc_empty_file+0xd0/0x310 [ 46.849917][ T4806] path_openat+0x6a/0x1f10 [ 46.854330][ T4806] ? _parse_integer_limit+0x167/0x180 [ 46.859734][ T4806] ? _parse_integer+0x27/0x30 [ 46.864400][ T4806] ? kstrtoull+0x110/0x140 [ 46.868803][ T4806] ? kstrtouint+0x77/0xc0 [ 46.873121][ T4806] do_filp_open+0xf7/0x200 [ 46.877564][ T4806] do_sys_openat2+0xab/0x120 [ 46.882166][ T4806] __x64_sys_openat+0xf3/0x120 [ 46.886922][ T4806] x64_sys_call+0x1025/0x2d60 [ 46.891729][ T4806] do_syscall_64+0xc9/0x1c0 [ 46.896233][ T4806] ? clear_bhb_loop+0x55/0xb0 [ 46.900910][ T4806] ? clear_bhb_loop+0x55/0xb0 [ 46.905671][ T4806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.911610][ T4806] RIP: 0033:0x7ff2e6646390 [ 46.916086][ T4806] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 46.935690][ T4806] RSP: 002b:00007ff2e52c6b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 46.944278][ T4806] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2e6646390 [ 46.952238][ T4806] RDX: 0000000000000000 RSI: 00007ff2e52c6c20 RDI: 00000000ffffff9c [ 46.960197][ T4806] RBP: 00007ff2e52c6c20 R08: 0000000000000000 R09: 0000000000000000 [ 46.968172][ T4806] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 46.976132][ T4806] R13: 000000000000000b R14: 00007ff2e67d5f80 R15: 00007ffc53f22f88 [ 46.984133][ T4806] [ 47.006016][ T4809] netlink: 288 bytes leftover after parsing attributes in process `syz.2.334'. [ 47.008679][ T4813] loop4: detected capacity change from 0 to 1024 [ 47.030049][ T4813] EXT4-fs: Ignoring removed nobh option [ 47.042384][ T4818] 9pnet: Unknown protocol version 9p [ 47.075469][ T4813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.206703][ T4838] netlink: 'syz.3.343': attribute type 7 has an invalid length. [ 47.253949][ T4851] loop2: detected capacity change from 0 to 128 [ 47.306550][ T4856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4856 comm=syz.2.348 [ 47.325649][ T4856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.348'. [ 47.527939][ T4864] netlink: 52 bytes leftover after parsing attributes in process `syz.1.349'. [ 47.540866][ T4863] syzkaller0: entered promiscuous mode [ 47.546581][ T4863] syzkaller0: entered allmulticast mode [ 47.570152][ T4864] netlink: 'syz.1.349': attribute type 10 has an invalid length. [ 47.628529][ T4867] loop2: detected capacity change from 0 to 512 [ 47.660715][ T4867] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.351: casefold flag without casefold feature [ 47.688062][ T4867] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.351: couldn't read orphan inode 15 (err -117) [ 47.731670][ T4867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.813486][ T3670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.843495][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.996742][ T4885] loop4: detected capacity change from 0 to 512 [ 48.006640][ T4885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.023387][ T4885] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.039552][ T4885] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.359: Directory hole found for htree leaf block 0 [ 48.053790][ T4885] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.359: Directory hole found for htree leaf block 0 [ 48.083452][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.102533][ T4893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4893 comm=syz.4.360 [ 48.166378][ T4896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.361'. [ 48.191643][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 48.191657][ T29] audit: type=1400 audit(1722732140.658:629): avc: denied { create } for pid=4895 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.205590][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.234606][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.235979][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.253879][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.280657][ T29] audit: type=1400 audit(1722732140.748:630): avc: denied { setopt } for pid=4897 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.348826][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 48.466364][ T29] audit: type=1400 audit(1722732140.938:631): avc: denied { bind } for pid=4904 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.525009][ T29] audit: type=1400 audit(1722732140.988:632): avc: denied { connect } for pid=4904 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.594372][ T4914] FAULT_INJECTION: forcing a failure. [ 48.594372][ T4914] name failslab, interval 1, probability 0, space 0, times 0 [ 48.595132][ T4917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 48.607219][ T4914] CPU: 0 UID: 0 PID: 4914 Comm: syz.3.368 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 48.626557][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 48.636604][ T4914] Call Trace: [ 48.639956][ T4914] [ 48.642884][ T4914] dump_stack_lvl+0xf2/0x150 [ 48.647514][ T4914] dump_stack+0x15/0x20 [ 48.651668][ T4914] should_fail_ex+0x229/0x230 [ 48.656346][ T4914] ? usbdev_open+0x4d/0x480 [ 48.660862][ T4914] should_failslab+0x8f/0xb0 [ 48.665484][ T4914] __kmalloc_cache_noprof+0x4b/0x2a0 [ 48.670864][ T4914] usbdev_open+0x4d/0x480 [ 48.675184][ T4914] ? selinux_file_open+0x34c/0x3b0 [ 48.680355][ T4914] chrdev_open+0x323/0x3a0 [ 48.684826][ T4914] ? __pfx_chrdev_open+0x10/0x10 [ 48.689759][ T4914] do_dentry_open+0x647/0xa50 [ 48.694436][ T4914] vfs_open+0x3b/0x1f0 [ 48.698527][ T4914] path_openat+0x1a26/0x1f10 [ 48.703161][ T4914] do_filp_open+0xf7/0x200 [ 48.707663][ T4914] do_sys_openat2+0xab/0x120 [ 48.712330][ T4914] __x64_sys_openat+0xf3/0x120 [ 48.717092][ T4914] x64_sys_call+0x1025/0x2d60 [ 48.721781][ T4914] do_syscall_64+0xc9/0x1c0 [ 48.726303][ T4914] ? clear_bhb_loop+0x55/0xb0 [ 48.730986][ T4914] ? clear_bhb_loop+0x55/0xb0 [ 48.735731][ T4914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.741632][ T4914] RIP: 0033:0x7ff2e6646390 [ 48.746037][ T4914] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 48.765653][ T4914] RSP: 002b:00007ff2e52c6b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 48.774130][ T4914] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2e6646390 [ 48.782096][ T4914] RDX: 0000000000000000 RSI: 00007ff2e52c6c20 RDI: 00000000ffffff9c [ 48.790063][ T4914] RBP: 00007ff2e52c6c20 R08: 0000000000000000 R09: 0000000000000000 [ 48.798032][ T4914] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 48.805999][ T4914] R13: 000000000000000b R14: 00007ff2e67d5f80 R15: 00007ffc53f22f88 [ 48.813974][ T4914] [ 48.851739][ T4925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4925 comm=syz.3.371 [ 48.883043][ T4929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.373'. [ 48.898290][ T29] audit: type=1400 audit(1722732141.368:633): avc: denied { execute } for pid=4927 comm="syz.3.372" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 48.950334][ T4935] FAULT_INJECTION: forcing a failure. [ 48.950334][ T4935] name failslab, interval 1, probability 0, space 0, times 0 [ 48.963918][ T4935] CPU: 1 UID: 0 PID: 4935 Comm: syz.3.376 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 48.974595][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 48.984683][ T4935] Call Trace: [ 48.987958][ T4935] [ 48.990887][ T4935] dump_stack_lvl+0xf2/0x150 [ 48.995489][ T4935] dump_stack+0x15/0x20 [ 48.999659][ T4935] should_fail_ex+0x229/0x230 [ 49.004350][ T4935] ? nf_tables_commit+0x565/0x45a0 [ 49.009516][ T4935] should_failslab+0x8f/0xb0 [ 49.014126][ T4935] __kmalloc_cache_noprof+0x4b/0x2a0 [ 49.019403][ T4935] nf_tables_commit+0x565/0x45a0 [ 49.024478][ T4935] ? should_fail_ex+0xd7/0x230 [ 49.029239][ T4935] ? __list_add_valid_or_report+0x36/0xc0 [ 49.034945][ T4935] ? nf_tables_newset+0x125e/0x1380 [ 49.040203][ T4935] ? __nla_validate_parse+0x1796/0x1e30 [ 49.045779][ T4935] ? skb_pull+0x94/0x100 [ 49.050027][ T4935] nfnetlink_rcv+0xf89/0x15b0 [ 49.054704][ T4935] netlink_unicast+0x593/0x670 [ 49.059516][ T4935] netlink_sendmsg+0x5cc/0x6e0 [ 49.064268][ T4935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.069542][ T4935] __sock_sendmsg+0x140/0x180 [ 49.074215][ T4935] ____sys_sendmsg+0x312/0x410 [ 49.079028][ T4935] __sys_sendmsg+0x1e9/0x280 [ 49.083620][ T4935] __x64_sys_sendmsg+0x46/0x50 [ 49.088436][ T4935] x64_sys_call+0x2689/0x2d60 [ 49.093134][ T4935] do_syscall_64+0xc9/0x1c0 [ 49.097631][ T4935] ? clear_bhb_loop+0x55/0xb0 [ 49.102300][ T4935] ? clear_bhb_loop+0x55/0xb0 [ 49.107079][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.113049][ T4935] RIP: 0033:0x7ff2e66479f9 [ 49.117479][ T4935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.137074][ T4935] RSP: 002b:00007ff2e52c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.145637][ T4935] RAX: ffffffffffffffda RBX: 00007ff2e67d5f80 RCX: 00007ff2e66479f9 [ 49.153654][ T4935] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 49.161672][ T4935] RBP: 00007ff2e52c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.169627][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.177582][ T4935] R13: 000000000000000b R14: 00007ff2e67d5f80 R15: 00007ffc53f22f88 [ 49.185589][ T4935] [ 49.252559][ T4954] FAULT_INJECTION: forcing a failure. [ 49.252559][ T4954] name failslab, interval 1, probability 0, space 0, times 0 [ 49.265288][ T4954] CPU: 1 UID: 0 PID: 4954 Comm: syz.2.381 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 49.275941][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.286004][ T4954] Call Trace: [ 49.289313][ T4954] [ 49.292232][ T4954] dump_stack_lvl+0xf2/0x150 [ 49.296845][ T4954] dump_stack+0x15/0x20 [ 49.301014][ T4954] should_fail_ex+0x229/0x230 [ 49.305783][ T4954] ? usb_control_msg+0x59/0x240 [ 49.310676][ T4954] should_failslab+0x8f/0xb0 [ 49.315390][ T4954] __kmalloc_cache_noprof+0x4b/0x2a0 [ 49.320774][ T4954] usb_control_msg+0x59/0x240 [ 49.325463][ T4954] hub_ext_port_status+0xbf/0x480 [ 49.330561][ T4954] hub_activate+0x4c8/0xf30 [ 49.335057][ T4954] hub_resume+0x48/0x1e0 [ 49.339342][ T4954] ? mutex_lock+0xd/0x40 [ 49.343573][ T4954] usb_resume_both+0x3ed/0x5b0 [ 49.348363][ T4954] ? __pfx_usb_runtime_resume+0x10/0x10 [ 49.354087][ T4954] usb_runtime_resume+0x21/0x30 [ 49.358967][ T4954] __rpm_callback+0x299/0x720 [ 49.363695][ T4954] ? __pfx_usb_runtime_resume+0x10/0x10 [ 49.369280][ T4954] rpm_resume+0x8e6/0xd00 [ 49.373596][ T4954] ? klist_dec_and_del+0xb7/0x270 [ 49.378613][ T4954] __pm_runtime_resume+0xdc/0x100 [ 49.383628][ T4954] usb_autoresume_device+0x25/0xd0 [ 49.388767][ T4954] usbdev_open+0xfe/0x480 [ 49.393086][ T4954] ? selinux_file_open+0x34c/0x3b0 [ 49.398364][ T4954] chrdev_open+0x323/0x3a0 [ 49.402859][ T4954] ? __pfx_chrdev_open+0x10/0x10 [ 49.407838][ T4954] do_dentry_open+0x647/0xa50 [ 49.412503][ T4954] vfs_open+0x3b/0x1f0 [ 49.416559][ T4954] path_openat+0x1a26/0x1f10 [ 49.421816][ T4954] do_filp_open+0xf7/0x200 [ 49.426237][ T4954] do_sys_openat2+0xab/0x120 [ 49.430817][ T4954] __x64_sys_openat+0xf3/0x120 [ 49.435595][ T4954] x64_sys_call+0x1025/0x2d60 [ 49.440275][ T4954] do_syscall_64+0xc9/0x1c0 [ 49.444779][ T4954] ? clear_bhb_loop+0x55/0xb0 [ 49.449459][ T4954] ? clear_bhb_loop+0x55/0xb0 [ 49.454133][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.460030][ T4954] RIP: 0033:0x7fa576976390 [ 49.464432][ T4954] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 49.484031][ T4954] RSP: 002b:00007fa5755f6b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 49.492478][ T4954] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa576976390 [ 49.500625][ T4954] RDX: 0000000000000000 RSI: 00007fa5755f6c20 RDI: 00000000ffffff9c [ 49.508581][ T4954] RBP: 00007fa5755f6c20 R08: 0000000000000000 R09: 0000000000000000 [ 49.516584][ T4954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 49.524538][ T4954] R13: 000000000000000b R14: 00007fa576b05f80 R15: 00007ffd0b4ef528 [ 49.532572][ T4954] [ 49.535751][ T4954] hub 7-0:1.0: hub_ext_port_status failed (err = -12) [ 49.559652][ T4958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4958 comm=syz.0.382 [ 49.572655][ T4958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.382'. [ 49.618620][ T4961] loop4: detected capacity change from 0 to 512 [ 49.651459][ T4961] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 49.675073][ T4961] EXT4-fs (loop4): invalid journal inode [ 49.681208][ T4961] EXT4-fs (loop4): can't get journal size [ 49.698286][ T4961] EXT4-fs (loop4): 1 truncate cleaned up [ 49.700809][ T4977] loop1: detected capacity change from 0 to 256 [ 49.708813][ T4961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.725794][ T4961] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 49.730956][ T4977] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.756559][ T4977] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.772248][ T4961] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 49.780482][ T4961] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 49.800481][ T29] audit: type=1400 audit(1722732142.268:634): avc: denied { write } for pid=4976 comm="syz.1.388" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.812248][ T4984] loop3: detected capacity change from 0 to 512 [ 49.831232][ T29] audit: type=1400 audit(1722732142.308:635): avc: denied { write } for pid=2943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.843661][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.852747][ T29] audit: type=1400 audit(1722732142.308:636): avc: denied { remove_name } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.883674][ T29] audit: type=1400 audit(1722732142.308:637): avc: denied { add_name } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.886104][ T4984] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 49.906147][ T29] audit: type=1400 audit(1722732142.308:638): avc: denied { unlink } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.915196][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.930215][ T4984] System zones: 0-2, 18-18, 34-35 [ 49.953029][ T4984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.956116][ T4989] loop1: detected capacity change from 0 to 512 [ 49.965783][ T4984] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.998943][ T4989] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 50.009754][ T4989] EXT4-fs (loop1): invalid journal inode [ 50.016434][ T4989] EXT4-fs (loop1): can't get journal size [ 50.022410][ T4989] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 50.022432][ T4989] EXT4-fs: failed to create workqueue [ 50.037360][ T4989] EXT4-fs (loop1): mount failed [ 50.071441][ T5000] netlink: 'syz.1.394': attribute type 7 has an invalid length. [ 50.107521][ T5002] loop1: detected capacity change from 0 to 512 [ 50.132621][ T5002] EXT4-fs: Ignoring removed i_version option [ 50.138870][ T5002] EXT4-fs: Ignoring removed nobh option [ 50.145399][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.154503][ T5002] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.170856][ T5002] EXT4-fs (loop1): 1 truncate cleaned up [ 50.176903][ T5002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.209577][ T5008] FAULT_INJECTION: forcing a failure. [ 50.209577][ T5008] name failslab, interval 1, probability 0, space 0, times 0 [ 50.222376][ T5008] CPU: 0 UID: 0 PID: 5008 Comm: syz.4.397 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 50.232973][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.243028][ T5008] Call Trace: [ 50.246299][ T5008] [ 50.249225][ T5008] dump_stack_lvl+0xf2/0x150 [ 50.253872][ T5008] dump_stack+0x15/0x20 [ 50.258100][ T5008] should_fail_ex+0x229/0x230 [ 50.264700][ T5008] ? usb_alloc_urb+0x36/0xb0 [ 50.269442][ T5008] should_failslab+0x8f/0xb0 [ 50.274067][ T5008] __kmalloc_noprof+0xa5/0x370 [ 50.278839][ T5008] usb_alloc_urb+0x36/0xb0 [ 50.283281][ T5008] usb_control_msg+0xd2/0x240 [ 50.288027][ T5008] hub_ext_port_status+0xbf/0x480 [ 50.293090][ T5008] hub_activate+0x4c8/0xf30 [ 50.297612][ T5008] hub_resume+0x48/0x1e0 [ 50.301869][ T5008] ? mutex_lock+0xd/0x40 [ 50.306118][ T5008] usb_resume_both+0x3ed/0x5b0 [ 50.310960][ T5008] ? __pfx_usb_runtime_resume+0x10/0x10 [ 50.316500][ T5008] usb_runtime_resume+0x21/0x30 [ 50.321436][ T5008] __rpm_callback+0x299/0x720 [ 50.326260][ T5008] ? __pfx_usb_runtime_resume+0x10/0x10 [ 50.331813][ T5008] rpm_resume+0x8e6/0xd00 [ 50.334971][ T5002] loop1: detected capacity change from 512 to 511 [ 50.336200][ T5008] ? klist_dec_and_del+0xb7/0x270 [ 50.347617][ T5008] __pm_runtime_resume+0xdc/0x100 [ 50.352704][ T5008] usb_autoresume_device+0x25/0xd0 [ 50.357848][ T5008] usbdev_open+0xfe/0x480 [ 50.362186][ T5008] ? selinux_file_open+0x34c/0x3b0 [ 50.367317][ T5008] chrdev_open+0x323/0x3a0 [ 50.371795][ T5008] ? __pfx_chrdev_open+0x10/0x10 [ 50.376731][ T5008] do_dentry_open+0x647/0xa50 [ 50.381451][ T5008] vfs_open+0x3b/0x1f0 [ 50.385524][ T5008] path_openat+0x1a26/0x1f10 [ 50.390133][ T5008] do_filp_open+0xf7/0x200 [ 50.394626][ T5008] do_sys_openat2+0xab/0x120 [ 50.399378][ T5008] __x64_sys_openat+0xf3/0x120 [ 50.404181][ T5008] x64_sys_call+0x1025/0x2d60 [ 50.408918][ T5008] do_syscall_64+0xc9/0x1c0 [ 50.413436][ T5008] ? clear_bhb_loop+0x55/0xb0 [ 50.418116][ T5008] ? clear_bhb_loop+0x55/0xb0 [ 50.422823][ T5008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.428817][ T5008] RIP: 0033:0x7f797a6d6390 [ 50.433277][ T5008] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 50.452926][ T5008] RSP: 002b:00007f7979356b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 50.461435][ T5008] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f797a6d6390 [ 50.469413][ T5008] RDX: 0000000000000000 RSI: 00007f7979356c20 RDI: 00000000ffffff9c [ 50.477434][ T5008] RBP: 00007f7979356c20 R08: 0000000000000000 R09: 0000000000000000 [ 50.485433][ T5008] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 50.493398][ T5008] R13: 000000000000000b R14: 00007f797a865f80 R15: 00007ffe68df6148 [ 50.501388][ T5008] [ 50.504722][ T5008] hub 7-0:1.0: hub_ext_port_status failed (err = -12) [ 50.507166][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.698541][ T5034] loop4: detected capacity change from 0 to 1024 [ 50.713745][ T5034] loop4: detected capacity change from 0 to 1024 [ 50.733550][ T5034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.766542][ T5034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.838378][ T5036] syz.3.404 (5036): /proc/5031/oom_adj is deprecated, please use /proc/5031/oom_score_adj instead. [ 50.896419][ T5046] tls_set_device_offload_rx: netdev not found [ 50.915959][ T5048] FAULT_INJECTION: forcing a failure. [ 50.915959][ T5048] name failslab, interval 1, probability 0, space 0, times 0 [ 50.928628][ T5048] CPU: 1 UID: 0 PID: 5048 Comm: syz.0.409 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 50.939268][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.941203][ T5034] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:22 [ 50.949309][ T5048] Call Trace: [ 50.949319][ T5048] [ 50.949326][ T5048] dump_stack_lvl+0xf2/0x150 [ 50.966586][ T5048] dump_stack+0x15/0x20 [ 50.970798][ T5048] should_fail_ex+0x229/0x230 [ 50.975485][ T5048] ? usb_hcd_submit_urb+0x629/0x1510 [ 50.980774][ T5048] should_failslab+0x8f/0xb0 [ 50.985380][ T5048] __kmalloc_noprof+0xa5/0x370 [ 50.990147][ T5048] ? mon_submit+0x15f/0x170 [ 50.994657][ T5048] usb_hcd_submit_urb+0x629/0x1510 [ 50.999771][ T5048] usb_submit_urb+0xa80/0xb70 [ 51.004455][ T5048] usb_start_wait_urb+0x91/0x190 [ 51.009474][ T5048] usb_control_msg+0x182/0x240 [ 51.014243][ T5048] hub_ext_port_status+0xbf/0x480 [ 51.019273][ T5048] hub_activate+0x4c8/0xf30 [ 51.023831][ T5048] hub_resume+0x48/0x1e0 [ 51.028122][ T5048] ? mutex_lock+0xd/0x40 [ 51.032424][ T5048] usb_resume_both+0x3ed/0x5b0 [ 51.037184][ T5048] ? __pfx_usb_runtime_resume+0x10/0x10 [ 51.042827][ T5048] usb_runtime_resume+0x21/0x30 [ 51.047680][ T5048] __rpm_callback+0x299/0x720 [ 51.052357][ T5048] ? __pfx_usb_runtime_resume+0x10/0x10 [ 51.057899][ T5048] rpm_resume+0x8e6/0xd00 [ 51.062229][ T5048] ? klist_dec_and_del+0xb7/0x270 [ 51.067258][ T5048] __pm_runtime_resume+0xdc/0x100 [ 51.072352][ T5048] usb_autoresume_device+0x25/0xd0 [ 51.077510][ T5048] usbdev_open+0xfe/0x480 [ 51.081836][ T5048] ? selinux_file_open+0x34c/0x3b0 [ 51.087028][ T5048] chrdev_open+0x323/0x3a0 [ 51.091457][ T5048] ? __pfx_chrdev_open+0x10/0x10 [ 51.096464][ T5048] do_dentry_open+0x647/0xa50 [ 51.101143][ T5048] vfs_open+0x3b/0x1f0 [ 51.105389][ T5048] path_openat+0x1a26/0x1f10 [ 51.109980][ T5048] do_filp_open+0xf7/0x200 [ 51.114401][ T5048] do_sys_openat2+0xab/0x120 [ 51.118989][ T5048] __x64_sys_openat+0xf3/0x120 [ 51.123773][ T5048] x64_sys_call+0x1025/0x2d60 [ 51.128457][ T5048] do_syscall_64+0xc9/0x1c0 [ 51.132970][ T5048] ? clear_bhb_loop+0x55/0xb0 [ 51.137653][ T5048] ? clear_bhb_loop+0x55/0xb0 [ 51.142388][ T5048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.148378][ T5048] RIP: 0033:0x7f71ee3e6390 [ 51.152852][ T5048] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 51.172499][ T5048] RSP: 002b:00007f71ed066b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 51.180920][ T5048] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f71ee3e6390 [ 51.188891][ T5048] RDX: 0000000000000000 RSI: 00007f71ed066c20 RDI: 00000000ffffff9c [ 51.196869][ T5048] RBP: 00007f71ed066c20 R08: 0000000000000000 R09: 0000000000000000 [ 51.204871][ T5048] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 51.212846][ T5048] R13: 000000000000000b R14: 00007f71ee575f80 R15: 00007fff4fd23908 [ 51.220833][ T5048] [ 51.251485][ T4245] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /30/bus: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 51.286997][ T5048] hub 7-0:1.0: hub_ext_port_status failed (err = -12) [ 51.344368][ T5060] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 51.351143][ T5060] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.358882][ T5060] vhci_hcd vhci_hcd.0: Device attached [ 51.365952][ T5061] vhci_hcd: unknown pdu 2 [ 51.370423][ T40] vhci_hcd: stop threads [ 51.374669][ T40] vhci_hcd: release socket [ 51.379222][ T40] vhci_hcd: disconnect device [ 51.561039][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.569508][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.570110][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.586025][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.619910][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.668370][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.749500][ T5073] chnl_net:caif_netlink_parms(): no params data found [ 51.779139][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.794657][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.801787][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.809135][ T5073] bridge_slave_0: entered allmulticast mode [ 51.815752][ T5073] bridge_slave_0: entered promiscuous mode [ 51.825362][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.836309][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.843409][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.850704][ T5073] bridge_slave_1: entered allmulticast mode [ 51.857197][ T5073] bridge_slave_1: entered promiscuous mode [ 51.872610][ T5073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.882972][ T5073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.902643][ T5073] team0: Port device team_slave_0 added [ 51.909230][ T5073] team0: Port device team_slave_1 added [ 51.946773][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.953747][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.979913][ T5073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.991622][ T28] bridge_slave_1: left allmulticast mode [ 51.997380][ T28] bridge_slave_1: left promiscuous mode [ 52.003017][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.012147][ T28] bridge_slave_0: left allmulticast mode [ 52.017817][ T28] bridge_slave_0: left promiscuous mode [ 52.023449][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.118304][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.127089][ T5099] loop0: detected capacity change from 0 to 1024 [ 52.134828][ T28] bond0 (unregistering): Released all slaves [ 52.138807][ T5099] devtmpfs: Too few inodes for current use [ 52.160177][ T5100] netlink: 'syz.4.423': attribute type 4 has an invalid length. [ 52.170981][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.177963][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.203860][ T5073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.262060][ T5073] hsr_slave_0: entered promiscuous mode [ 52.276624][ T5073] hsr_slave_1: entered promiscuous mode [ 52.284856][ T5073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.295275][ T5073] Cannot create hsr debugfs directory [ 52.315994][ T5120] FAULT_INJECTION: forcing a failure. [ 52.315994][ T5120] name failslab, interval 1, probability 0, space 0, times 0 [ 52.328674][ T5120] CPU: 1 UID: 0 PID: 5120 Comm: syz.2.433 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 52.335708][ T5121] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 52.339252][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 52.356901][ T5120] Call Trace: [ 52.360163][ T5120] [ 52.363076][ T5120] dump_stack_lvl+0xf2/0x150 [ 52.367652][ T5120] dump_stack+0x15/0x20 [ 52.371791][ T5120] should_fail_ex+0x229/0x230 [ 52.376448][ T5120] ? usb_alloc_urb+0x36/0xb0 [ 52.381016][ T5120] should_failslab+0x8f/0xb0 [ 52.385596][ T5120] __kmalloc_noprof+0xa5/0x370 [ 52.390481][ T5120] usb_alloc_urb+0x36/0xb0 [ 52.394892][ T5120] usb_control_msg+0xd2/0x240 [ 52.399555][ T5120] hub_ext_port_status+0xbf/0x480 [ 52.404566][ T5120] hub_activate+0x4c8/0xf30 [ 52.409051][ T5120] hub_resume+0x48/0x1e0 [ 52.413279][ T5120] ? mutex_lock+0xd/0x40 [ 52.417525][ T5120] usb_resume_both+0x3ed/0x5b0 [ 52.422286][ T5120] ? __pfx_usb_runtime_resume+0x10/0x10 [ 52.427883][ T5120] usb_runtime_resume+0x21/0x30 [ 52.432808][ T5120] __rpm_callback+0x299/0x720 [ 52.437510][ T5120] ? __pfx_usb_runtime_resume+0x10/0x10 [ 52.443171][ T5120] rpm_resume+0x8e6/0xd00 [ 52.447538][ T5120] ? klist_dec_and_del+0xb7/0x270 [ 52.452547][ T5120] __pm_runtime_resume+0xdc/0x100 [ 52.457557][ T5120] usb_autoresume_device+0x25/0xd0 [ 52.462677][ T5120] usbdev_open+0xfe/0x480 [ 52.466987][ T5120] ? selinux_file_open+0x34c/0x3b0 [ 52.472107][ T5120] chrdev_open+0x323/0x3a0 [ 52.476548][ T5120] ? __pfx_chrdev_open+0x10/0x10 [ 52.481502][ T5120] do_dentry_open+0x647/0xa50 [ 52.486191][ T5120] vfs_open+0x3b/0x1f0 [ 52.490279][ T5120] path_openat+0x1a26/0x1f10 [ 52.494880][ T5120] do_filp_open+0xf7/0x200 [ 52.499384][ T5120] do_sys_openat2+0xab/0x120 [ 52.503954][ T5120] __x64_sys_openat+0xf3/0x120 [ 52.508698][ T5120] x64_sys_call+0x1025/0x2d60 [ 52.513419][ T5120] do_syscall_64+0xc9/0x1c0 [ 52.517976][ T5120] ? clear_bhb_loop+0x55/0xb0 [ 52.522631][ T5120] ? clear_bhb_loop+0x55/0xb0 [ 52.527288][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.533162][ T5120] RIP: 0033:0x7fa576976390 [ 52.537554][ T5120] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8e 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8e 02 00 8b 44 [ 52.557155][ T5120] RSP: 002b:00007fa5755f6b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 52.565709][ T5120] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa576976390 [ 52.573665][ T5120] RDX: 0000000000000000 RSI: 00007fa5755f6c20 RDI: 00000000ffffff9c [ 52.581616][ T5120] RBP: 00007fa5755f6c20 R08: 0000000000000000 R09: 0000000000000000 [ 52.589651][ T5120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 52.597602][ T5120] R13: 000000000000000b R14: 00007fa576b05f80 R15: 00007ffd0b4ef528 [ 52.605599][ T5120] [ 52.609074][ T5120] hub 7-0:1.0: hub_ext_port_status failed (err = -12) [ 52.613040][ T5122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.431'. [ 52.626669][ T28] hsr_slave_0: left promiscuous mode [ 52.632378][ T28] hsr_slave_1: left promiscuous mode [ 52.638466][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.645980][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.653576][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.661123][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.670982][ T28] veth1_macvtap: left promiscuous mode [ 52.676736][ T28] veth0_macvtap: left promiscuous mode [ 52.682263][ T28] veth1_vlan: left promiscuous mode [ 52.687704][ T28] veth0_vlan: left promiscuous mode [ 52.770836][ T5132] 9pnet_fd: Insufficient options for proto=fd [ 52.788895][ T28] team0 (unregistering): Port device team_slave_1 removed [ 52.799716][ T28] team0 (unregistering): Port device team_slave_0 removed [ 52.905654][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.925132][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.998436][ T5129] chnl_net:caif_netlink_parms(): no params data found [ 53.052809][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.059932][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.067128][ T5129] bridge_slave_0: entered allmulticast mode [ 53.073528][ T5129] bridge_slave_0: entered promiscuous mode [ 53.080279][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.087376][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.094715][ T5129] bridge_slave_1: entered allmulticast mode [ 53.101057][ T5129] bridge_slave_1: entered promiscuous mode [ 53.122314][ T5167] FAULT_INJECTION: forcing a failure. [ 53.122314][ T5167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.135492][ T5167] CPU: 0 UID: 0 PID: 5167 Comm: syz.3.441 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 53.146107][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 53.156419][ T5167] Call Trace: [ 53.159692][ T5167] [ 53.162622][ T5167] dump_stack_lvl+0xf2/0x150 [ 53.167243][ T5167] dump_stack+0x15/0x20 [ 53.171465][ T5167] should_fail_ex+0x229/0x230 [ 53.176157][ T5167] should_fail+0xb/0x10 [ 53.180323][ T5167] should_fail_usercopy+0x1a/0x20 [ 53.185407][ T5167] _copy_from_user+0x1e/0xd0 [ 53.189996][ T5167] kstrtouint_from_user+0x76/0xe0 [ 53.195074][ T5167] proc_fail_nth_write+0x4f/0x160 [ 53.200113][ T5167] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.205762][ T5167] vfs_write+0x28b/0x900 [ 53.210056][ T5167] ? __fget_files+0x1da/0x210 [ 53.214716][ T5167] ksys_write+0xeb/0x1b0 [ 53.218949][ T5167] __x64_sys_write+0x42/0x50 [ 53.223533][ T5167] x64_sys_call+0x27dd/0x2d60 [ 53.228197][ T5167] do_syscall_64+0xc9/0x1c0 [ 53.232719][ T5167] ? clear_bhb_loop+0x55/0xb0 [ 53.237386][ T5167] ? clear_bhb_loop+0x55/0xb0 [ 53.242049][ T5167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.248057][ T5167] RIP: 0033:0x7ff2e66464df [ 53.252449][ T5167] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 53.272095][ T5167] RSP: 002b:00007ff2e52c7040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 53.280616][ T5167] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2e66464df [ 53.288577][ T5167] RDX: 0000000000000001 RSI: 00007ff2e52c70b0 RDI: 0000000000000004 [ 53.296552][ T5167] RBP: 00007ff2e52c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.304609][ T5167] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 53.312690][ T5167] R13: 000000000000000b R14: 00007ff2e67d5f80 R15: 00007ffc53f22f88 [ 53.320677][ T5167] [ 53.342974][ T5177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5177 comm=syz.3.444 [ 53.343156][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.364507][ T5177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 53.381288][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.403493][ T5129] team0: Port device team_slave_0 added [ 53.410342][ T5129] team0: Port device team_slave_1 added [ 53.433496][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.440843][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.467028][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.479729][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.486717][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.512639][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.538253][ T5073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.552500][ T5073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.561784][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 53.561796][ T29] audit: type=1326 audit(1722732146.028:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.3.445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e66479f9 code=0x0 [ 53.591463][ T5073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.600213][ T5073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.616334][ T5129] hsr_slave_0: entered promiscuous mode [ 53.622285][ T5129] hsr_slave_1: entered promiscuous mode [ 53.748456][ T5129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.766016][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.774909][ T5206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=298 sclass=netlink_route_socket pid=5206 comm=syz.2.449 [ 53.782274][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.796284][ T5205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5205 comm=syz.2.449 [ 53.797351][ T29] audit: type=1400 audit(1722732146.268:673): avc: denied { listen } for pid=5204 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.828715][ T29] audit: type=1400 audit(1722732146.288:674): avc: denied { read } for pid=5204 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.853628][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 53.872152][ T5129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.895868][ T3840] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.902916][ T3840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.911538][ T3840] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.918673][ T3840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.949899][ T5129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.980184][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.052136][ T5073] veth0_vlan: entered promiscuous mode [ 54.067353][ T5129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.081132][ T5073] veth1_vlan: entered promiscuous mode [ 54.099078][ T5073] veth0_macvtap: entered promiscuous mode [ 54.106512][ T5073] veth1_macvtap: entered promiscuous mode [ 54.123644][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.134333][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.144165][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.154642][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.164473][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.174965][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.178338][ T5227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5227 comm=syz.2.453 [ 54.187820][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.204235][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 54.216051][ T5227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.453'. [ 54.231025][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.241581][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.251551][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.262008][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.271933][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.282350][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.294877][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.310867][ T5073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.319699][ T5073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.328569][ T5073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.337270][ T5073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.361525][ T5129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.387637][ T5129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.419519][ T5129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.421279][ T5238] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 54.437599][ T5129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.502194][ T5247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=5247 comm=syz.4.460 [ 54.527353][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.529761][ T5247] cgroup: fork rejected by pids controller in /syz4 [ 54.541433][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.574563][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.581751][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.633492][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.640634][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.671557][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 54.758422][ T29] audit: type=1400 audit(1722732147.218:675): avc: denied { read } for pid=5291 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.814558][ T29] audit: type=1400 audit(1722732147.278:676): avc: denied { mount } for pid=5380 comm="syz.1.466" name="/" dev="rpc_pipefs" ino=11703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 54.846894][ T29] audit: type=1400 audit(1722732147.308:677): avc: denied { setopt } for pid=5380 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.891790][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.904396][ T5390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5390 comm=syz.2.468 [ 54.917910][ T5390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.468'. [ 54.982057][ T5129] veth0_vlan: entered promiscuous mode [ 55.000665][ T5129] veth1_vlan: entered promiscuous mode [ 55.016747][ T5129] veth0_macvtap: entered promiscuous mode [ 55.024226][ T5129] veth1_macvtap: entered promiscuous mode [ 55.035205][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.045691][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.055583][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.066046][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.076060][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.086515][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.096406][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.106863][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.124632][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.126260][ T5402] loop1: detected capacity change from 0 to 1024 [ 55.139856][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.148982][ T5402] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58928!=20869) [ 55.150525][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.160013][ T5402] EXT4-fs (loop1): group descriptors corrupted! [ 55.176267][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.186778][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.196677][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.207131][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.217038][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.227524][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.239480][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.250369][ T5129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.259131][ T5129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.268181][ T5129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.276996][ T5129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.290651][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 55.354854][ T5406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.472'. [ 55.419915][ T29] audit: type=1400 audit(1722732147.888:678): avc: denied { create } for pid=5421 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 55.502318][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 55.554340][ T29] audit: type=1400 audit(1722732148.018:679): avc: denied { accept } for pid=5438 comm="syz.1.478" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.579893][ T5441] loop3: detected capacity change from 0 to 1024 [ 55.590402][ T29] audit: type=1400 audit(1722732148.058:680): avc: denied { name_bind } for pid=5438 comm="syz.1.478" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 55.612740][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.620004][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.627088][ T5441] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.628149][ T5401] bridge_slave_0: entered allmulticast mode [ 55.636504][ T5441] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.652751][ T5441] EXT4-fs (loop3): group descriptors corrupted! [ 55.655460][ T5420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.669218][ T5401] bridge_slave_0: entered promiscuous mode [ 55.676998][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.684146][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.691369][ T5401] bridge_slave_1: entered allmulticast mode [ 55.698164][ T5401] bridge_slave_1: entered promiscuous mode [ 55.711733][ T5420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.734120][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.753011][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.773302][ T5457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5457 comm=syz.1.481 [ 55.792987][ T5401] team0: Port device team_slave_0 added [ 55.799745][ T5401] team0: Port device team_slave_1 added [ 55.811871][ T5457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 55.826781][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.833748][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.859735][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.872340][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.879319][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.905289][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.954649][ T5401] hsr_slave_0: entered promiscuous mode [ 55.960911][ T5401] hsr_slave_1: entered promiscuous mode [ 55.971269][ T5401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.979008][ T5401] Cannot create hsr debugfs directory [ 56.018151][ T5463] hub 6-0:1.0: USB hub found [ 56.023164][ T5463] hub 6-0:1.0: 8 ports detected [ 56.081914][ T5401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.103036][ T5466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.484'. [ 56.126265][ T5401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.175874][ T5401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.176414][ T5463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5463 comm=syz.2.483 [ 56.196671][ T29] audit: type=1400 audit(1722732148.648:681): avc: denied { execute } for pid=5462 comm="syz.2.483" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.288011][ T5401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.385744][ T5401] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.410319][ T5503] loop0: detected capacity change from 0 to 256 [ 56.424369][ T5507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5507 comm=syz.3.494 [ 56.438082][ T5401] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.442958][ T5505] loop2: detected capacity change from 0 to 1024 [ 56.468327][ T5401] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.468737][ T5505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.482224][ T5505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.501725][ T5401] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.547728][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.560478][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.596047][ T3840] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.603231][ T3840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.615048][ T3840] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.622122][ T3840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.708143][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.714184][ T5511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.734918][ T5511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.820498][ T5517] tipc: MTU too low for tipc bearer [ 56.851384][ T5543] netlink: 'syz.3.499': attribute type 3 has an invalid length. [ 56.862208][ T5401] veth0_vlan: entered promiscuous mode [ 56.867759][ T5543] loop3: detected capacity change from 0 to 512 [ 56.876513][ T5543] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 56.882109][ T5401] veth1_vlan: entered promiscuous mode [ 56.884409][ T5543] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 56.901699][ T5401] veth0_macvtap: entered promiscuous mode [ 56.907586][ T5543] System zones: 0-1, 15-15, 18-18, 34-34 [ 56.913503][ T5543] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.919453][ T5401] veth1_macvtap: entered promiscuous mode [ 56.920405][ T5543] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 56.931459][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.940092][ T5543] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 56.950568][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.965640][ T5543] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.499: bg 0: block 40: padding at end of block bitmap is not set [ 56.967097][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.981508][ T5543] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 56.991483][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.991503][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.002358][ T5543] EXT4-fs (loop3): 1 truncate cleaned up [ 57.010016][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.010030][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.010044][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.056368][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.066783][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.077597][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.090898][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.101378][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.111349][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.121915][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.131762][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.142240][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.152131][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.162536][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.172337][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.182820][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.194211][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.202925][ T5401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.211852][ T5401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.220654][ T5401] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.229391][ T5401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.304039][ T5551] loop3: detected capacity change from 0 to 4096 [ 57.337539][ T5554] loop4: detected capacity change from 0 to 4096 [ 57.391422][ T5568] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 57.443887][ T5578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5578 comm=syz.4.506 [ 57.586213][ T5586] vhci_hcd: default hub control req: 0401 v0000 i0000 l1 [ 57.607168][ T5596] tipc: Trying to set illegal importance in message [ 57.616383][ T5597] sctp: [Deprecated]: syz.3.513 (pid 5597) Use of int in maxseg socket option. [ 57.616383][ T5597] Use struct sctp_assoc_value instead [ 57.666805][ T5600] sctp: [Deprecated]: syz.3.513 (pid 5600) Use of int in maxseg socket option. [ 57.666805][ T5600] Use struct sctp_assoc_value instead [ 57.689632][ T5596] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 57.830278][ T5606] loop4: detected capacity change from 0 to 512 [ 57.838319][ T5606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.849172][ T5606] EXT4-fs (loop4): 1 truncate cleaned up [ 57.857843][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.866479][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.917759][ T5606] EXT4-fs (loop4): shut down requested (0) [ 58.230277][ T5628] loop4: detected capacity change from 0 to 256 [ 58.350675][ T5640] loop4: detected capacity change from 0 to 8192 [ 58.371198][ T5640] Process accounting resumed [ 58.463244][ T5646] loop0: detected capacity change from 0 to 128 [ 58.471608][ T5648] loop2: detected capacity change from 0 to 2048 [ 58.523125][ T5651] __nla_validate_parse: 9 callbacks suppressed [ 58.523144][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 58.529595][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 58.566039][ T5654] loop0: detected capacity change from 0 to 1024 [ 58.576415][ T5654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.586587][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881156d0a00: rx timeout, send abort [ 58.594813][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881156d0400: rx timeout, send abort [ 58.603070][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881156d0a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.617356][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881156d0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.636994][ T5654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 58.658779][ T5654] System zones: 0-1, 3-12 [ 58.677016][ T5654] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 58.748777][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 58.748842][ T29] audit: type=1400 audit(1722732151.218:693): avc: denied { setopt } for pid=5664 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.785040][ T29] audit: type=1400 audit(1722732151.228:694): avc: denied { read } for pid=5664 comm="syz.2.537" dev="sockfs" ino=13476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.890899][ T5673] selinux_netlink_send: 1 callbacks suppressed [ 58.890913][ T5673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5673 comm=syz.4.539 [ 58.909820][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.539'. [ 58.913306][ T5671] loop3: detected capacity change from 0 to 2048 [ 59.023001][ T5671] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.540: bg 0: block 234: padding at end of block bitmap is not set [ 59.039784][ T5671] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 59.052292][ T5671] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.052292][ T5671] [ 59.061985][ T5671] EXT4-fs (loop3): Total free blocks count 0 [ 59.067989][ T5671] EXT4-fs (loop3): Free/Dirty block details [ 59.073874][ T5671] EXT4-fs (loop3): free_blocks=0 [ 59.078907][ T5671] EXT4-fs (loop3): dirty_blocks=2688 [ 59.084208][ T5671] EXT4-fs (loop3): Block reservation details [ 59.090299][ T5671] EXT4-fs (loop3): i_reserved_data_blocks=168 [ 59.098653][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.108710][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.153476][ T5697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.542'. [ 59.166265][ T5671] syz.3.540 (5671) used greatest stack depth: 9720 bytes left [ 59.185411][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 632 with error 28 [ 59.198465][ T28] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.198465][ T28] [ 59.241453][ T5707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.545'. [ 59.250410][ T5707] netlink: 43 bytes leftover after parsing attributes in process `syz.3.545'. [ 59.256589][ T5708] loop4: detected capacity change from 0 to 512 [ 59.259292][ T5707] netlink: 'syz.3.545': attribute type 6 has an invalid length. [ 59.273214][ T5707] netlink: 'syz.3.545': attribute type 5 has an invalid length. [ 59.281093][ T5707] netlink: 43 bytes leftover after parsing attributes in process `syz.3.545'. [ 59.286439][ T5708] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.609247][ T29] audit: type=1400 audit(1722732152.078:695): avc: denied { connect } for pid=5714 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.661156][ T29] audit: type=1400 audit(1722732152.128:696): avc: denied { bind } for pid=5721 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.698538][ T5726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5726 comm=syz.0.551 [ 59.711233][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 59.809862][ T5732] loop2: detected capacity change from 0 to 512 [ 59.820709][ T5732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.839055][ T5732] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.553: bg 0: block 248: padding at end of block bitmap is not set [ 59.854448][ T5732] Quota error (device loop2): write_blk: dquota write failed [ 59.861924][ T5732] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 59.871880][ T5732] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.553: Failed to acquire dquot type 1 [ 59.884303][ T5732] EXT4-fs (loop2): 1 truncate cleaned up [ 59.887698][ T5740] loop0: detected capacity change from 0 to 512 [ 59.891910][ T5732] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.909195][ T5740] ext4: Unexpected value for 'noload' [ 59.955989][ T5732] syz.2.553 (5732) used greatest stack depth: 9416 bytes left [ 59.971990][ T50] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 59.981024][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u8:3: Failed to release dquot type 1 [ 60.056171][ T5754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.561'. [ 60.068067][ T3335] IPVS: starting estimator thread 0... [ 60.156400][ T5757] IPVS: using max 2832 ests per chain, 141600 per kthread [ 60.165891][ T5754] usb usb8: usbfs: process 5754 (syz.1.561) did not claim interface 0 before use [ 60.191136][ T5771] loop4: detected capacity change from 0 to 1024 [ 60.198573][ T5771] EXT4-fs: Ignoring removed orlov option [ 60.204245][ T5771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.223761][ T5744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.233121][ T5744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.239021][ T5776] loop2: detected capacity change from 0 to 128 [ 60.247574][ T5776] vfat: Unknown parameter './file0/file0' [ 60.264848][ T29] audit: type=1400 audit(1722732152.728:697): avc: denied { getopt } for pid=5768 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.409500][ T5784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.570'. [ 60.480441][ T5803] loop4: detected capacity change from 0 to 2048 [ 60.487020][ T5803] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 60.515687][ T5803] loop4: detected capacity change from 0 to 2048 [ 60.565088][ T29] audit: type=1400 audit(1722732153.028:698): avc: denied { remove_name } for pid=5401 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.588243][ T29] audit: type=1400 audit(1722732153.028:699): avc: denied { rmdir } for pid=5401 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.676198][ T5811] pim6reg1: entered promiscuous mode [ 60.681511][ T5811] pim6reg1: entered allmulticast mode [ 60.694057][ T5811] loop1: detected capacity change from 0 to 1024 [ 60.773230][ T5817] syzkaller1: entered promiscuous mode [ 60.778744][ T5817] syzkaller1: entered allmulticast mode [ 60.790922][ T5817] loop0: detected capacity change from 0 to 128 [ 60.975969][ T5822] loop3: detected capacity change from 0 to 256 [ 60.982422][ T5822] vfat: Bad value for 'fmask' [ 61.004509][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 61.048574][ T5827] loop2: detected capacity change from 0 to 2048 [ 61.085954][ T3519] kworker/u8:8: attempt to access beyond end of device [ 61.085954][ T3519] loop0: rw=1, sector=129, nr_sectors = 56 limit=128 [ 61.119032][ T5835] pim6reg1: entered promiscuous mode [ 61.124456][ T5835] pim6reg1: entered allmulticast mode [ 61.163496][ T50] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.180767][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.193070][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.193070][ T50] [ 61.202769][ T50] EXT4-fs (loop2): Total free blocks count 0 [ 61.208766][ T50] EXT4-fs (loop2): Free/Dirty block details [ 61.214657][ T50] EXT4-fs (loop2): free_blocks=2415919104 [ 61.220446][ T50] EXT4-fs (loop2): dirty_blocks=16 [ 61.225677][ T50] EXT4-fs (loop2): Block reservation details [ 61.231657][ T50] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 61.357625][ T5847] loop0: detected capacity change from 0 to 128 [ 61.367377][ T5847] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.535939][ T5863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.544351][ T5863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.562380][ T5865] loop0: detected capacity change from 0 to 128 [ 61.580288][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 61.584591][ T5865] vfat: Unknown parameter './file0/file0' [ 61.701616][ T5877] 9pnet_fd: Insufficient options for proto=fd [ 62.296041][ T5912] vhci_hcd: default hub control req: 0401 v0000 i0000 l1 [ 63.080060][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.128310][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.178695][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.228189][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.273825][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 63.317133][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.324400][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.331643][ T5930] bridge_slave_0: entered allmulticast mode [ 63.338050][ T5930] bridge_slave_0: entered promiscuous mode [ 63.350302][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.357535][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.367005][ T5930] bridge_slave_1: entered allmulticast mode [ 63.373322][ T5930] bridge_slave_1: entered promiscuous mode [ 63.380491][ T40] bridge_slave_1: left allmulticast mode [ 63.386205][ T40] bridge_slave_1: left promiscuous mode [ 63.391941][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.399918][ T40] bridge_slave_0: left allmulticast mode [ 63.405623][ T40] bridge_slave_0: left promiscuous mode [ 63.411200][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.479183][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.489504][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.499319][ T40] bond0 (unregistering): Released all slaves [ 63.526321][ T5956] loop3: detected capacity change from 0 to 256 [ 63.529118][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.548574][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.574571][ T5930] team0: Port device team_slave_0 added [ 63.579812][ T5960] loop3: detected capacity change from 0 to 512 [ 63.586963][ T5930] team0: Port device team_slave_1 added [ 63.589125][ T5960] EXT4-fs: quotafile must be on filesystem root [ 63.601377][ T40] hsr_slave_0: left promiscuous mode [ 63.612495][ T40] hsr_slave_1: left promiscuous mode [ 63.622869][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.630322][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.650411][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.657991][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.688616][ T40] veth1_macvtap: left promiscuous mode [ 63.694111][ T40] veth0_macvtap: left promiscuous mode [ 63.699736][ T40] veth1_vlan: left promiscuous mode [ 63.705088][ T40] veth0_vlan: left promiscuous mode [ 63.788644][ T40] team0 (unregistering): Port device team_slave_1 removed [ 63.798876][ T40] team0 (unregistering): Port device team_slave_0 removed [ 63.847066][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.854040][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.879974][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.887602][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 63.887616][ T29] audit: type=1400 audit(1722732156.338:843): avc: denied { read } for pid=5980 comm="syz.3.625" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.891985][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.896621][ T29] audit: type=1400 audit(1722732156.338:844): avc: denied { open } for pid=5980 comm="syz.3.625" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.920477][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.927561][ T29] audit: type=1400 audit(1722732156.338:845): avc: denied { write } for pid=5980 comm="syz.3.625" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.951763][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.987335][ T5983] loop3: detected capacity change from 0 to 512 [ 64.019291][ T5983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.032835][ T5983] EXT4-fs (loop3): 1 orphan inode deleted [ 64.038619][ T5983] EXT4-fs (loop3): 1 truncate cleaned up [ 64.047093][ T5983] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #12: block 7: comm syz.3.626: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 64.048508][ T5930] hsr_slave_0: entered promiscuous mode [ 64.075659][ T5983] EXT4-fs (loop3): Remounting filesystem read-only [ 64.083664][ T5930] hsr_slave_1: entered promiscuous mode [ 64.097000][ T5930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.104606][ T5930] Cannot create hsr debugfs directory [ 64.124080][ T29] audit: type=1400 audit(1722732156.588:846): avc: denied { setopt } for pid=5986 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.199168][ T29] audit: type=1400 audit(1722732156.668:847): avc: denied { bind } for pid=5986 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.218512][ T29] audit: type=1400 audit(1722732156.668:848): avc: denied { node_bind } for pid=5986 comm="syz.0.627" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 64.309873][ T29] audit: type=1400 audit(1722732156.778:849): avc: denied { read } for pid=6016 comm="syz.3.629" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.332908][ T29] audit: type=1400 audit(1722732156.778:850): avc: denied { open } for pid=6016 comm="syz.3.629" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.377311][ T6017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.459902][ T6044] __nla_validate_parse: 2 callbacks suppressed [ 64.459918][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 64.507288][ T29] audit: type=1400 audit(1722732156.978:851): avc: denied { write } for pid=6039 comm="syz.3.633" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.541382][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 64.579873][ T5930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.596611][ T5930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.613326][ T5930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.623915][ T5930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.638147][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.682953][ T29] audit: type=1400 audit(1722732157.148:852): avc: denied { setopt } for pid=6070 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.696499][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.716995][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.728011][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.735185][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.760679][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.767856][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.787958][ T5930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.798554][ T5930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.887652][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.044372][ T5930] veth0_vlan: entered promiscuous mode [ 65.058842][ T5930] veth1_vlan: entered promiscuous mode [ 65.081883][ T5930] veth0_macvtap: entered promiscuous mode [ 65.098905][ T5930] veth1_macvtap: entered promiscuous mode [ 65.128112][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.138690][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.148595][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.159157][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.169064][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.179655][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.189478][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.199985][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.209857][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.220366][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.250661][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.263947][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.274413][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.284282][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.294711][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.304563][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.315010][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.324807][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.335317][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.345205][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.355645][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.393804][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.448164][ T5930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.456988][ T5930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.465805][ T5930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.474506][ T5930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.524601][ T6156] netlink: 'syz.3.646': attribute type 3 has an invalid length. [ 65.708327][ T2961] udevd[2961]: worker [3251] terminated by signal 33 (Unknown signal 33) [ 65.721429][ T6197] loop3: detected capacity change from 0 to 512 [ 65.729730][ T2961] udevd[2961]: worker [3251] failed while handling '/devices/virtual/block/loop3' [ 65.740445][ T6197] EXT4-fs: Ignoring removed orlov option [ 65.752751][ T6199] loop1: detected capacity change from 0 to 1024 [ 65.757108][ T6203] FAULT_INJECTION: forcing a failure. [ 65.757108][ T6203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.772190][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.4.659 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 65.782898][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 65.792958][ T6203] Call Trace: [ 65.796233][ T6203] [ 65.799156][ T6203] dump_stack_lvl+0xf2/0x150 [ 65.803827][ T6203] dump_stack+0x15/0x20 [ 65.808006][ T6203] should_fail_ex+0x229/0x230 [ 65.812763][ T6203] should_fail+0xb/0x10 [ 65.816924][ T6203] should_fail_usercopy+0x1a/0x20 [ 65.821964][ T6203] _copy_from_iter+0xd3/0xb00 [ 65.826711][ T6203] ? kmalloc_reserve+0x16e/0x190 [ 65.831661][ T6203] ? __build_skb_around+0x196/0x1f0 [ 65.836923][ T6203] ? __alloc_skb+0x21f/0x310 [ 65.841544][ T6203] ? __virt_addr_valid+0x1ed/0x250 [ 65.846650][ T6203] ? __check_object_size+0x35b/0x510 [ 65.852031][ T6203] netlink_sendmsg+0x460/0x6e0 [ 65.856943][ T6203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.862236][ T6203] __sock_sendmsg+0x140/0x180 [ 65.866925][ T6203] ____sys_sendmsg+0x312/0x410 [ 65.868114][ T6197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 65.871681][ T6203] __sys_sendmsg+0x1e9/0x280 [ 65.871713][ T6203] __x64_sys_sendmsg+0x46/0x50 [ 65.889042][ T6203] x64_sys_call+0x2689/0x2d60 [ 65.893763][ T6203] do_syscall_64+0xc9/0x1c0 [ 65.897502][ T6197] System zones: [ 65.898265][ T6203] ? clear_bhb_loop+0x55/0xb0 [ 65.898276][ T6197] 1-12 [ 65.898296][ T6203] ? clear_bhb_loop+0x55/0xb0 [ 65.901831][ T6197] [ 65.906459][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.906487][ T6203] RIP: 0033:0x7f8811f079f9 [ 65.906516][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.919656][ T6197] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.657: casefold flag without casefold feature [ 65.922017][ T6203] RSP: 002b:00007f8810b87048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.922039][ T6203] RAX: ffffffffffffffda RBX: 00007f8812095f80 RCX: 00007f8811f079f9 [ 65.933931][ T6197] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.657: couldn't read orphan inode 15 (err -117) [ 65.946165][ T6203] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 65.946180][ T6203] RBP: 00007f8810b870a0 R08: 0000000000000000 R09: 0000000000000000 [ 65.946192][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.946204][ T6203] R13: 000000000000000b R14: 00007f8812095f80 R15: 00007ffc175d0a88 [ 65.946237][ T6203] [ 66.030980][ T6213] netlink: 'syz.2.662': attribute type 12 has an invalid length. [ 66.039209][ T6197] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.657: Directory hole found for htree leaf block 0 [ 66.043814][ T6214] syzkaller0: entered promiscuous mode [ 66.055731][ T6213] loop2: detected capacity change from 0 to 512 [ 66.057721][ T6214] syzkaller0: entered allmulticast mode [ 66.067055][ T6213] /dev/loop2: Can't open blockdev [ 66.112457][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.133840][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.201804][ T6231] loop3: detected capacity change from 0 to 512 [ 66.234785][ T6231] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.318127][ T6251] loop0: detected capacity change from 0 to 1024 [ 66.322577][ T6238] loop4: detected capacity change from 0 to 1024 [ 66.324831][ T6251] journal_path: Lookup failure for './file0' [ 66.336850][ T6251] EXT4-fs: error: could not find journal device path [ 66.348128][ T6241] loop1: detected capacity change from 0 to 1024 [ 66.356011][ T6238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.363255][ T6238] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.396631][ T6238] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 66.396655][ T6238] EXT4-fs: failed to create workqueue [ 66.411502][ T6238] EXT4-fs (loop4): mount failed [ 66.484554][ T6275] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.492198][ T6275] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 66.572383][ T6271] loop3: detected capacity change from 0 to 512 [ 66.580303][ T6271] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.596792][ T6271] EXT4-fs (loop3): 1 truncate cleaned up [ 66.600710][ T6287] loop2: detected capacity change from 0 to 512 [ 66.609243][ T6271] EXT4-fs mount: 39 callbacks suppressed [ 66.609254][ T6271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.648299][ T6289] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 66.658059][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.666388][ T6289] team0: Port device netdevsim1 added [ 66.675856][ T6287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.693274][ T6287] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.717811][ T3670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.747645][ T6303] loop4: detected capacity change from 0 to 1024 [ 66.760897][ T6305] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 66.768353][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.688'. [ 66.783207][ T6303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.815650][ T6313] can: request_module (can-proto-0) failed. [ 66.822127][ T6315] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 66.847980][ T6303] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 66.877532][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 66.889863][ T5930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.905531][ T6321] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 67.001534][ T6342] loop2: detected capacity change from 0 to 512 [ 67.032748][ T6335] syzkaller0: entered promiscuous mode [ 67.038377][ T6335] syzkaller0: entered allmulticast mode [ 67.059653][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.084596][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.109713][ T6342] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.124590][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.148882][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 67.150579][ T6345] loop0: detected capacity change from 0 to 8192 [ 67.197298][ T6350] loop1: detected capacity change from 0 to 256 [ 67.222253][ T6348] netlink: 'syz.1.704': attribute type 21 has an invalid length. [ 67.253255][ T6348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.262270][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.273045][ T6348] netlink: 'syz.1.704': attribute type 21 has an invalid length. [ 67.294846][ T6348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.303878][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.316016][ T6348] netlink: 'syz.1.704': attribute type 21 has an invalid length. [ 67.323841][ T6348] netlink: 'syz.1.704': attribute type 21 has an invalid length. [ 67.333198][ T6348] netlink: 'syz.1.704': attribute type 21 has an invalid length. [ 67.341218][ T6348] netlink: 'syz.1.704': attribute type 21 has an invalid length. [ 67.350534][ T6348] netlink: 'syz.1.704': attribute type 21 has an invalid length. [ 67.439764][ T6361] loop3: detected capacity change from 0 to 1024 [ 67.463985][ T6361] ext4: Unknown parameter 'appraise_type' [ 67.508221][ T6372] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 67.573847][ T6375] loop1: detected capacity change from 0 to 1024 [ 67.589886][ T6375] ext4: Unknown parameter 'smackfstransmute' [ 67.755924][ T6389] loop3: detected capacity change from 0 to 512 [ 67.791478][ T6372] loop4: detected capacity change from 0 to 512 [ 67.817966][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.835051][ T6389] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.863461][ T3670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.883191][ T6372] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 67.927672][ T6372] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 67.953786][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.957833][ T6372] EXT4-fs (loop4): 1 truncate cleaned up [ 68.017239][ T6372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.100072][ T6419] loop1: detected capacity change from 0 to 1024 [ 68.124133][ T6419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.152178][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.168038][ T5930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.199525][ T6429] loop3: detected capacity change from 0 to 128 [ 68.298005][ T3519] kworker/u8:8: attempt to access beyond end of device [ 68.298005][ T3519] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 68.303343][ T6442] loop1: detected capacity change from 0 to 2048 [ 68.331917][ T6442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.368871][ T6446] loop3: detected capacity change from 0 to 128 [ 68.385949][ T6446] EXT4-fs: quotafile must be on filesystem root [ 68.489011][ T6441] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.512240][ T6441] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 68.524534][ T6441] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.524534][ T6441] [ 68.534301][ T6441] EXT4-fs (loop1): Total free blocks count 0 [ 68.540290][ T6441] EXT4-fs (loop1): Free/Dirty block details [ 68.546202][ T6441] EXT4-fs (loop1): free_blocks=2415919104 [ 68.551912][ T6441] EXT4-fs (loop1): dirty_blocks=64 [ 68.557147][ T6441] EXT4-fs (loop1): Block reservation details [ 68.563121][ T6441] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 68.594749][ T6449] loop3: detected capacity change from 0 to 512 [ 68.601516][ T6449] EXT4-fs: Ignoring removed nobh option [ 68.609130][ T6449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.701619][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.917802][ T6461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6461 comm=syz.1.732 [ 68.931857][ T6462] FAULT_INJECTION: forcing a failure. [ 68.931857][ T6462] name failslab, interval 1, probability 0, space 0, times 0 [ 68.944557][ T6462] CPU: 0 UID: 0 PID: 6462 Comm: syz.4.734 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 68.955157][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 68.965210][ T6462] Call Trace: [ 68.968495][ T6462] [ 68.971481][ T6462] dump_stack_lvl+0xf2/0x150 [ 68.976160][ T6462] dump_stack+0x15/0x20 [ 68.980339][ T6462] should_fail_ex+0x229/0x230 [ 68.985054][ T6462] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 68.991319][ T6462] should_failslab+0x8f/0xb0 [ 68.995933][ T6462] __kmalloc_noprof+0xa5/0x370 [ 69.000716][ T6462] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 69.006856][ T6462] genl_rcv_msg+0x470/0x6c0 [ 69.011366][ T6462] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 69.017211][ T6462] ? ref_tracker_free+0x3a5/0x410 [ 69.022416][ T6462] ? __dev_queue_xmit+0x161/0x1fe0 [ 69.027542][ T6462] netlink_rcv_skb+0x12c/0x230 [ 69.032376][ T6462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.037406][ T6462] genl_rcv+0x28/0x40 [ 69.041415][ T6462] netlink_unicast+0x593/0x670 [ 69.046203][ T6462] netlink_sendmsg+0x5cc/0x6e0 [ 69.050970][ T6462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.056248][ T6462] __sock_sendmsg+0x140/0x180 [ 69.061007][ T6462] ____sys_sendmsg+0x312/0x410 [ 69.065847][ T6462] __sys_sendmsg+0x1e9/0x280 [ 69.070516][ T6462] __x64_sys_sendmsg+0x46/0x50 [ 69.075317][ T6462] x64_sys_call+0x2689/0x2d60 [ 69.080000][ T6462] do_syscall_64+0xc9/0x1c0 [ 69.084515][ T6462] ? clear_bhb_loop+0x55/0xb0 [ 69.089318][ T6462] ? clear_bhb_loop+0x55/0xb0 [ 69.094040][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.099947][ T6462] RIP: 0033:0x7f8811f079f9 [ 69.104384][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.123992][ T6462] RSP: 002b:00007f8810b87048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.132460][ T6462] RAX: ffffffffffffffda RBX: 00007f8812095f80 RCX: 00007f8811f079f9 [ 69.140431][ T6462] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 69.148403][ T6462] RBP: 00007f8810b870a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.156411][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.164425][ T6462] R13: 000000000000000b R14: 00007f8812095f80 R15: 00007ffc175d0a88 [ 69.172529][ T6462] [ 69.217240][ T6466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=6466 comm=syz.4.736 [ 69.305748][ T6480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6480 comm=syz.3.742 [ 69.327955][ T6481] loop4: detected capacity change from 0 to 2048 [ 69.352960][ T6486] loop3: detected capacity change from 0 to 2048 [ 69.361885][ T6486] EXT4-fs: Ignoring removed orlov option [ 69.367608][ T6486] EXT4-fs: quotafile must be on filesystem root [ 69.375472][ T6481] loop4: p3 < > p4 < > [ 69.379693][ T6481] loop4: partition table partially beyond EOD, truncated [ 69.383448][ T6486] loop3: detected capacity change from 0 to 512 [ 69.393940][ T6481] loop4: p3 start 4284289 is beyond EOD, truncated [ 69.407086][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 69.407099][ T29] audit: type=1400 audit(1722732161.878:998): avc: denied { read } for pid=6482 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.433938][ T2961] loop4: p3 < > p4 < > [ 69.434399][ T6486] ext3: Unknown parameter 'appraise_type' [ 69.438315][ T2961] loop4: partition table partially beyond EOD, truncated [ 69.438792][ T2961] loop4: p3 start 4284289 is beyond EOD, truncated [ 69.457149][ T29] audit: type=1400 audit(1722732161.908:999): avc: denied { read write } for pid=6485 comm="syz.3.743" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.476384][ T6481] __nla_validate_parse: 65 callbacks suppressed [ 69.476399][ T6481] netlink: 666 bytes leftover after parsing attributes in process `syz.4.741'. [ 69.481049][ T29] audit: type=1400 audit(1722732161.908:1000): avc: denied { open } for pid=6485 comm="syz.3.743" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.519555][ T29] audit: type=1400 audit(1722732161.908:1001): avc: denied { ioctl } for pid=6485 comm="syz.3.743" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.544534][ T29] audit: type=1400 audit(1722732161.908:1002): avc: denied { create } for pid=6485 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 69.564252][ T29] audit: type=1400 audit(1722732161.908:1003): avc: denied { create } for pid=6485 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 69.584520][ T29] audit: type=1400 audit(1722732161.908:1004): avc: denied { write } for pid=6485 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 69.607538][ T29] audit: type=1400 audit(1722732161.988:1005): avc: denied { ioctl } for pid=6482 comm="syz.1.740" path="socket:[16782]" dev="sockfs" ino=16782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.636443][ T6491] 9pnet_fd: Insufficient options for proto=fd [ 69.671326][ T29] audit: type=1326 audit(1722732162.138:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4bf9579f9 code=0x7ffc0000 [ 69.683245][ T6499] loop0: detected capacity change from 0 to 128 [ 69.711037][ T29] audit: type=1326 audit(1722732162.178:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4bf9579f9 code=0x7ffc0000 [ 69.716302][ T6499] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 69.748616][ T6499] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 69.789201][ T6506] usb usb9: usbfs: process 6506 (syz.3.750) did not claim interface 0 before use [ 69.800462][ T6506] loop3: detected capacity change from 0 to 512 [ 69.810967][ T6506] EXT4-fs (loop3): 1 truncate cleaned up [ 69.817230][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.872466][ T6523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6523 comm=syz.4.753 [ 69.909987][ T6527] loop4: detected capacity change from 0 to 2048 [ 69.920224][ T5129] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.930441][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.983611][ T6527] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 69.989465][ T6534] loop3: detected capacity change from 0 to 512 [ 69.991818][ T6527] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 70.001877][ T6529] loop0: detected capacity change from 0 to 512 [ 70.016810][ T6534] EXT4-fs: Ignoring removed oldalloc option [ 70.031446][ T6534] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.758: Parent and EA inode have the same ino 15 [ 70.032452][ T6529] /dev/loop0: Can't open blockdev [ 70.045514][ T6534] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.758: Parent and EA inode have the same ino 15 [ 70.075187][ T6534] EXT4-fs (loop3): 1 orphan inode deleted [ 70.081425][ T6534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.153899][ T6543] loop4: detected capacity change from 0 to 256 [ 70.183690][ T6545] loop1: detected capacity change from 0 to 512 [ 70.195184][ T6547] nft_compat: unsupported protocol 6 [ 70.220339][ T6545] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.221036][ T6553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6553 comm=syz.4.765 [ 70.249304][ T6545] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.275333][ T5073] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 70.321099][ T6561] loop1: detected capacity change from 0 to 2048 [ 70.333100][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.766'. [ 70.343393][ T6561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.373751][ T6565] loop0: detected capacity change from 0 to 512 [ 70.387569][ T6565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.436227][ T6565] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.769: bg 0: block 248: padding at end of block bitmap is not set [ 70.451297][ T6565] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.769: Failed to acquire dquot type 1 [ 70.464625][ T6565] EXT4-fs (loop0): 1 truncate cleaned up [ 70.470869][ T6565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.485262][ T6565] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.523794][ T5129] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.537828][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.585116][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.625137][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.745038][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.778545][ T28] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u8:1: Failed to release dquot type 1 [ 70.819470][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.835074][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.848889][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 70.865442][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.886423][ T6589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6589 comm=syz.4.776 [ 70.925114][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.948177][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 70.958008][ T6601] FAULT_INJECTION: forcing a failure. [ 70.958008][ T6601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.971171][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.3.781 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 70.981762][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 70.991849][ T6601] Call Trace: [ 70.995114][ T6601] [ 70.998032][ T6601] dump_stack_lvl+0xf2/0x150 [ 71.002619][ T6601] dump_stack+0x15/0x20 [ 71.006768][ T6601] should_fail_ex+0x229/0x230 [ 71.011491][ T6601] should_fail+0xb/0x10 [ 71.015667][ T6601] should_fail_usercopy+0x1a/0x20 [ 71.020716][ T6601] _copy_to_user+0x1e/0xa0 [ 71.025239][ T6601] simple_read_from_buffer+0xa0/0x110 [ 71.030603][ T6601] proc_fail_nth_read+0xfc/0x140 [ 71.035555][ T6601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.041101][ T6601] vfs_read+0x1a2/0x6e0 [ 71.045253][ T6601] ? xfd_validate_state+0x46/0xf0 [ 71.050282][ T6601] ksys_read+0xeb/0x1b0 [ 71.054433][ T6601] __x64_sys_read+0x42/0x50 [ 71.058932][ T6601] x64_sys_call+0x27d3/0x2d60 [ 71.063641][ T6601] do_syscall_64+0xc9/0x1c0 [ 71.068137][ T6601] ? clear_bhb_loop+0x55/0xb0 [ 71.072807][ T6601] ? clear_bhb_loop+0x55/0xb0 [ 71.077476][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.083359][ T6601] RIP: 0033:0x7ff2e664643c [ 71.087830][ T6601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 71.107497][ T6601] RSP: 002b:00007ff2e52c7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.115940][ T6601] RAX: ffffffffffffffda RBX: 00007ff2e67d5f80 RCX: 00007ff2e664643c [ 71.123904][ T6601] RDX: 000000000000000f RSI: 00007ff2e52c70b0 RDI: 0000000000000008 [ 71.131864][ T6601] RBP: 00007ff2e52c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.139825][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.147782][ T6601] R13: 000000000000000b R14: 00007ff2e67d5f80 R15: 00007ffc53f22f88 [ 71.155767][ T6601] [ 71.185209][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.202162][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.225266][ T3338] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.238550][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 71.302132][ T6630] validate_nla: 31 callbacks suppressed [ 71.302144][ T6630] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 71.315483][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 71.325313][ T3336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.535918][ T6670] loop4: detected capacity change from 0 to 1024 [ 71.542561][ T6670] EXT4-fs: Ignoring removed i_version option [ 71.549296][ T6670] EXT4-fs (loop4): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 71.577638][ T6670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.581242][ T6671] loop3: detected capacity change from 0 to 1024 [ 71.599101][ T6670] program syz.4.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.605743][ T6671] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 71.628720][ T5930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.698236][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.707090][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.278416][ T6684] loop1: detected capacity change from 0 to 128 [ 72.286305][ T6684] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.330497][ T6691] FAULT_INJECTION: forcing a failure. [ 72.330497][ T6691] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 72.343812][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz.0.800 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 72.354491][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 72.364869][ T6691] Call Trace: [ 72.368219][ T6691] [ 72.371252][ T6691] dump_stack_lvl+0xf2/0x150 [ 72.375857][ T6691] dump_stack+0x15/0x20 [ 72.380018][ T6691] should_fail_ex+0x229/0x230 [ 72.384705][ T6691] should_fail_alloc_page+0xfd/0x110 [ 72.390047][ T6691] __alloc_pages_noprof+0x109/0x360 [ 72.395263][ T6691] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 72.395599][ T6689] loop1: detected capacity change from 0 to 512 [ 72.400628][ T6691] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 72.412222][ T6691] handle_mm_fault+0xd6d/0x2940 [ 72.417080][ T6691] ? mas_walk+0x204/0x320 [ 72.421453][ T6691] exc_page_fault+0x3b9/0x650 [ 72.426127][ T6691] asm_exc_page_fault+0x26/0x30 [ 72.430980][ T6691] RIP: 0033:0x7f48679c4d0b [ 72.435383][ T6691] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 72.454984][ T6691] RSP: 002b:00007f4866652e20 EFLAGS: 00010246 [ 72.461110][ T6691] RAX: 00007f4866654f40 RBX: 00007f4867b76620 RCX: 0000000000000000 [ 72.469119][ T6691] RDX: 00007f4866654f88 RSI: 00007f4867a76900 RDI: 00007f4866652e40 [ 72.477076][ T6691] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 72.485043][ T6691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.492998][ T6691] R13: 000000000000006e R14: 00007f4867ba6130 R15: 00007ffd6a157578 [ 72.500989][ T6691] [ 72.504112][ T6691] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 72.511172][ T6689] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 72.553498][ T6698] loop0: detected capacity change from 0 to 256 [ 72.608193][ T6702] loop0: detected capacity change from 0 to 512 [ 72.619756][ T6702] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.806: corrupted xattr block 255: invalid header [ 72.636767][ T6702] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 72.647230][ T6702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.652989][ T6704] loop3: detected capacity change from 0 to 1024 [ 72.660136][ T6702] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.806: corrupted xattr block 255: invalid header [ 72.681664][ T6702] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 72.689534][ T6702] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.781712][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'. [ 72.803173][ T3519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.831200][ T6722] loop0: detected capacity change from 0 to 128 [ 72.851680][ T6724] ip6tnl1: entered promiscuous mode [ 72.856971][ T6724] ip6tnl1: entered allmulticast mode [ 72.869205][ T3519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.932561][ T3519] team0: Port device netdevsim1 removed [ 72.941662][ T3519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.980066][ T3519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.040832][ T3519] bridge_slave_1: left allmulticast mode [ 73.046731][ T3519] bridge_slave_1: left promiscuous mode [ 73.052411][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.074828][ T3519] bridge_slave_0: left allmulticast mode [ 73.080627][ T3519] bridge_slave_0: left promiscuous mode [ 73.086374][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.102280][ T6742] loop3: detected capacity change from 0 to 2048 [ 73.265747][ T6742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.347937][ T6742] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.444147][ T6742] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 73.456557][ T6742] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.456557][ T6742] [ 73.466376][ T6742] EXT4-fs (loop3): Total free blocks count 0 [ 73.472350][ T6742] EXT4-fs (loop3): Free/Dirty block details [ 73.478354][ T6742] EXT4-fs (loop3): free_blocks=2415919104 [ 73.484071][ T6742] EXT4-fs (loop3): dirty_blocks=16 [ 73.489276][ T6742] EXT4-fs (loop3): Block reservation details [ 73.495349][ T6742] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 73.527639][ T6752] loop1: detected capacity change from 0 to 512 [ 73.543479][ T6752] EXT4-fs: test_dummy_encryption option not supported [ 73.562137][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.594348][ T6748] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 73.645379][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.668051][ T3519] bond0 (unregistering): Released all slaves [ 73.753978][ T6727] chnl_net:caif_netlink_parms(): no params data found [ 73.762319][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 73.804804][ T6760] loop3: detected capacity change from 0 to 256 [ 73.832503][ T6760] vfat: Unknown parameter 'ÿÿ00000000000000000000000ÿÿÿÿ' [ 73.873790][ T3519] hsr_slave_0: left promiscuous mode [ 73.899702][ T3519] hsr_slave_1: left promiscuous mode [ 73.905710][ T6752] ip6t_srh: unknown srh match flags 7402 [ 73.922370][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.929824][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.009852][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.017330][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.027494][ T3519] veth1_macvtap: left promiscuous mode [ 74.032971][ T3519] veth0_macvtap: left promiscuous mode [ 74.038486][ T3519] veth1_vlan: left promiscuous mode [ 74.043722][ T3519] veth0_vlan: left promiscuous mode [ 74.063416][ T6799] loop1: detected capacity change from 0 to 512 [ 74.227383][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 74.238470][ T6801] loop3: detected capacity change from 0 to 2048 [ 74.250267][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 74.319146][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.326277][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.333451][ T6727] bridge_slave_0: entered allmulticast mode [ 74.339846][ T6727] bridge_slave_0: entered promiscuous mode [ 74.348180][ T6799] netlink: 'syz.1.828': attribute type 21 has an invalid length. [ 74.361714][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.401348][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 74.413037][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.420137][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.427419][ T6727] bridge_slave_1: entered allmulticast mode [ 74.434047][ T6727] bridge_slave_1: entered promiscuous mode [ 74.471986][ T6807] loop0: detected capacity change from 0 to 8192 [ 74.490750][ T6800] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.511064][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 74.511078][ T29] audit: type=1400 audit(1722732166.978:1085): avc: denied { connect } for pid=6808 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.551201][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.561819][ T6807] loop0: p1 p2 p3 p4 [ 74.567997][ T6807] loop0: p1 start 17760256 is beyond EOD, truncated [ 74.574592][ T6807] loop0: p2 size 64053 extends beyond EOD, truncated [ 74.591110][ T6800] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 74.596223][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 74.603393][ T6800] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.603393][ T6800] [ 74.621869][ T6800] EXT4-fs (loop3): Total free blocks count 0 [ 74.628066][ T6800] EXT4-fs (loop3): Free/Dirty block details [ 74.634041][ T6800] EXT4-fs (loop3): free_blocks=2415919104 [ 74.639819][ T6800] EXT4-fs (loop3): dirty_blocks=16 [ 74.645452][ T6800] EXT4-fs (loop3): Block reservation details [ 74.646453][ T6807] loop0: p3 start 458496 is beyond EOD, truncated [ 74.651431][ T6800] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 74.657842][ T6807] loop0: p4 size 50331648 extends beyond EOD, truncated [ 74.660168][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.707476][ T6747] udevd[6747]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 74.720647][ T3247] udevd[3247]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 74.732035][ T6727] team0: Port device team_slave_0 added [ 74.740977][ T6727] team0: Port device team_slave_1 added [ 74.741571][ T29] audit: type=1400 audit(1722732167.208:1086): avc: denied { append } for pid=6806 comm="syz.0.829" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.797515][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.804478][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.830547][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.850968][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.857978][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.883983][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.900837][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 74.959541][ T6864] loop3: detected capacity change from 0 to 256 [ 74.988132][ T6727] hsr_slave_0: entered promiscuous mode [ 74.994788][ T6727] hsr_slave_1: entered promiscuous mode [ 74.998655][ T6864] FAT-fs (loop3): Directory bread(block 64) failed [ 75.004736][ T6868] loop0: detected capacity change from 0 to 1024 [ 75.008875][ T6864] FAT-fs (loop3): Directory bread(block 65) failed [ 75.022011][ T6727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.030077][ T6868] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.034564][ T6864] FAT-fs (loop3): Directory bread(block 66) failed [ 75.036746][ T29] audit: type=1400 audit(1722732167.498:1087): avc: denied { mounton } for pid=6866 comm="syz.0.840" path="/74/bus" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.043164][ T6864] FAT-fs (loop3): Directory bread(block 67) failed [ 75.067511][ T6868] ext4: Bad value for 'jqfmt' [ 75.078043][ T6727] Cannot create hsr debugfs directory [ 75.078891][ T6864] FAT-fs (loop3): Directory bread(block 68) failed [ 75.097756][ T6864] FAT-fs (loop3): Directory bread(block 69) failed [ 75.135278][ T6864] FAT-fs (loop3): Directory bread(block 70) failed [ 75.146482][ T29] audit: type=1400 audit(1722732167.608:1088): avc: denied { read } for pid=6872 comm="syz.1.841" lport=43564 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 75.158180][ T6864] FAT-fs (loop3): Directory bread(block 71) failed [ 75.187141][ T6864] FAT-fs (loop3): Directory bread(block 72) failed [ 75.197579][ T6864] FAT-fs (loop3): Directory bread(block 73) failed [ 75.222882][ T6864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.838'. [ 75.231819][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.838'. [ 75.254464][ T6895] FAULT_INJECTION: forcing a failure. [ 75.254464][ T6895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.267555][ T6895] CPU: 0 UID: 0 PID: 6895 Comm: syz.0.847 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 75.278148][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 75.288178][ T6895] Call Trace: [ 75.291466][ T6895] [ 75.294440][ T6895] dump_stack_lvl+0xf2/0x150 [ 75.299051][ T6895] dump_stack+0x15/0x20 [ 75.303188][ T6895] should_fail_ex+0x229/0x230 [ 75.307850][ T6895] should_fail+0xb/0x10 [ 75.312035][ T6895] should_fail_usercopy+0x1a/0x20 [ 75.317044][ T6895] _copy_to_user+0x1e/0xa0 [ 75.321444][ T6895] simple_read_from_buffer+0xa0/0x110 [ 75.326927][ T6895] proc_fail_nth_read+0xfc/0x140 [ 75.331846][ T6895] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.337390][ T6895] vfs_read+0x1a2/0x6e0 [ 75.341539][ T6895] ? __rcu_read_unlock+0x4e/0x70 [ 75.346459][ T6895] ? __fget_files+0x1da/0x210 [ 75.351176][ T6895] ksys_read+0xeb/0x1b0 [ 75.355434][ T6895] __x64_sys_read+0x42/0x50 [ 75.360025][ T6895] x64_sys_call+0x27d3/0x2d60 [ 75.364700][ T6895] do_syscall_64+0xc9/0x1c0 [ 75.369263][ T6895] ? clear_bhb_loop+0x55/0xb0 [ 75.373955][ T6895] ? clear_bhb_loop+0x55/0xb0 [ 75.378613][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.384485][ T6895] RIP: 0033:0x7f4867a1643c [ 75.388880][ T6895] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 75.408505][ T6895] RSP: 002b:00007f4866697040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.416893][ T6895] RAX: ffffffffffffffda RBX: 00007f4867ba5f80 RCX: 00007f4867a1643c [ 75.424964][ T6895] RDX: 000000000000000f RSI: 00007f48666970b0 RDI: 0000000000000005 [ 75.432927][ T6895] RBP: 00007f48666970a0 R08: 0000000000000000 R09: 0000000000000000 [ 75.440890][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.448986][ T6895] R13: 000000000000004d R14: 00007f4867ba5f80 R15: 00007ffd6a157578 [ 75.457024][ T6895] [ 75.499370][ T6900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6900 comm=syz.0.850 [ 75.580774][ T3247] ================================================================== [ 75.581298][ T6916] FAULT_INJECTION: forcing a failure. [ 75.581298][ T6916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.588940][ T3247] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 75.588966][ T3247] [ 75.588971][ T3247] write to 0xffff888106520010 of 8 bytes by task 4273 on cpu 0: [ 75.601970][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.3.851 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 75.608586][ T3247] __dentry_kill+0x13e/0x4c0 [ 75.610887][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 75.618500][ T3247] dput+0x5c/0xd0 [ 75.629049][ T6916] Call Trace: [ 75.629058][ T6916] [ 75.633603][ T3247] do_unlinkat+0x257/0x4c0 [ 75.633629][ T3247] __x64_sys_unlink+0x2e/0x40 [ 75.643663][ T6916] dump_stack_lvl+0xf2/0x150 [ 75.647262][ T3247] x64_sys_call+0x280f/0x2d60 [ 75.650520][ T6916] dump_stack+0x15/0x20 [ 75.653424][ T3247] do_syscall_64+0xc9/0x1c0 [ 75.657808][ T6916] should_fail_ex+0x229/0x230 [ 75.662453][ T3247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.667012][ T6916] should_fail+0xb/0x10 [ 75.671651][ T3247] [ 75.671657][ T3247] read to 0xffff888106520010 of 8 bytes by task 3247 on cpu 1: [ 75.675772][ T6916] should_fail_usercopy+0x1a/0x20 [ 75.680241][ T3247] fast_dput+0x65/0x2c0 [ 75.684883][ T6916] _copy_from_user+0x1e/0xd0 [ 75.690739][ T3247] dput+0x24/0xd0 [ 75.694861][ T6916] sctp_setsockopt+0xbe/0xea0 [ 75.697155][ T3247] step_into+0x21a/0x810 [ 75.704667][ T6916] sock_common_setsockopt+0x64/0x80 [ 75.709653][ T3247] path_openat+0x14f7/0x1f10 [ 75.713778][ T6916] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 75.718337][ T3247] do_filp_open+0xf7/0x200 [ 75.721939][ T6916] __sys_setsockopt+0x1d8/0x250 [ 75.726580][ T3247] do_sys_openat2+0xab/0x120 [ 75.730878][ T6916] __x64_sys_setsockopt+0x66/0x80 [ 75.736039][ T3247] __x64_sys_openat+0xf3/0x120 [ 75.740595][ T6916] x64_sys_call+0x278d/0x2d60 [ 75.746451][ T3247] x64_sys_call+0x1025/0x2d60 [ 75.750836][ T6916] do_syscall_64+0xc9/0x1c0 [ 75.755652][ T3247] do_syscall_64+0xc9/0x1c0 [ 75.760210][ T6916] ? clear_bhb_loop+0x55/0xb0 [ 75.765196][ T3247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.769925][ T6916] ? clear_bhb_loop+0x55/0xb0 [ 75.774568][ T3247] [ 75.774572][ T3247] value changed: 0xffff888237b05290 -> 0x0000000000000000 [ 75.779212][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.783682][ T3247] [ 75.783686][ T3247] Reported by Kernel Concurrency Sanitizer on: [ 75.788153][ T6916] RIP: 0033:0x7ff2e66479f9 [ 75.792794][ T3247] CPU: 1 UID: 0 PID: 3247 Comm: udevd Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 75.798826][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.803477][ T3247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 75.803490][ T3247] ================================================================== [ 75.880505][ T6916] RSP: 002b:00007ff2e52a6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.888961][ T6916] RAX: ffffffffffffffda RBX: 00007ff2e67d6058 RCX: 00007ff2e66479f9 [ 75.896988][ T6916] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000004 [ 75.905025][ T6916] RBP: 00007ff2e52a60a0 R08: 0000000000000008 R09: 0000000000000000 [ 75.912997][ T6916] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 75.921013][ T6916] R13: 000000000000006e R14: 00007ff2e67d6058 R15: 00007ffc53f22f88 [ 75.928988][ T6916] [ 76.071975][ T6727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.086977][ T6727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.098272][ T6727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.107442][ T6727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.150683][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.164658][ T6727] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.176547][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.183660][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.206957][ T6727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.217429][ T6727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.232496][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.239580][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.284864][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.409007][ T6727] veth0_vlan: entered promiscuous mode [ 76.417725][ T6727] veth1_vlan: entered promiscuous mode [ 76.435744][ T6727] veth0_macvtap: entered promiscuous mode [ 76.443777][ T6727] veth1_macvtap: entered promiscuous mode [ 76.456990][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.467573][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.477483][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.487933][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.497813][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.508301][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.518132][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.528635][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.538554][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.549030][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.560313][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.571729][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.582266][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.592195][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.602721][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.612544][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.622980][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.632879][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.643293][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.653275][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.663698][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.674629][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.684727][ T6727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.693428][ T6727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.702160][ T6727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.710908][ T6727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0