last executing test programs: 7.035873894s ago: executing program 4 (id=511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x3ff, 0x0, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0xffffffffffffffb9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, &(0x7f0000004440)=0x2000000) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000700)=ANY=[@ANYBLOB="0000040000000000ff020000000000000000000000000001fc01000000000000000000000000000020010000000000000000000000000002fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffe0000002fc000000004042000000000000000000fe800000000000000093de0000000000000000000040000000000000000000000001fe8000000000000000000000000000002d60001614eee5f72416d887855668019ce774c9fb7a9a711d16c1f9fc4a9f1bd99158ab6536928a5a482a02ca6e1861e0cf152b422a1c2bb44e5cbb93ee062f61b33f6eda67f3b7d63f0095"], 0x90) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300009a, &(0x7f0000000600)=ANY=[], 0xd, 0x2ac, &(0x7f0000000340)="$eJzs3bGLI1UcB/DfJHPZEYsEsVEEB7SwWm5tbXaFE8StlAjaeMG7A03CwR0E3MLcVfdX+H/4J9jYXGsl2Ap2XrEyMpmZnc1uNrssMQvu51M95r3vey/zhqTKb+6/Mx0/eJzE879/jyxLorMf+/EqiUF0ovEs0gAA/j9eFUX8VVwnmXY2vxsAYBuq3//KTe8FANiOL776+rODw8N7n+d5Fm/1X8yGSURMX8yGVf/Bo/guJvEw7kY/jiOKE1X7k08P70Walwbx/nQ+G5bJ6Te/1vMf/BmxyO9FPwar83t55VR+PhveuX9mq/14c3X+wxX5GPbig/dO7X83+vHy23gck3gQZbbN/7iXJ+0yZT7pxHBnMa6SlYnuFo4DAAAAAAAAAAAAAAAAAAAAAIBbYjfPk6p8z6J+T3mprr/TPV707+aNwXJ9nip/Ujinqg9URF2iZ17ET019nbt5nhf1wNmiik6ZT+Pt1IsFAAAAAAAAAAAAAAAAAAAAoPT0h6PxaDJ5+GQjjaYaQPO3/uvOs3/qyrtxNB51L55w5+prtdUGXka517WDI01jI3fj2aWDX4uITR1B29hpD/fLqBrNwWx0rTc+riY9Go/yuqu5zeNRctlaWXNwP7ddkfbi0tWT9U9vsXgkjovlM81Otrqc6m3obvReX9n1T1EUV5vnoz+qM6qvJIsSG2efzO8f/bYifqdurPyAZSM7fxa/XLyfC78yupv43gEAAAAAAAAAAAAAAAAAAM5r//S7ovP52mjnP9sUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxZ+/7/ppFFxPKVc415HV43pm704snTG/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3AL/BgAA//+kQUYn") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x80}, 0x44864) setresuid(0x0, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x0, 0x0, @val=@perf_event}, 0x40) mprotect(&(0x7f00002da000/0x3000)=nil, 0x3000, 0x2000008) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.506809445s ago: executing program 4 (id=526): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000300)={[{@journal_checksum}, {@noblock_validity}]}, 0x1, 0x4f8, &(0x7f0000000f00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000200)=@sr0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xa4800000, 0x0, 0x0, 0x100000, 0x8, 0x7, 0x3e}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/kernel/rcu_expedited', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000003d80)=0xffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000080)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3\x89f\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000340)=""/109, 0x6d, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x431, &(0x7f0000000940)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_es_lookup_extent_exit\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, r2, 0x0) 2.347661098s ago: executing program 1 (id=530): r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0213000005"], 0x28}, 0x1, 0x0, 0x1800}, 0x0) 2.231005178s ago: executing program 1 (id=532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) 2.230767108s ago: executing program 2 (id=533): perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x9, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) r1 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000)=0x0, &(0x7f0000000240)=0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x9, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000c6000000bf91000000000000b7020000000000008500000000000000c2000000000000009500000000000000", @ANYRESDEC=r8, @ANYRES8=r4, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000049c0)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f0000000140)) io_uring_enter(r5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0xb, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x7a}}, 0x14}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r11, &(0x7f0000002440)={'#! ', '', [], 0xa, '\\'}, 0x5) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) 2.215687079s ago: executing program 1 (id=534): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2.188830451s ago: executing program 2 (id=535): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000003c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x10000, 0x5, 0x7f, 0x2000, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x3, 0x4, 0x3, 0xe}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380), 0x8) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() socket$inet6_udp(0xa, 0x2, 0x0) 2.129065627s ago: executing program 0 (id=536): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) unshare(0xc040400) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000480)=0x4100, 0x4) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000001140)=0x8000, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback}}}], 0x20}}], 0x1, 0x0) write(r0, &(0x7f0000000080), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/196) r3 = socket(0x10, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000080000240012800b000100697036746e6c000014000280050009000400000008000100", @ANYRES32, @ANYBLOB="080004007f00"], 0x4c}}, 0x0) 2.127936156s ago: executing program 1 (id=537): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r0, &(0x7f0000002180)=""/4105, 0x1009, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x493, &(0x7f0000000640)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008e3"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = mq_open(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20, 0x40, &(0x7f0000000040)={0x6, 0x3, 0xfffffffffffffffc, 0x1000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) mq_timedsend(r4, &(0x7f0000000080)="d061caff1aeabef40080d2b911d4a8089bc1", 0x12, 0x9, &(0x7f00000000c0)={0x0, 0x3938700}) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) socket$netlink(0x10, 0x3, 0xe) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) flock(r7, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.127831027s ago: executing program 0 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xf5ffffff}}, 0x48}}, 0x0) 2.102584888s ago: executing program 0 (id=539): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.0879537s ago: executing program 4 (id=540): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10088000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8850}, 0x0) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) dup2(r0, r1) socket$inet_smc(0x2b, 0x1, 0x0) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x75d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x1000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r5 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x20, 0x4, 0x1, 0x0, r4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000300), 0x0}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000280), &(0x7f0000000600), 0x2}, 0x20) write$cgroup_subtree(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="00ee6f0100010008000000867a7eaa60cedf58d2a65c251c41f05b673984030000000000000008"], 0x5) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7}, @jmp={0x3, 0x0, 0xc}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250}, 0x23) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000001d540800ffffffffb7080000000000007b8af8ff00000000b7080000c3da00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x21, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000380)=[r9, r4, r7, r8, r8], &(0x7f00000003c0)=[{0x5, 0x5, 0xc, 0x9}, {0x3, 0x4, 0xb}, {0x2, 0x2, 0xe, 0xb}, {0x5, 0x1, 0x4, 0x2}], 0x10, 0x1}, 0x90) close(r10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) 2.057510182s ago: executing program 0 (id=541): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$kcm(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8001) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="170900000000000000000100000005000700000000000800090003000000060002000100000008000a000000000008001800e0000002080019"], 0x44}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 1.934642632s ago: executing program 0 (id=542): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file1'}, 0xb) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '#! '}, {0x20, '.\x02'}], 0xa, "b670f10c"}, 0x10b) (fail_nth: 3) 1.926605303s ago: executing program 4 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) fchdir(0xffffffffffffffff) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x76, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') setrlimit(0x7, &(0x7f0000000140)={0x6, 0x3}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x10000, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000a00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 1.276958176s ago: executing program 3 (id=546): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001900000095000000000000a688e125801fae3200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) close(0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) (async) close(0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB], 0x0}, 0x90) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="181900002c20c2cbaa270000260f000000440700beab00006ab30c00100000003f000400fcffffff95ecaa91ff0000005f08139d1ac38d5e2a60d34c198cfbce70dbfd52f478bbeb5169e656bffc0f65de065fb2c368099ea863deae40398ee916a6ced254ac9d79a8776618b554965316d9e54be277ac"], &(0x7f00000005c0)='syzkaller\x00', 0x3ff, 0x98, &(0x7f00000006c0)=""/152, 0x41100, 0xa20ace1bc792d566, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x6777, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[0x1, r0, r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x3, 0x2, 0xc, 0x4}, {0x2, 0x2, 0x6, 0x6}, {0x4, 0x2, 0x3, 0x5}, {0x5, 0x5, 0xa, 0xc}, {0x1, 0x5, 0x6, 0x7}], 0x10, 0x1f}, 0x90) (rerun: 64) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b400000000000061115c000000000016000000000000009500740000000000671923d6e71f5e293fb130f92c4eb4bf40efcd3f26033f109e3509"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100, 0xfc, 0x9, 0x0, 0x1, 0x0, '\x00', r4}, 0x48) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000002c0)=r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="61aa000000b4eb8a990002031e7d9800000001"], 0x0}, 0x90) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3001}) ioctl$TUNSETNOCSUM(r6, 0x8923, 0x20000000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000780), &(0x7f00000007c0)='syzkaller\x00', 0x0, 0xfd, &(0x7f0000000b00)=""/253, 0x40f00, 0x0, '\x00', r4, 0x17, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0x10, 0xba, 0x7ff}, 0x10, 0x23ad, 0xffffffffffffffff, 0x9, &(0x7f0000000840)=[r5, r6, r5], &(0x7f0000000c00)=[{0x2, 0x1, 0xc, 0x6}, {0x0, 0x2, 0xb, 0x3}, {0x4, 0x4, 0x8}, {0x5, 0x3, 0x1, 0x6}, {0x1, 0x3, 0x5, 0xa}, {0x1, 0x1, 0x5, 0xa}, {0x4, 0x3, 0xe, 0x2}, {0x5, 0x3, 0x5, 0x8}, {0x2, 0x5, 0x5, 0xa}], 0x10, 0x8}, 0x90) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) 1.276588856s ago: executing program 1 (id=547): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/17}, {&(0x7f00000004c0)=""/4096}, {&(0x7f00000000c0)=""/8}, {&(0x7f00000014c0)=""/4096, 0x4000}, {&(0x7f0000000100)=""/66}, {&(0x7f00000002c0)=""/165}], 0x0, &(0x7f0000000380)=""/130}, 0x8}], 0x300, 0x60002132, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 1.242425569s ago: executing program 0 (id=548): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x10000, 0x5, 0x2, 0x2000, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x3, 0x4, 0x3, 0xe}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000340)={0x0, 0xffffffffffffffdd, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.204147682s ago: executing program 3 (id=549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) sysfs$3(0x3) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x1c8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20040600) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x10) lseek(r1, 0x7ffffb, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfd14) sendfile(r0, r0, 0x0, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") 1.020964497s ago: executing program 3 (id=550): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000002b00090000000000000000000100", @ANYRESDEC], 0x20}, 0x1, 0x2000000}, 0x0) 302.750576ms ago: executing program 2 (id=551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c366", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 302.495186ms ago: executing program 3 (id=552): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$kcm(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8001) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="170900000000000000000100000005000700000000000800090003000000060002000100000008000a000000000008001800e0000002080019"], 0x44}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 259.662629ms ago: executing program 3 (id=553): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000016ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00130c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 219.222043ms ago: executing program 1 (id=554): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x1c14744, &(0x7f0000000100)={[{@nojournal_checksum}]}, 0xfe, 0x4a5, &(0x7f0000000480)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa000806000008004500005800000000002f90787f000001ac1414aa0420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00f36c68f62380fe8d00000000000000000000000800655800000000"], 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x40000000002, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) sched_setaffinity(0x0, 0xfffffffffffffc84, &(0x7f00000000c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 217.158853ms ago: executing program 4 (id=555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) 214.117293ms ago: executing program 2 (id=556): perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x9, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) r1 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000)=0x0, &(0x7f0000000240)=0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x9, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000c6000000bf91000000000000b7020000000000008500000000000000c2000000000000009500000000000000", @ANYRESDEC=r8, @ANYRES8=r4, @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000049c0)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f0000000140)) io_uring_enter(r5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0xb, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x7a}}, 0x14}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r11, &(0x7f0000002440)={'#! ', '', [], 0xa, '\\'}, 0x5) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) 188.299235ms ago: executing program 4 (id=557): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7b9, &(0x7f0000002dc0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000002c0)) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000340)={0x8, 0x81, 0x0, 0x5}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x8c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x85c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}]}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func, @map_fd, @generic, @initr0, @exit, @printk={@p, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0}, 0x90) 125.04253ms ago: executing program 3 (id=558): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x9c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x2321c2) dup3(r3, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc17a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x9, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000240)=""/203, 0xcb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) 124.874761ms ago: executing program 2 (id=559): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b33090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f3b006d090890e0878f0e1ac6e7049b336d959b6c9a240d5b67f3988f7ef319522000ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 0s ago: executing program 2 (id=560): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket(0x1e, 0x4, 0x0) r6 = socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x42000000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128000000100767863616e00000067000280ec44af37", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) socket$inet6(0xa, 0x3, 0xff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000001900)=""/4096, 0x1000, 0x0, &(0x7f0000000300)=""/88, 0x58}}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@fwd={0x10}, @union={0x4, 0x2, 0x0, 0x5, 0x1, 0x3, [{0xb, 0x9b6, 0x2}, {0x0, 0x5, 0x9}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x50, 0x4}, @func={0xb, 0x0, 0x0, 0xc, 0x3}, @restrict={0xe, 0x0, 0x0, 0xb, 0x3}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x61, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000600)=""/105, 0x92, 0x69, 0x1, 0x1ff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000004913b8b300000000000000", @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r9, @ANYRES8=r7], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0xc2c00, 0x0, '\x00', 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create1(0x0) r12 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xc414}}) io_uring_enter(r12, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r12, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x101, 0x0, 0x600, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) kernel console output (not intermixed with test programs): s (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.226505][ T3792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.236363][ T3792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.246826][ T3792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.256126][ T4128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.256744][ T3792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.279859][ T3792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.281783][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.292201][ T3792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.324422][ T3792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.335152][ T3792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.345242][ T3792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.355787][ T3792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.366051][ T3792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.376639][ T3792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.386487][ T3792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.397034][ T3792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.408798][ T3706] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 49.411552][ T3792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.422771][ T3706] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 49.429178][ T3792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.447990][ T3792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.456762][ T3792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.465547][ T3792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.494412][ T3672] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /7/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.519417][ T3672] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.542065][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.555208][ T3672] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /7/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.578952][ T3672] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.601361][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.613467][ T3672] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /7/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.640565][ T3672] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.680836][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.694081][ T3672] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /7/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.716999][ T3672] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.747588][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.762014][ T3672] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /7/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.784484][ T3672] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 49.804522][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.826929][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.838997][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.851510][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.863609][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.876727][ T3672] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 49.905140][ T994] IPVS: starting estimator thread 0... [ 49.911825][ T4154] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 49.940574][ T4154] loop4: detected capacity change from 0 to 2048 [ 49.958532][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.983348][ T4154] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #12: block 9: comm syz.4.122: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 49.988162][ T3660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.003463][ T4155] IPVS: using max 2448 ests per chain, 122400 per kthread [ 50.029994][ T1612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.041746][ T3837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.090284][ T4159] loop4: detected capacity change from 0 to 2048 [ 50.119268][ T4159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.176144][ T3837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.241504][ T4160] chnl_net:caif_netlink_parms(): no params data found [ 50.259449][ T4175] loop4: detected capacity change from 0 to 512 [ 50.266148][ T4175] EXT4-fs: Ignoring removed orlov option [ 50.273906][ T4175] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.126: lblock 0 mapped to illegal pblock 3 (length 1) [ 50.288478][ T4175] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.126: error -117 reading directory block [ 50.301127][ T4175] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 50.310253][ T4175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.323904][ T4160] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.328251][ T4175] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 50.331137][ T4160] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.351422][ T4175] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.126: Abort forced by user [ 50.352744][ T4160] bridge_slave_0: entered allmulticast mode [ 50.363483][ T4175] EXT4-fs (loop4): Remounting filesystem read-only [ 50.367996][ T4160] bridge_slave_0: entered promiscuous mode [ 50.381937][ T4160] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.389143][ T4160] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.396686][ T4160] bridge_slave_1: entered allmulticast mode [ 50.403213][ T4160] bridge_slave_1: entered promiscuous mode [ 50.420676][ T1612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.438339][ T4160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.449754][ T4160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.469680][ T4160] team0: Port device team_slave_0 added [ 50.476861][ T4160] team0: Port device team_slave_1 added [ 50.485884][ T1612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.508520][ T4160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.515556][ T4160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.541538][ T4160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.553012][ T4160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.560106][ T4160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.586232][ T4160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.624097][ T4182] loop0: detected capacity change from 0 to 1024 [ 50.632986][ T4182] EXT4-fs: Ignoring removed oldalloc option [ 50.637688][ T4160] hsr_slave_0: entered promiscuous mode [ 50.644941][ T4182] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.655133][ T4160] hsr_slave_1: entered promiscuous mode [ 50.662291][ T4182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.678145][ T1612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.739101][ T3792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.771117][ T4187] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.800714][ T1612] bridge_slave_1: left allmulticast mode [ 50.806444][ T1612] bridge_slave_1: left promiscuous mode [ 50.812158][ T1612] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.820002][ T1612] bridge_slave_0: left allmulticast mode [ 50.825752][ T1612] bridge_slave_0: left promiscuous mode [ 50.831505][ T1612] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.919902][ T1612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.930599][ T1612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.941215][ T1612] bond0 (unregistering): Released all slaves [ 51.043837][ T3837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.069093][ T1612] hsr_slave_0: left promiscuous mode [ 51.089887][ T1612] hsr_slave_1: left promiscuous mode [ 51.101876][ T1612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.109427][ T1612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.118598][ T1612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.126231][ T1612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.144153][ T1612] veth1_macvtap: left promiscuous mode [ 51.149720][ T1612] veth0_macvtap: left promiscuous mode [ 51.155292][ T1612] veth1_vlan: left promiscuous mode [ 51.160694][ T1612] veth0_vlan: left promiscuous mode [ 51.255688][ T1612] team0 (unregistering): Port device team_slave_1 removed [ 51.267681][ T1612] team0 (unregistering): Port device team_slave_0 removed [ 51.309607][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 51.333822][ T4218] syzkaller1: entered promiscuous mode [ 51.339419][ T4218] syzkaller1: entered allmulticast mode [ 51.340725][ T3706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.403124][ T4224] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 51.418998][ T4225] loop0: detected capacity change from 0 to 256 [ 51.580471][ T4160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.591771][ T4160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.610501][ T4160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.627273][ T4160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.737434][ T4258] capability: warning: `syz.0.138' uses deprecated v2 capabilities in a way that may be insecure [ 51.887817][ T4260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 51.896800][ T4260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.141'. [ 51.980523][ T4160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.992759][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 51.992774][ T29] audit: type=1400 audit(1723090598.565:331): avc: denied { write } for pid=4257 comm="syz.4.141" path="socket:[8115]" dev="sockfs" ino=8115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.027016][ T4160] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.037257][ T4228] chnl_net:caif_netlink_parms(): no params data found [ 52.055328][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.059724][ T29] audit: type=1400 audit(1723090598.635:332): avc: denied { unmount } for pid=3837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.062416][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.106068][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.113209][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.131502][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.181126][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.188316][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.195761][ T4228] bridge_slave_0: entered allmulticast mode [ 52.202813][ T4228] bridge_slave_0: entered promiscuous mode [ 52.210124][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.217425][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.225747][ T4228] bridge_slave_1: entered allmulticast mode [ 52.232536][ T4228] bridge_slave_1: entered promiscuous mode [ 52.253750][ T4228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.268034][ T4228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.304803][ T4283] loop4: detected capacity change from 0 to 256 [ 52.352733][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.368070][ T4289] FAULT_INJECTION: forcing a failure. [ 52.368070][ T4289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.381192][ T4289] CPU: 1 UID: 0 PID: 4289 Comm: syz.4.149 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 52.391815][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 52.401943][ T4289] Call Trace: [ 52.405222][ T4289] [ 52.408165][ T4289] dump_stack_lvl+0xf2/0x150 [ 52.412778][ T4289] dump_stack+0x15/0x20 [ 52.416957][ T4289] should_fail_ex+0x229/0x230 [ 52.421686][ T4289] should_fail+0xb/0x10 [ 52.425860][ T4289] should_fail_usercopy+0x1a/0x20 [ 52.430907][ T4289] _copy_from_user+0x1e/0xd0 [ 52.435569][ T4289] copy_msghdr_from_user+0x54/0x2a0 [ 52.440908][ T4289] __sys_sendmsg+0x17d/0x280 [ 52.445598][ T4289] __x64_sys_sendmsg+0x46/0x50 [ 52.450374][ T4289] x64_sys_call+0x2689/0x2d60 [ 52.455063][ T4289] do_syscall_64+0xc9/0x1c0 [ 52.459660][ T4289] ? clear_bhb_loop+0x55/0xb0 [ 52.464548][ T4289] ? clear_bhb_loop+0x55/0xb0 [ 52.469252][ T4289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.475157][ T4289] RIP: 0033:0x7fac3c9c79f9 [ 52.479626][ T4289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.499331][ T4289] RSP: 002b:00007fac3b647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.507749][ T4289] RAX: ffffffffffffffda RBX: 00007fac3cb55f80 RCX: 00007fac3c9c79f9 [ 52.515804][ T4289] RDX: 0000000000000000 RSI: 0000000020001000 RDI: 0000000000000005 [ 52.523780][ T4289] RBP: 00007fac3b647090 R08: 0000000000000000 R09: 0000000000000000 [ 52.531839][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.539818][ T4289] R13: 0000000000000000 R14: 00007fac3cb55f80 R15: 00007ffd3d34a5c8 [ 52.547816][ T4289] [ 52.557431][ T4228] team0: Port device team_slave_0 added [ 52.573554][ T4228] team0: Port device team_slave_1 added [ 52.591538][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.618267][ T4296] loop4: detected capacity change from 0 to 256 [ 52.635273][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.642366][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.668392][ T4228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.680789][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.687946][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.713992][ T4228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.728417][ T4160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.762547][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.838640][ T4228] hsr_slave_0: entered promiscuous mode [ 52.848323][ T4228] hsr_slave_1: entered promiscuous mode [ 52.861984][ T4228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.869779][ T4228] Cannot create hsr debugfs directory [ 52.972858][ T28] bridge_slave_1: left allmulticast mode [ 52.978685][ T28] bridge_slave_1: left promiscuous mode [ 52.984485][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.999425][ T28] bridge_slave_0: left allmulticast mode [ 53.005185][ T28] bridge_slave_0: left promiscuous mode [ 53.011121][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.169222][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.181447][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.192565][ T28] bond0 (unregistering): Released all slaves [ 53.218991][ T4309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.155'. [ 53.227956][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 53.437493][ T4160] veth0_vlan: entered promiscuous mode [ 53.445979][ T4160] veth1_vlan: entered promiscuous mode [ 53.488439][ T29] audit: type=1400 audit(1723090600.055:333): avc: denied { setopt } for pid=4323 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.532417][ T4160] veth0_macvtap: entered promiscuous mode [ 53.550910][ T28] hsr_slave_0: left promiscuous mode [ 53.585668][ T28] hsr_slave_1: left promiscuous mode [ 53.595351][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.602840][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.616194][ T4334] loop4: detected capacity change from 0 to 128 [ 53.631261][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.638717][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.649683][ T4334] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.667314][ T28] veth1_macvtap: left promiscuous mode [ 53.668908][ T4334] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.672804][ T28] veth0_macvtap: left promiscuous mode [ 53.672894][ T28] veth1_vlan: left promiscuous mode [ 53.693940][ T28] veth0_vlan: left promiscuous mode [ 53.709739][ T29] audit: type=1400 audit(1723090600.285:334): avc: denied { mounton } for pid=4333 comm="syz.4.158" path="/23/file0/bus" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.735997][ T4334] EXT4-fs warning (device loop4): ext4_group_extend:1890: can't read last block, resize aborted [ 53.810422][ T28] team0 (unregistering): Port device team_slave_1 removed [ 53.820439][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.833844][ T29] audit: type=1400 audit(1723090600.395:335): avc: denied { unlink } for pid=3837 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.843670][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.859605][ T28] team0 (unregistering): Port device team_slave_0 removed [ 53.896861][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.901537][ T29] audit: type=1400 audit(1723090600.475:336): avc: denied { setopt } for pid=4339 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.913700][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.951244][ T29] audit: type=1400 audit(1723090600.515:337): avc: denied { listen } for pid=4339 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.964984][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.971324][ T29] audit: type=1400 audit(1723090600.515:338): avc: denied { create } for pid=4339 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.003521][ T29] audit: type=1400 audit(1723090600.525:339): avc: denied { write } for pid=4339 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.007979][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 54.029511][ T3672] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.048223][ T4160] veth1_macvtap: entered promiscuous mode [ 54.049281][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 54.078414][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.088914][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.098818][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.108144][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 54.109357][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.132306][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.143044][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.160474][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 54.169848][ T4160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.194990][ T3837] EXT4-fs error (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: Directory hole found for htree leaf block 0 [ 54.207938][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.218719][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.228646][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.239334][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.249235][ T4160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.259868][ T4160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.273567][ T4160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.290388][ T4160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.299243][ T4160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.308140][ T4160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.317080][ T4160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.462129][ T4228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.482709][ T4228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.497912][ T4370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.125'. [ 54.508708][ T4228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.524429][ T4228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.666947][ T29] audit: type=1400 audit(1723090601.245:340): avc: denied { write } for pid=4378 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.674211][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 54.697380][ T3837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.758885][ T4388] FAULT_INJECTION: forcing a failure. [ 54.758885][ T4388] name failslab, interval 1, probability 0, space 0, times 0 [ 54.771738][ T4388] CPU: 0 UID: 0 PID: 4388 Comm: syz.3.169 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 54.782340][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.792460][ T4388] Call Trace: [ 54.795813][ T4388] [ 54.798748][ T4388] dump_stack_lvl+0xf2/0x150 [ 54.803450][ T4388] dump_stack+0x15/0x20 [ 54.807630][ T4388] should_fail_ex+0x229/0x230 [ 54.812338][ T4388] ? security_prepare_creds+0x4c/0x100 [ 54.817896][ T4388] should_failslab+0x8f/0xb0 [ 54.822543][ T4388] __kmalloc_noprof+0xa5/0x370 [ 54.827375][ T4388] security_prepare_creds+0x4c/0x100 [ 54.832808][ T4388] prepare_creds+0x346/0x480 [ 54.837490][ T4388] copy_creds+0x90/0x3f0 [ 54.841744][ T4388] copy_process+0x64b/0x1f90 [ 54.846393][ T4388] ? sysvec_reschedule_ipi+0x21/0x110 [ 54.851967][ T4388] ? cgroup_rstat_updated+0x99/0x550 [ 54.857351][ T4388] kernel_clone+0x167/0x5e0 [ 54.861905][ T4388] ? __perf_event_task_sched_out+0x111/0xfe0 [ 54.867982][ T4388] __x64_sys_clone+0xe8/0x120 [ 54.872681][ T4388] x64_sys_call+0x2d23/0x2d60 [ 54.877529][ T4388] do_syscall_64+0xc9/0x1c0 [ 54.882089][ T4388] ? clear_bhb_loop+0x55/0xb0 [ 54.886791][ T4388] ? clear_bhb_loop+0x55/0xb0 [ 54.891510][ T4388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.897525][ T4388] RIP: 0033:0x7f33640479f9 [ 54.901944][ T4388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.924311][ T4388] RSP: 002b:00007f3362c84fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 54.932747][ T4388] RAX: ffffffffffffffda RBX: 00007f33641d6130 RCX: 00007f33640479f9 [ 54.940754][ T4388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040000 [ 54.948767][ T4388] RBP: 00007f3362c85090 R08: 0000000000000000 R09: 0000000000000000 [ 54.956851][ T4388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 54.965167][ T4388] R13: 0000000000000000 R14: 00007f33641d6130 R15: 00007ffd11255688 [ 54.973167][ T4388] [ 55.054711][ T4228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.115829][ T4228] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.138608][ T4411] loop0: detected capacity change from 0 to 1024 [ 55.149279][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.153221][ T4411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.187364][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.194477][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.204809][ T3792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.214936][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.222093][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.232088][ T4347] bridge_slave_0: entered allmulticast mode [ 55.239673][ T4347] bridge_slave_0: entered promiscuous mode [ 55.248764][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.256573][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.269225][ T4347] bridge_slave_1: entered allmulticast mode [ 55.272692][ T4420] loop0: detected capacity change from 0 to 256 [ 55.276375][ T4347] bridge_slave_1: entered promiscuous mode [ 55.293694][ T4420] FAT-fs (loop0): Directory bread(block 64) failed [ 55.301439][ T4420] FAT-fs (loop0): Directory bread(block 65) failed [ 55.308273][ T4420] FAT-fs (loop0): Directory bread(block 66) failed [ 55.314899][ T4420] FAT-fs (loop0): Directory bread(block 67) failed [ 55.322245][ T4420] FAT-fs (loop0): Directory bread(block 68) failed [ 55.324774][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.333533][ T4420] FAT-fs (loop0): Directory bread(block 69) failed [ 55.346974][ T4420] FAT-fs (loop0): Directory bread(block 70) failed [ 55.353678][ T4420] FAT-fs (loop0): Directory bread(block 71) failed [ 55.361675][ T4420] FAT-fs (loop0): Directory bread(block 72) failed [ 55.368378][ T4420] FAT-fs (loop0): Directory bread(block 73) failed [ 55.378919][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.386020][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.459820][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.478514][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.508718][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.525003][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.554603][ T4347] team0: Port device team_slave_0 added [ 55.555661][ T4441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.177'. [ 55.562863][ T4228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.587421][ T4347] team0: Port device team_slave_1 added [ 55.613812][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.620840][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.646869][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.679106][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.686093][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.712160][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.751182][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.820753][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.832091][ T4463] netlink: 72 bytes leftover after parsing attributes in process `syz.0.181'. [ 55.853048][ T4347] hsr_slave_0: entered promiscuous mode [ 55.859298][ T4347] hsr_slave_1: entered promiscuous mode [ 55.865422][ T4347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.882423][ T4347] Cannot create hsr debugfs directory [ 55.902225][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.948667][ T4228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.988498][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.023920][ T4399] chnl_net:caif_netlink_parms(): no params data found [ 56.161401][ T28] bridge_slave_1: left allmulticast mode [ 56.167175][ T28] bridge_slave_1: left promiscuous mode [ 56.172910][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.181086][ T28] bridge_slave_0: left allmulticast mode [ 56.186849][ T28] bridge_slave_0: left promiscuous mode [ 56.192542][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.201215][ T28] bridge_slave_1: left allmulticast mode [ 56.207029][ T28] bridge_slave_1: left promiscuous mode [ 56.212786][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.221487][ T28] bridge_slave_0: left allmulticast mode [ 56.227188][ T28] bridge_slave_0: left promiscuous mode [ 56.232840][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.429206][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.439843][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.450301][ T28] bond0 (unregistering): Released all slaves [ 56.459995][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.470484][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.481342][ T28] bond0 (unregistering): Released all slaves [ 56.489914][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.497227][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.504578][ T4399] bridge_slave_0: entered allmulticast mode [ 56.511165][ T4399] bridge_slave_0: entered promiscuous mode [ 56.518338][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.525443][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.532973][ T4399] bridge_slave_1: entered allmulticast mode [ 56.539706][ T4399] bridge_slave_1: entered promiscuous mode [ 56.577595][ T4399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.591180][ T4399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.627513][ T28] hsr_slave_0: left promiscuous mode [ 56.638760][ T28] hsr_slave_1: left promiscuous mode [ 56.651043][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.658563][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.679605][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.687208][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.701215][ T28] hsr_slave_0: left promiscuous mode [ 56.709257][ T4519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4519 comm=syz.0.186 [ 56.721862][ T28] hsr_slave_1: left promiscuous mode [ 56.729879][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.737501][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.745812][ T4523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'. [ 56.756774][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.764221][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.771619][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 56.787881][ T4523] loop0: detected capacity change from 0 to 1024 [ 56.787902][ T28] veth1_macvtap: left promiscuous mode [ 56.796714][ T4523] EXT4-fs: Ignoring removed bh option [ 56.799840][ T28] veth0_macvtap: left promiscuous mode [ 56.805174][ T4523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.810629][ T28] veth1_vlan: left promiscuous mode [ 56.821428][ T4523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.822527][ T28] veth0_vlan: left promiscuous mode [ 56.834008][ T4523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c09c, mo2=0002] [ 56.844832][ T4523] System zones: 0-1, 3-36 [ 56.851498][ T4523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.865130][ T28] veth1_macvtap: left promiscuous mode [ 56.870757][ T28] veth0_macvtap: left promiscuous mode [ 56.876358][ T28] veth1_vlan: left promiscuous mode [ 56.881614][ T28] veth0_vlan: left promiscuous mode [ 57.012980][ T4532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.188'. [ 57.024011][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 57.024027][ T29] audit: type=1326 audit(1723090603.595:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.0.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12bf4c79f9 code=0x0 [ 57.053955][ T28] team0 (unregistering): Port device team_slave_1 removed [ 57.064248][ T28] team0 (unregistering): Port device team_slave_0 removed [ 57.132884][ T28] team0 (unregistering): Port device team_slave_1 removed [ 57.143259][ T28] team0 (unregistering): Port device team_slave_0 removed [ 57.181882][ T4228] veth0_vlan: entered promiscuous mode [ 57.188742][ T4399] team0: Port device team_slave_0 added [ 57.205672][ T4399] team0: Port device team_slave_1 added [ 57.223290][ T4399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.230324][ T4399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.258821][ T4399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.270886][ T4228] veth1_vlan: entered promiscuous mode [ 57.285073][ T4399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.292151][ T4399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.318623][ T4399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.368303][ T4399] hsr_slave_0: entered promiscuous mode [ 57.379604][ T4399] hsr_slave_1: entered promiscuous mode [ 57.383239][ T29] audit: type=1400 audit(1723090603.955:347): avc: denied { write } for pid=4539 comm="syz.3.191" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.414998][ T4399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.424895][ T4540] usb usb8: usbfs: process 4540 (syz.3.191) did not claim interface 0 before use [ 57.436903][ T4399] Cannot create hsr debugfs directory [ 57.467674][ T4228] veth0_macvtap: entered promiscuous mode [ 57.475099][ T4228] veth1_macvtap: entered promiscuous mode [ 57.492763][ T4228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.503397][ T4228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.513336][ T4228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.523868][ T4228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.537105][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.537310][ T4550] loop3: detected capacity change from 0 to 4096 [ 57.568889][ T4228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.578792][ T4550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.580927][ T4228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.604044][ T4228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.614606][ T4228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.626536][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.654103][ T4347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.662208][ T3792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.673677][ T4228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.682634][ T4228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.691404][ T4228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.700285][ T4228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.717895][ T4160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.720131][ T4347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.761811][ T29] audit: type=1400 audit(1723090604.335:348): avc: denied { write } for pid=4559 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.764164][ T4347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.786336][ T29] audit: type=1400 audit(1723090604.355:349): avc: denied { shutdown } for pid=4560 comm="syz.3.194" laddr=ff02::1 lport=48675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.814118][ T4347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.825444][ T4562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'. [ 57.834660][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 57.864488][ T29] audit: type=1400 audit(1723090604.435:350): avc: denied { getopt } for pid=4566 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 57.887167][ T29] audit: type=1400 audit(1723090604.455:351): avc: denied { create } for pid=4566 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.907330][ T29] audit: type=1400 audit(1723090604.465:352): avc: denied { write } for pid=4566 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.918476][ T4568] hub 9-0:1.0: USB hub found [ 57.937029][ T29] audit: type=1400 audit(1723090604.505:353): avc: denied { unlink } for pid=2942 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.940077][ T4568] hub 9-0:1.0: 8 ports detected [ 58.008973][ T4575] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.029256][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.063190][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.092220][ T4586] loop3: detected capacity change from 0 to 128 [ 58.118007][ T4586] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 58.119743][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.119792][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.121299][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.121413][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.214102][ T28] IPVS: stop unused estimator thread 0... [ 58.248398][ T29] audit: type=1400 audit(1723090604.825:354): avc: denied { read } for pid=4600 comm="syz.2.202" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.248688][ T29] audit: type=1400 audit(1723090604.825:355): avc: denied { open } for pid=4600 comm="syz.2.202" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.302523][ T4601] loop2: detected capacity change from 0 to 1024 [ 58.302879][ T4601] EXT4-fs: Ignoring removed oldalloc option [ 58.329639][ T4601] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 58.350061][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.398306][ T4399] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.400435][ T4399] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.415976][ T4601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.422784][ C1] hrtimer: interrupt took 36336 ns [ 58.434559][ T4399] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.453811][ T4399] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.568314][ T4228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.581282][ T4399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.594194][ T4624] loop0: detected capacity change from 0 to 1024 [ 58.604144][ T4624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.624469][ T4627] __nla_validate_parse: 1 callbacks suppressed [ 58.624485][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 58.692527][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 58.694665][ T4399] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.701366][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 58.732335][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.739456][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.760639][ T4347] veth0_vlan: entered promiscuous mode [ 58.771133][ T3792] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 58.792886][ T3792] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 58.794653][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.817285][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.868465][ T4650] loop2: detected capacity change from 0 to 256 [ 58.882505][ T4347] veth1_vlan: entered promiscuous mode [ 58.888801][ T4650] FAT-fs (loop2): bogus sectors per cluster 255 [ 58.895070][ T4650] FAT-fs (loop2): Can't find a valid FAT filesystem [ 58.956009][ T4347] veth0_macvtap: entered promiscuous mode [ 58.969670][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 58.980774][ T4347] veth1_macvtap: entered promiscuous mode [ 58.997493][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.008147][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.018355][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.029016][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.038974][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.049454][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.060402][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.085623][ T4399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.093699][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.104423][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.114376][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.125230][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.135197][ T4347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.145678][ T4347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.158970][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.182631][ T3792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.192881][ T4347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.201804][ T4347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.210649][ T4347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.219393][ T4347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.281895][ T3499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.327167][ T4679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4679 comm=syz.3.215 [ 59.402523][ T3499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.430786][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 59.438094][ T4706] loop3: detected capacity change from 0 to 764 [ 59.457094][ T4706] rock: directory entry would overflow storage [ 59.463314][ T4706] rock: sig=0x4654, size=5, remaining=4 [ 59.511446][ T3499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.598260][ T3499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.715583][ T4399] veth0_vlan: entered promiscuous mode [ 59.732897][ T4738] sg_write: data in/out 185/70 bytes for SCSI command 0x0-- guessing data in; [ 59.732897][ T4738] program syz.1.223 not setting count and/or reply_len properly [ 59.757162][ T4738] FAULT_INJECTION: forcing a failure. [ 59.757162][ T4738] name failslab, interval 1, probability 0, space 0, times 0 [ 59.769862][ T4738] CPU: 0 UID: 0 PID: 4738 Comm: syz.1.223 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 59.780496][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 59.790627][ T4738] Call Trace: [ 59.793914][ T4738] [ 59.796844][ T4738] dump_stack_lvl+0xf2/0x150 [ 59.801450][ T4738] dump_stack+0x15/0x20 [ 59.805623][ T4738] should_fail_ex+0x229/0x230 [ 59.810312][ T4738] ? bio_kmalloc+0x43/0x50 [ 59.814926][ T4738] should_failslab+0x8f/0xb0 [ 59.819531][ T4738] __kmalloc_noprof+0xa5/0x370 [ 59.824302][ T4738] ? blk_rq_map_user_iov+0xb39/0x1bc0 [ 59.829700][ T4738] bio_kmalloc+0x43/0x50 [ 59.833960][ T4738] blk_rq_map_user_iov+0xc39/0x1bc0 [ 59.839172][ T4738] ? sbitmap_get+0x14a/0x1c0 [ 59.843850][ T4738] ? __sbitmap_queue_get+0x15/0x20 [ 59.849030][ T4738] ? __pfx_autoremove_wake_function+0x10/0x10 [ 59.855110][ T4738] ? blk_mq_rq_ctx_init+0x254/0x2f0 [ 59.860355][ T4738] ? __rcu_read_unlock+0x4e/0x70 [ 59.865311][ T4738] ? __perf_event_task_sched_in+0x7c4/0x7f0 [ 59.871464][ T4738] ? import_ubuf+0xe9/0x120 [ 59.876034][ T4738] blk_rq_map_user_io+0x193/0x260 [ 59.881246][ T4738] ? _raw_spin_unlock+0x26/0x50 [ 59.886128][ T4738] ? __schedule+0x5fa/0x950 [ 59.890656][ T4738] ? sg_link_reserve+0x118/0x140 [ 59.895632][ T4738] sg_common_write+0x812/0x8d0 [ 59.900418][ T4738] sg_write+0x69e/0x710 [ 59.904618][ T4738] ? __pfx_sg_write+0x10/0x10 [ 59.909323][ T4738] vfs_write+0x28b/0x900 [ 59.913584][ T4738] ? __fget_files+0x1da/0x210 [ 59.918345][ T4738] ksys_write+0xeb/0x1b0 [ 59.922607][ T4738] __x64_sys_write+0x42/0x50 [ 59.927214][ T4738] x64_sys_call+0x27dd/0x2d60 [ 59.931902][ T4738] do_syscall_64+0xc9/0x1c0 [ 59.936445][ T4738] ? clear_bhb_loop+0x55/0xb0 [ 59.941208][ T4738] ? clear_bhb_loop+0x55/0xb0 [ 59.945894][ T4738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.951918][ T4738] RIP: 0033:0x7f69bda479f9 [ 59.956343][ T4738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.975970][ T4738] RSP: 002b:00007f69bc6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.984384][ T4738] RAX: ffffffffffffffda RBX: 00007f69bdbd5f80 RCX: 00007f69bda479f9 [ 59.992459][ T4738] RDX: 0000000000000070 RSI: 0000000020000300 RDI: 0000000000000008 [ 60.000504][ T4738] RBP: 00007f69bc6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.008476][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.016536][ T4738] R13: 0000000000000000 R14: 00007f69bdbd5f80 R15: 00007ffdfe2a26f8 [ 60.024584][ T4738] [ 60.068279][ T4741] loop1: detected capacity change from 0 to 128 [ 60.080750][ T3499] bridge_slave_1: left allmulticast mode [ 60.086510][ T3499] bridge_slave_1: left promiscuous mode [ 60.092171][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.120244][ T3499] bridge_slave_0: left allmulticast mode [ 60.125938][ T3499] bridge_slave_0: left promiscuous mode [ 60.131727][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.216187][ T4756] SELinux: Context ‰©‘& O— ˼¦´ìb¬‚¤6mœãz™ß² }¶+ád.ˆ¹XK¢ONFÊ~gW±*ÃE‰].ýs^Êá€+©![3ˆþsAÜÍà,^8YÖïpO¹ge.ÖU(ɾ›È½Ðv¦˜SíÄ is not valid (left unmapped). [ 60.232626][ T4756] SELinux: Context ìgS is not valid (left unmapped). [ 60.239915][ T4756] SELinux: Context ÀfŽÎþ ÓhDèÍfutq¤K´ÒLêwä¼×~ÂDèÐ·ïŹ is not valid (left unmapped). [ 60.268500][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.279085][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.289636][ T3499] bond0 (unregistering): Released all slaves [ 60.316181][ T4399] veth1_vlan: entered promiscuous mode [ 60.337260][ T4761] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 60.346987][ T4399] veth0_macvtap: entered promiscuous mode [ 60.387592][ T4761] loop3: detected capacity change from 0 to 2048 [ 60.396155][ T4399] veth1_macvtap: entered promiscuous mode [ 60.410020][ T3499] hsr_slave_0: left promiscuous mode [ 60.415749][ T3499] hsr_slave_1: left promiscuous mode [ 60.421974][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.429326][ T4761] loop3: p3 < > p4 < > [ 60.429510][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.433526][ T4761] loop3: partition table partially beyond EOD, truncated [ 60.433574][ T4761] loop3: p3 start 4284289 is beyond EOD, truncated [ 60.455097][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.462605][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.478929][ T3499] veth1_macvtap: left promiscuous mode [ 60.484491][ T3499] veth0_macvtap: left promiscuous mode [ 60.490340][ T3499] veth1_vlan: left promiscuous mode [ 60.495655][ T3499] veth0_vlan: left promiscuous mode [ 60.632653][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 60.643926][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 60.684754][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 60.712341][ T4696] chnl_net:caif_netlink_parms(): no params data found [ 60.722683][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.733253][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.740531][ T4803] sctp: [Deprecated]: syz.3.235 (pid 4803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.740531][ T4803] Use struct sctp_sack_info instead [ 60.743329][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.769936][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.779899][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.790379][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.801382][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.814504][ T4801] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 60.829304][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.839909][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.849850][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.860484][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.870300][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.880817][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.892521][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.901201][ T4399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.910015][ T4399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.918755][ T4399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.927589][ T4399] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.018155][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.025329][ T4696] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.025847][ T4818] loop4: detected capacity change from 0 to 1024 [ 61.033303][ T4696] bridge_slave_0: entered allmulticast mode [ 61.045959][ T4696] bridge_slave_0: entered promiscuous mode [ 61.055825][ T4818] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 61.060308][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.071626][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.079032][ T4696] bridge_slave_1: entered allmulticast mode [ 61.085945][ T4696] bridge_slave_1: entered promiscuous mode [ 61.134939][ T4696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.166217][ T4696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.242892][ T4696] team0: Port device team_slave_0 added [ 61.268761][ T4696] team0: Port device team_slave_1 added [ 61.315441][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.322591][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.348684][ T4696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.367477][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 61.382232][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.388460][ T4818] loop4: detected capacity change from 0 to 128 [ 61.389326][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.421646][ T4696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.436034][ T4818] loop4: detected capacity change from 0 to 512 [ 61.452416][ T4696] hsr_slave_0: entered promiscuous mode [ 61.459116][ T4696] hsr_slave_1: entered promiscuous mode [ 61.465144][ T4696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.469738][ T4833] loop4: detected capacity change from 0 to 512 [ 61.473941][ T4696] Cannot create hsr debugfs directory [ 61.594151][ T4854] loop2: detected capacity change from 0 to 4096 [ 61.632794][ T4850] loop4: detected capacity change from 0 to 1024 [ 61.661032][ T4850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.833042][ T4866] loop1: detected capacity change from 0 to 1024 [ 61.839854][ T4866] ext4: Unknown parameter 'hash' [ 61.871088][ T4696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.892098][ T4696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.916717][ T4696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.929598][ T4696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.940021][ T4874] netlink: 228 bytes leftover after parsing attributes in process `syz.1.249'. [ 61.991123][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 62.044411][ T4696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.046836][ T4887] loop3: detected capacity change from 0 to 512 [ 62.058592][ T4887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.071379][ T4696] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.089716][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.096841][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.105743][ T4887] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.113740][ T4887] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 62.121965][ T4887] System zones: 0-1, 15-15, 18-18, 34-34 [ 62.127983][ T4887] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.134376][ T4887] __quota_error: 16 callbacks suppressed [ 62.134417][ T4887] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 62.137879][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.140159][ T4887] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.149421][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.156418][ T4887] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 62.186470][ T4887] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.254: bg 0: block 40: padding at end of block bitmap is not set [ 62.201135][ T4887] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 62.210447][ T4887] EXT4-fs (loop3): 1 truncate cleaned up [ 62.210829][ T29] audit: type=1400 audit(1723090608.785:372): avc: denied { listen } for pid=4893 comm="syz.1.257" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.216692][ T4887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.253692][ T4887] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.254: bad symlink. [ 62.264747][ T29] audit: type=1400 audit(1723090608.815:373): avc: denied { accept } for pid=4893 comm="syz.1.257" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.286056][ T29] audit: type=1400 audit(1723090608.825:374): avc: denied { read } for pid=4885 comm="syz.3.254" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.309711][ T4887] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.254: bad symlink. [ 62.364295][ T4894] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 62.404627][ T4898] loop2: detected capacity change from 0 to 4096 [ 62.420644][ T4898] EXT4-fs error (device loop2): ext4_quota_enable:7022: comm syz.2.258: inode #255: comm syz.2.258: iget: illegal inode # [ 62.435384][ T4696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.455676][ T4898] EXT4-fs error (device loop2): ext4_quota_enable:7025: comm syz.2.258: Bad quota inode: 255, type: 2 [ 62.468603][ T4898] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix. [ 62.484943][ T4898] EXT4-fs (loop2): mount failed [ 62.503159][ T29] audit: type=1326 audit(1723090609.075:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.1.260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69bda479f9 code=0x0 [ 62.531908][ T4898] loop2: detected capacity change from 0 to 512 [ 62.532362][ T29] audit: type=1400 audit(1723090609.095:376): avc: denied { create } for pid=4897 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 62.547706][ T4898] ext4: Unknown parameter 'appraise' [ 62.589251][ T4898] loop2: detected capacity change from 0 to 512 [ 62.599290][ T4898] EXT4-fs (loop2): 1 truncate cleaned up [ 62.605428][ T4898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.635418][ T4696] veth0_vlan: entered promiscuous mode [ 62.650990][ T4228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.652089][ T4696] veth1_vlan: entered promiscuous mode [ 62.677734][ T4696] veth0_macvtap: entered promiscuous mode [ 62.685641][ T4696] veth1_macvtap: entered promiscuous mode [ 62.687145][ T4919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.261'. [ 62.698605][ T4696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.710884][ T4696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.720750][ T4696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.731251][ T4696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.741138][ T4696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.751652][ T4696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.761585][ T4696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.772222][ T4696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.784825][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.810725][ T4696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.821312][ T4696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.831200][ T4696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.841693][ T4696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.851694][ T4696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.862152][ T4696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.872252][ T4696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.882697][ T4696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.895133][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.905518][ T4696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.914302][ T4696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.923227][ T4696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.931942][ T4696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.941183][ T4399] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.950816][ T4160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.010763][ T29] audit: type=1400 audit(1723090609.585:377): avc: denied { create } for pid=4933 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.048399][ T4934] loop0: detected capacity change from 0 to 1024 [ 63.064080][ T4944] loop4: detected capacity change from 0 to 128 [ 63.067485][ T4934] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.070407][ T29] audit: type=1400 audit(1723090609.635:378): avc: denied { watch_reads } for pid=4943 comm="syz.4.268" path="/5" dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.103434][ T4944] msdos: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 63.112644][ T4934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842e118, mo2=0000] [ 63.121025][ T4934] System zones: 0-1, 3-12 [ 63.131787][ T4934] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.217: Invalid block bitmap block 0 in block_group 0 [ 63.157326][ T4954] cannot load conntrack support for proto=3 [ 63.157470][ T4934] Quota error (device loop0): write_blk: dquota write failed [ 63.170855][ T4934] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 63.187691][ T4934] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.217: Failed to acquire dquot type 0 [ 63.212290][ T4934] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.217: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.229715][ T4934] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.217: Invalid inode bitmap blk 0 in block_group 0 [ 63.242360][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u8:0: Failed to release dquot type 0 [ 63.253960][ T4934] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 63.254143][ T4934] EXT4-fs (loop0): 1 orphan inode deleted [ 63.277040][ T4967] loop2: detected capacity change from 0 to 128 [ 63.285329][ T4934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.355861][ T4974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.388649][ T4696] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.485590][ T4990] tipc: Can't bind to reserved service type 0 [ 63.507199][ T4990] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 63.526659][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 63.534171][ T3422] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 63.546563][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.556727][ T4990] loop0: detected capacity change from 0 to 128 [ 63.563923][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.571483][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.578920][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.586406][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.593839][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.601298][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.608742][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.616171][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.623594][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.631035][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.638595][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.646001][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.653538][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.661017][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.668467][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.675970][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.683451][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.690870][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.692775][ T4990] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.698265][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.698293][ T3422] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.711754][ T4997] __nla_validate_parse: 3 callbacks suppressed [ 63.711771][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 63.719443][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 63.726679][ T4990] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.757186][ T4969] FAULT_INJECTION: forcing a failure. [ 63.757186][ T4969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.794145][ T4969] CPU: 0 UID: 0 PID: 4969 Comm: syz.3.269 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 63.804772][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 63.814888][ T4969] Call Trace: [ 63.818179][ T4969] [ 63.821126][ T4969] dump_stack_lvl+0xf2/0x150 [ 63.825815][ T4969] dump_stack+0x15/0x20 [ 63.830038][ T4969] should_fail_ex+0x229/0x230 [ 63.834750][ T4969] should_fail+0xb/0x10 [ 63.839084][ T4969] should_fail_usercopy+0x1a/0x20 [ 63.844136][ T4969] _copy_to_user+0x1e/0xa0 [ 63.848584][ T4969] simple_read_from_buffer+0xa0/0x110 [ 63.850650][ T3422] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 63.854028][ T4969] proc_fail_nth_read+0xfc/0x140 [ 63.868591][ T4969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.874240][ T4969] vfs_read+0x1a2/0x6e0 [ 63.878423][ T4969] ? __rcu_read_unlock+0x4e/0x70 [ 63.883378][ T4969] ? __fget_files+0x1da/0x210 [ 63.888227][ T4969] ksys_read+0xeb/0x1b0 [ 63.892409][ T4969] __x64_sys_read+0x42/0x50 [ 63.897019][ T4969] x64_sys_call+0x27d3/0x2d60 [ 63.901835][ T4969] do_syscall_64+0xc9/0x1c0 [ 63.906425][ T4969] ? clear_bhb_loop+0x55/0xb0 [ 63.911134][ T4969] ? clear_bhb_loop+0x55/0xb0 [ 63.915837][ T4969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.921798][ T4969] RIP: 0033:0x7f336404643c [ 63.926303][ T4969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 63.945984][ T4969] RSP: 002b:00007f3362ca6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.954472][ T4969] RAX: ffffffffffffffda RBX: 00007f33641d6058 RCX: 00007f336404643c [ 63.962719][ T4969] RDX: 000000000000000f RSI: 00007f3362ca60a0 RDI: 000000000000000c [ 63.971042][ T4969] RBP: 00007f3362ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.979041][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.987119][ T4969] R13: 0000000000000000 R14: 00007f33641d6058 R15: 00007ffd11255688 [ 63.995203][ T4969] [ 64.033517][ T4696] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.130411][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 64.234759][ T5032] program syz.0.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.306677][ T5049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.296'. [ 64.335548][ T5049] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 64.366245][ T5049] loop2: detected capacity change from 0 to 512 [ 64.400803][ T5049] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.444461][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 64.648021][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 64.656957][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 64.831066][ T5072] loop0: detected capacity change from 0 to 2048 [ 65.091829][ T5081] loop3: detected capacity change from 0 to 256 [ 65.112918][ T5081] msdos: Bad value for 'gid' [ 65.117691][ T5081] msdos: Bad value for 'gid' [ 65.137893][ T5084] netlink: 64 bytes leftover after parsing attributes in process `syz.0.305'. [ 65.146913][ T5084] netlink: 84 bytes leftover after parsing attributes in process `syz.0.305'. [ 65.212764][ T5090] loop0: detected capacity change from 0 to 4096 [ 65.344064][ T5107] loop3: detected capacity change from 0 to 128 [ 65.360048][ T5107] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.398095][ T5114] vhci_hcd: default hub control req: 0012 v000a i0002 l239 [ 65.464710][ T5116] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 65.592186][ T5138] netlink: 4019 bytes leftover after parsing attributes in process `syz.1.327'. [ 65.635424][ T5135] loop0: detected capacity change from 0 to 512 [ 65.653521][ T5145] dummy0: entered promiscuous mode [ 65.671656][ T5148] loop4: detected capacity change from 0 to 512 [ 65.681920][ T5150] loop1: detected capacity change from 0 to 512 [ 65.689282][ T5135] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.699893][ T5148] EXT4-fs: Ignoring removed orlov option [ 65.717310][ T5148] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.727653][ T5145] loop3: detected capacity change from 0 to 8192 [ 65.728938][ T5148] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 65.745229][ T5148] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.330: Corrupt directory, running e2fsck is recommended [ 65.765783][ T5145] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.798776][ T5154] loop1: detected capacity change from 0 to 1024 [ 65.816424][ T5148] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 65.830988][ T5148] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.330: corrupted in-inode xattr: overlapping e_value [ 65.848334][ T5148] EXT4-fs (loop4): Remounting filesystem read-only [ 65.855727][ T5148] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 65.863302][ T5158] FAT-fs (loop3): error, clusters badly computed (1 != 30720) [ 65.870903][ T5158] FAT-fs (loop3): Filesystem has been set read-only [ 65.877984][ T5158] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1042) [ 65.941314][ T5165] loop4: detected capacity change from 0 to 512 [ 65.967384][ T5165] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.330: bg 0: block 5: invalid block bitmap [ 65.980212][ T5165] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 66.025042][ T5165] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.330: invalid indirect mapped block 3 (level 2) [ 66.046217][ T5165] EXT4-fs (loop4): 1 orphan inode deleted [ 66.052319][ T5165] EXT4-fs (loop4): 1 truncate cleaned up [ 66.297855][ T5194] loop3: detected capacity change from 0 to 4096 [ 66.375809][ T5209] FAULT_INJECTION: forcing a failure. [ 66.375809][ T5209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.388982][ T5209] CPU: 0 UID: 0 PID: 5209 Comm: syz.2.344 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 66.399679][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 66.409766][ T5209] Call Trace: [ 66.413116][ T5209] [ 66.416043][ T5209] dump_stack_lvl+0xf2/0x150 [ 66.420693][ T5209] dump_stack+0x15/0x20 [ 66.424895][ T5209] should_fail_ex+0x229/0x230 [ 66.429669][ T5209] should_fail+0xb/0x10 [ 66.433842][ T5209] should_fail_usercopy+0x1a/0x20 [ 66.438939][ T5209] _copy_from_iter+0xd3/0xb00 [ 66.443623][ T5209] ? __virt_addr_valid+0x1ed/0x250 [ 66.448741][ T5209] ? __check_object_size+0x35b/0x510 [ 66.454132][ T5209] netlink_sendmsg+0x460/0x6e0 [ 66.458986][ T5209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.464330][ T5209] __sock_sendmsg+0x140/0x180 [ 66.469055][ T5209] ____sys_sendmsg+0x312/0x410 [ 66.473885][ T5209] __sys_sendmsg+0x1e9/0x280 [ 66.478640][ T5209] __x64_sys_sendmsg+0x46/0x50 [ 66.483427][ T5209] x64_sys_call+0x2689/0x2d60 [ 66.488131][ T5209] do_syscall_64+0xc9/0x1c0 [ 66.492718][ T5209] ? clear_bhb_loop+0x55/0xb0 [ 66.497486][ T5209] ? clear_bhb_loop+0x55/0xb0 [ 66.502192][ T5209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.508151][ T5209] RIP: 0033:0x7fd5ce5b79f9 [ 66.512624][ T5209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.532275][ T5209] RSP: 002b:00007fd5cd237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.540701][ T5209] RAX: ffffffffffffffda RBX: 00007fd5ce745f80 RCX: 00007fd5ce5b79f9 [ 66.548723][ T5209] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 66.556765][ T5209] RBP: 00007fd5cd237090 R08: 0000000000000000 R09: 0000000000000000 [ 66.564778][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.572767][ T5209] R13: 0000000000000000 R14: 00007fd5ce745f80 R15: 00007ffc630e45f8 [ 66.580749][ T5209] [ 66.664482][ T5225] FAULT_INJECTION: forcing a failure. [ 66.664482][ T5225] name failslab, interval 1, probability 0, space 0, times 0 [ 66.677232][ T5225] CPU: 1 UID: 0 PID: 5225 Comm: syz.4.350 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 66.687853][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 66.697932][ T5225] Call Trace: [ 66.701271][ T5225] [ 66.704239][ T5225] dump_stack_lvl+0xf2/0x150 [ 66.708853][ T5225] dump_stack+0x15/0x20 [ 66.713020][ T5225] should_fail_ex+0x229/0x230 [ 66.717769][ T5225] ? prepare_creds+0x37/0x480 [ 66.722490][ T5225] should_failslab+0x8f/0xb0 [ 66.727095][ T5225] kmem_cache_alloc_noprof+0x4c/0x290 [ 66.732517][ T5225] prepare_creds+0x37/0x480 [ 66.737141][ T5225] copy_creds+0x90/0x3f0 [ 66.741458][ T5225] copy_process+0x64b/0x1f90 [ 66.746147][ T5225] ? _copy_from_user+0x9a/0xd0 [ 66.751044][ T5225] kernel_clone+0x167/0x5e0 [ 66.755573][ T5225] __se_sys_clone3+0x1b5/0x1f0 [ 66.760551][ T5225] __x64_sys_clone3+0x31/0x40 [ 66.765332][ T5225] x64_sys_call+0x287d/0x2d60 [ 66.770041][ T5225] do_syscall_64+0xc9/0x1c0 [ 66.774648][ T5225] ? clear_bhb_loop+0x55/0xb0 [ 66.779416][ T5225] ? clear_bhb_loop+0x55/0xb0 [ 66.784228][ T5225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.790168][ T5225] RIP: 0033:0x7fee462779f9 [ 66.794653][ T5225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.814562][ T5225] RSP: 002b:00007fee44ef6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 66.822994][ T5225] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fee462779f9 [ 66.831103][ T5225] RDX: 00007fee44ef6f20 RSI: 0000000000000058 RDI: 00007fee44ef6f20 [ 66.839094][ T5225] RBP: 00007fee44ef7090 R08: 0000000000000000 R09: 0000000000000058 [ 66.847170][ T5225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.857676][ T5225] R13: 0000000000000000 R14: 00007fee46405f80 R15: 00007ffca5a35548 [ 66.865931][ T5225] [ 66.886827][ T5237] netlink: 'syz.1.353': attribute type 2 has an invalid length. [ 66.958470][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.967202][ T5246] FAULT_INJECTION: forcing a failure. [ 66.967202][ T5246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.972521][ T5241] team0: Port device bond0 added [ 66.980615][ T5246] CPU: 0 UID: 0 PID: 5246 Comm: syz.1.354 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 66.995946][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 67.006026][ T5246] Call Trace: [ 67.009421][ T5246] [ 67.012355][ T5246] dump_stack_lvl+0xf2/0x150 [ 67.017085][ T5246] dump_stack+0x15/0x20 [ 67.021316][ T5246] should_fail_ex+0x229/0x230 [ 67.026123][ T5246] should_fail+0xb/0x10 [ 67.030305][ T5246] should_fail_usercopy+0x1a/0x20 [ 67.035366][ T5246] _copy_from_user+0x1e/0xd0 [ 67.040011][ T5246] copy_from_sockptr_offset+0x6b/0xb0 [ 67.045394][ T5246] do_ip6t_set_ctl+0x6a4/0x8c0 [ 67.050168][ T5246] ? kstrtoull+0x110/0x140 [ 67.054615][ T5246] ? __rcu_read_unlock+0x4e/0x70 [ 67.059572][ T5246] nf_setsockopt+0x195/0x1b0 [ 67.064183][ T5246] ipv6_setsockopt+0x126/0x140 [ 67.069019][ T5246] dccp_setsockopt+0xe1/0xc40 [ 67.073795][ T5246] sock_common_setsockopt+0x64/0x80 [ 67.079023][ T5246] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.085027][ T5246] __sys_setsockopt+0x1d8/0x250 [ 67.089889][ T5246] __x64_sys_setsockopt+0x66/0x80 [ 67.094925][ T5246] x64_sys_call+0x278d/0x2d60 [ 67.099615][ T5246] do_syscall_64+0xc9/0x1c0 [ 67.104252][ T5246] ? clear_bhb_loop+0x55/0xb0 [ 67.108975][ T5246] ? clear_bhb_loop+0x55/0xb0 [ 67.113665][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.119572][ T5246] RIP: 0033:0x7f69bda479f9 [ 67.123992][ T5246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.143769][ T5246] RSP: 002b:00007f69bc6a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.152189][ T5246] RAX: ffffffffffffffda RBX: 00007f69bdbd6058 RCX: 00007f69bda479f9 [ 67.160236][ T5246] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 67.168222][ T5246] RBP: 00007f69bc6a6090 R08: 00000000000005f0 R09: 0000000000000000 [ 67.176299][ T5246] R10: 0000000020000b40 R11: 0000000000000246 R12: 0000000000000001 [ 67.184491][ T5246] R13: 0000000000000000 R14: 00007f69bdbd6058 R15: 00007ffdfe2a26f8 [ 67.192555][ T5246] [ 67.210594][ T5241] bond0: entered promiscuous mode [ 67.215709][ T5241] bond_slave_0: entered promiscuous mode [ 67.221570][ T5241] bond_slave_1: entered promiscuous mode [ 67.229245][ T5241] bond0: left promiscuous mode [ 67.234134][ T5241] bond_slave_0: left promiscuous mode [ 67.239611][ T5241] bond_slave_1: left promiscuous mode [ 67.266243][ T5252] usb usb1: usbfs: process 5252 (syz.2.359) did not claim interface 6 before use [ 67.282250][ T5252] dummy0: entered promiscuous mode [ 67.319320][ T5258] loop0: detected capacity change from 0 to 512 [ 67.327381][ T5256] loop2: detected capacity change from 0 to 1764 [ 67.334264][ T5256] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 67.349831][ T5256] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 67.361734][ T5264] loop4: detected capacity change from 0 to 512 [ 67.370043][ T5258] EXT4-fs mount: 16 callbacks suppressed [ 67.370060][ T5258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.390135][ T5258] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.396812][ T5269] capability: warning: `syz.3.365' uses 32-bit capabilities (legacy support in use) [ 67.401582][ T5264] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.364: bg 0: block 5: invalid block bitmap [ 67.414240][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 67.414293][ T29] audit: type=1400 audit(1723090613.985:494): avc: denied { write } for pid=5268 comm="syz.3.365" path="socket:[12836]" dev="sockfs" ino=12836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.431396][ T5258] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.361: corrupted xattr block 32: invalid header [ 67.458247][ T29] audit: type=1400 audit(1723090614.035:495): avc: denied { nlmsg_read } for pid=5268 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.486630][ T5264] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 67.488114][ T5264] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.364: invalid indirect mapped block 3 (level 2) [ 67.495560][ T29] audit: type=1400 audit(1723090614.035:496): avc: denied { read } for pid=5268 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.510710][ T5258] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 67.537900][ T29] audit: type=1326 audit(1723090614.105:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.4.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee462779f9 code=0x0 [ 67.561112][ T5264] EXT4-fs (loop4): 1 orphan inode deleted [ 67.566975][ T5264] EXT4-fs (loop4): 1 truncate cleaned up [ 67.578282][ T5271] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.361: corrupted xattr block 32: invalid header [ 67.589039][ T5274] loop3: detected capacity change from 0 to 2048 [ 67.593195][ T5264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.598708][ T5258] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.361: corrupted xattr block 32: invalid header [ 67.624735][ T5271] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 67.636116][ T4399] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.636906][ T5258] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 67.649370][ T29] audit: type=1400 audit(1723090614.205:498): avc: denied { rename } for pid=5257 comm="syz.0.361" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.658598][ T5258] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.361: corrupted xattr block 32: invalid header [ 67.680413][ T3338] IPVS: starting estimator thread 0... [ 67.690827][ T5258] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 67.704012][ T29] audit: type=1400 audit(1723090614.225:499): avc: denied { read } for pid=5257 comm="syz.0.361" name="file0" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.727267][ T29] audit: type=1400 audit(1723090614.295:500): avc: denied { open } for pid=5257 comm="syz.0.361" path="/22/file0/file0/file0" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.751147][ T5278] Unsupported ieee802154 address type: 0 [ 67.758989][ T29] audit: type=1400 audit(1723090614.325:501): avc: denied { bind } for pid=5277 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.778906][ T5276] IPVS: using max 2016 ests per chain, 100800 per kthread [ 67.780598][ T4696] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.796076][ T29] audit: type=1400 audit(1723090614.365:502): avc: denied { listen } for pid=5277 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 67.824896][ T5284] loop4: detected capacity change from 0 to 2048 [ 67.834250][ T29] audit: type=1400 audit(1723090614.405:503): avc: denied { ioctl } for pid=5285 comm="syz.1.371" path="socket:[12880]" dev="sockfs" ino=12880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.861764][ T5284] EXT4-fs: Invalid want_extra_isize 2 [ 68.033874][ T5308] loop0: detected capacity change from 0 to 512 [ 68.041502][ T5308] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 68.051787][ T5308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 68.059995][ T5308] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.067102][ T5308] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.379: bg 0: block 361: padding at end of block bitmap is not set [ 68.082650][ T5308] EXT4-fs (loop0): Remounting filesystem read-only [ 68.090017][ T5308] EXT4-fs (loop0): 1 truncate cleaned up [ 68.096266][ T5308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 68.108590][ T5308] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 68.115671][ T5308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 68.535501][ T5343] loop3: detected capacity change from 0 to 1024 [ 68.554364][ T5343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.580239][ T5343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.634745][ T4160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.764118][ T5365] loop3: detected capacity change from 0 to 2048 [ 68.789184][ T5365] ext4: Unknown parameter 'smackfsroot' [ 68.816901][ T5372] loop0: detected capacity change from 0 to 1024 [ 68.838369][ T5372] ext3: Bad value for 'debug_want_extra_isize' [ 68.847809][ T5376] FAULT_INJECTION: forcing a failure. [ 68.847809][ T5376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.860924][ T5376] CPU: 1 UID: 0 PID: 5376 Comm: syz.4.402 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 68.871748][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 68.881883][ T5376] Call Trace: [ 68.885174][ T5376] [ 68.888121][ T5376] dump_stack_lvl+0xf2/0x150 [ 68.892860][ T5376] dump_stack+0x15/0x20 [ 68.897432][ T5376] should_fail_ex+0x229/0x230 [ 68.902140][ T5376] should_fail+0xb/0x10 [ 68.906397][ T5376] should_fail_usercopy+0x1a/0x20 [ 68.911472][ T5376] _copy_from_iter+0xd3/0xb00 [ 68.916180][ T5376] ? kmalloc_reserve+0x16e/0x190 [ 68.921205][ T5376] ? __build_skb_around+0x196/0x1f0 [ 68.926457][ T5376] ? __alloc_skb+0x21f/0x310 [ 68.931136][ T5376] ? __virt_addr_valid+0x1ed/0x250 [ 68.936369][ T5376] ? __check_object_size+0x35b/0x510 [ 68.941762][ T5376] netlink_sendmsg+0x460/0x6e0 [ 68.946577][ T5376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.951889][ T5376] __sock_sendmsg+0x140/0x180 [ 68.956659][ T5376] ____sys_sendmsg+0x312/0x410 [ 68.961444][ T5376] __sys_sendmsg+0x1e9/0x280 [ 68.966064][ T5376] __x64_sys_sendmsg+0x46/0x50 [ 68.970861][ T5376] x64_sys_call+0x2689/0x2d60 [ 68.975657][ T5376] do_syscall_64+0xc9/0x1c0 [ 68.980319][ T5376] ? clear_bhb_loop+0x55/0xb0 [ 68.985027][ T5376] ? clear_bhb_loop+0x55/0xb0 [ 68.989892][ T5376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.995882][ T5376] RIP: 0033:0x7fee462779f9 [ 69.000369][ T5376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.020072][ T5376] RSP: 002b:00007fee44ef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.028504][ T5376] RAX: ffffffffffffffda RBX: 00007fee46405f80 RCX: 00007fee462779f9 [ 69.036566][ T5376] RDX: 0000000000008800 RSI: 0000000020000080 RDI: 0000000000000008 [ 69.044550][ T5376] RBP: 00007fee44ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.052530][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.060505][ T5376] R13: 0000000000000000 R14: 00007fee46405f80 R15: 00007ffca5a35548 [ 69.068488][ T5376] [ 69.196139][ T5383] loop1: detected capacity change from 0 to 512 [ 69.240820][ T5383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.259573][ T5383] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.291089][ T5383] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.404: Directory hole found for htree leaf block 0 [ 69.311590][ T5383] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.404: corrupted inode contents [ 69.336352][ T5383] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz.1.404: mark_inode_dirty error [ 69.373802][ T5383] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.404: corrupted inode contents [ 69.428215][ T5393] __nla_validate_parse: 6 callbacks suppressed [ 69.428233][ T5393] netlink: 763 bytes leftover after parsing attributes in process `syz.3.407'. [ 69.444298][ T5394] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.404: Directory hole found for htree leaf block 0 [ 69.527700][ T5403] loop2: detected capacity change from 0 to 4096 [ 69.528299][ T4347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.554830][ T5403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.619992][ T5411] mmap: syz.4.410 (5411) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.660616][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 69.752258][ T5421] loop3: detected capacity change from 0 to 128 [ 69.786980][ T5421] xt_nat: multiple ranges no longer supported [ 69.806507][ T5421] netlink: 'syz.3.416': attribute type 11 has an invalid length. [ 69.818444][ T4228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.840433][ T5426] loop1: detected capacity change from 0 to 1024 [ 69.920463][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 70.056895][ T5442] loop2: detected capacity change from 0 to 764 [ 70.502761][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 70.859064][ T5464] loop3: detected capacity change from 0 to 2048 [ 70.963693][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 71.014778][ T5464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.081962][ T5481] loop2: detected capacity change from 0 to 128 [ 71.192352][ T3502] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.246206][ T3502] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.258532][ T3502] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.258532][ T3502] [ 71.268365][ T3502] EXT4-fs (loop3): Total free blocks count 0 [ 71.274398][ T3502] EXT4-fs (loop3): Free/Dirty block details [ 71.280329][ T3502] EXT4-fs (loop3): free_blocks=2415919104 [ 71.286147][ T3502] EXT4-fs (loop3): dirty_blocks=16 [ 71.291284][ T3502] EXT4-fs (loop3): Block reservation details [ 71.297298][ T3502] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 71.333961][ T4160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.379957][ T5495] loop2: detected capacity change from 0 to 512 [ 71.461296][ T5508] loop2: detected capacity change from 0 to 764 [ 71.498032][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 71.526501][ T5513] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 71.534438][ T5513] netlink: 'syz.1.449': attribute type 2 has an invalid length. [ 71.594494][ T5522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.452'. [ 71.701923][ T5532] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 71.744513][ T5532] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 71.754855][ T5532] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 71.798674][ T5537] 9pnet_fd: Insufficient options for proto=fd [ 71.821674][ T5532] bond1: (slave ip6gre1): making interface the new active one [ 71.851852][ T5532] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 71.860724][ T5498] netlink: 'syz.0.444': attribute type 13 has an invalid length. [ 71.868536][ T5498] netlink: 164 bytes leftover after parsing attributes in process `syz.0.444'. [ 71.889364][ T5498] syz_tun: refused to change device tx_queue_len [ 71.953461][ T5546] netlink: 2 bytes leftover after parsing attributes in process `syz.1.459'. [ 72.046645][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 72.081415][ T5552] futex_wake_op: syz.3.462 tries to shift op by -1; fix this program [ 72.190747][ T5562] FAULT_INJECTION: forcing a failure. [ 72.190747][ T5562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.203984][ T5562] CPU: 1 UID: 0 PID: 5562 Comm: syz.1.466 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 72.214613][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 72.224746][ T5562] Call Trace: [ 72.228045][ T5562] [ 72.231032][ T5562] dump_stack_lvl+0xf2/0x150 [ 72.235670][ T5562] dump_stack+0x15/0x20 [ 72.239913][ T5562] should_fail_ex+0x229/0x230 [ 72.244725][ T5562] should_fail+0xb/0x10 [ 72.248915][ T5562] should_fail_usercopy+0x1a/0x20 [ 72.253966][ T5562] _copy_from_user+0x1e/0xd0 [ 72.258598][ T5562] move_addr_to_kernel+0x82/0x120 [ 72.263665][ T5562] __sys_bind+0xe2/0x1d0 [ 72.267994][ T5562] __x64_sys_bind+0x41/0x50 [ 72.272596][ T5562] x64_sys_call+0x201c/0x2d60 [ 72.277298][ T5562] do_syscall_64+0xc9/0x1c0 [ 72.281903][ T5562] ? clear_bhb_loop+0x55/0xb0 [ 72.286654][ T5562] ? clear_bhb_loop+0x55/0xb0 [ 72.291379][ T5562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.297368][ T5562] RIP: 0033:0x7f69bda479f9 [ 72.301925][ T5562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.321626][ T5562] RSP: 002b:00007f69bc6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 72.330070][ T5562] RAX: ffffffffffffffda RBX: 00007f69bdbd5f80 RCX: 00007f69bda479f9 [ 72.338052][ T5562] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000005 [ 72.346119][ T5562] RBP: 00007f69bc6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.354097][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.362073][ T5562] R13: 0000000000000000 R14: 00007f69bdbd5f80 R15: 00007ffdfe2a26f8 [ 72.370054][ T5562] [ 72.411973][ T5568] loop2: detected capacity change from 0 to 512 [ 72.446258][ T5568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.465538][ T5568] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.485133][ T5573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=5573 comm=syz.1.470 [ 72.511925][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.526776][ T5574] loop3: detected capacity change from 0 to 256 [ 72.535062][ T5568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.469: bg 0: block 264: padding at end of block bitmap is not set [ 72.547321][ T5577] 9pnet_fd: Insufficient options for proto=fd [ 72.569188][ T5577] netlink: 104 bytes leftover after parsing attributes in process `syz.0.471'. [ 72.590408][ T4228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.704872][ T5599] loop2: detected capacity change from 0 to 764 [ 72.724543][ T5601] loop4: detected capacity change from 0 to 1024 [ 72.749313][ T5606] FAULT_INJECTION: forcing a failure. [ 72.749313][ T5606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.762560][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: syz.4.482 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 72.773421][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 72.783605][ T5606] Call Trace: [ 72.786879][ T5606] [ 72.789804][ T5606] dump_stack_lvl+0xf2/0x150 [ 72.794459][ T5606] dump_stack+0x15/0x20 [ 72.798682][ T5606] should_fail_ex+0x229/0x230 [ 72.803580][ T5606] should_fail+0xb/0x10 [ 72.808145][ T5606] should_fail_usercopy+0x1a/0x20 [ 72.813232][ T5606] _copy_from_user+0x1e/0xd0 [ 72.817834][ T5606] copy_msghdr_from_user+0x54/0x2a0 [ 72.823161][ T5606] do_recvmmsg+0x290/0x720 [ 72.827779][ T5606] __x64_sys_recvmmsg+0xe2/0x170 [ 72.832723][ T5606] x64_sys_call+0x26e3/0x2d60 [ 72.837407][ T5606] do_syscall_64+0xc9/0x1c0 [ 72.841925][ T5606] ? clear_bhb_loop+0x55/0xb0 [ 72.846609][ T5606] ? clear_bhb_loop+0x55/0xb0 [ 72.851398][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.857295][ T5606] RIP: 0033:0x7fee462779f9 [ 72.861801][ T5606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.881503][ T5606] RSP: 002b:00007fee44ef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.889928][ T5606] RAX: ffffffffffffffda RBX: 00007fee46405f80 RCX: 00007fee462779f9 [ 72.897891][ T5606] RDX: 0000000000001800 RSI: 0000000020001dc0 RDI: 0000000000000005 [ 72.906042][ T5606] RBP: 00007fee44ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.914116][ T5606] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000001 [ 72.922180][ T5606] R13: 0000000000000000 R14: 00007fee46405f80 R15: 00007ffca5a35548 [ 72.930157][ T5606] [ 73.062254][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 73.062272][ T29] audit: type=1400 audit(1723090619.635:620): avc: denied { ioctl } for pid=5610 comm="syz.4.483" path="socket:[14660]" dev="sockfs" ino=14660 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.230690][ T29] audit: type=1400 audit(1723090619.805:621): avc: denied { ioctl } for pid=5629 comm="syz.3.484" path="socket:[14235]" dev="sockfs" ino=14235 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.532231][ T5649] x_tables: duplicate underflow at hook 1 [ 73.590353][ T29] audit: type=1400 audit(1723090620.165:622): avc: denied { nlmsg_read } for pid=5659 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 73.627224][ T29] audit: type=1400 audit(1723090620.185:623): avc: denied { accept } for pid=5659 comm="syz.1.497" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.685466][ T5676] loop1: detected capacity change from 0 to 1024 [ 73.696444][ T5676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.704380][ T5676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.711148][ T29] audit: type=1400 audit(1723090620.285:624): avc: denied { create } for pid=5684 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 73.724945][ T5676] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0002] [ 73.742520][ T5676] System zones: 0-1, 3-36 [ 73.747858][ T5676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.764592][ T5690] loop0: detected capacity change from 0 to 764 [ 73.764890][ T5689] loop2: detected capacity change from 0 to 512 [ 73.786387][ T5689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.799242][ T5689] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.801155][ T4347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.097994][ T29] audit: type=1400 audit(1723090620.675:625): avc: denied { mounton } for pid=5702 comm="syz.4.509" path="/proc/125/net/rpc" dev="proc" ino=4026532869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 74.359686][ T5710] loop4: detected capacity change from 0 to 256 [ 74.457247][ T5711] loop3: detected capacity change from 0 to 512 [ 74.499479][ T5711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.513366][ T5711] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.536058][ T5711] __nla_validate_parse: 6 callbacks suppressed [ 74.536074][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 74.594828][ T29] audit: type=1400 audit(1723090621.165:626): avc: denied { write } for pid=5709 comm="syz.3.512" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 74.657885][ T4228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.686402][ T4160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.748887][ T5733] netlink: 'syz.1.520': attribute type 9 has an invalid length. [ 74.750379][ T29] audit: type=1400 audit(1723090621.325:627): avc: denied { map } for pid=5730 comm="syz.0.519" path="socket:[14804]" dev="sockfs" ino=14804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.756614][ T5733] netlink: 'syz.1.520': attribute type 6 has an invalid length. [ 74.780371][ T29] audit: type=1400 audit(1723090621.325:628): avc: denied { accept } for pid=5730 comm="syz.0.519" path="socket:[14804]" dev="sockfs" ino=14804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.797259][ T5735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.521'. [ 78.699651][ T5740] FAULT_INJECTION: forcing a failure. [ 78.699651][ T5740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.710378][ T5745] loop4: detected capacity change from 0 to 512 [ 78.712775][ T5740] CPU: 1 UID: 0 PID: 5740 Comm: syz.1.523 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 78.719112][ T5744] loop3: detected capacity change from 0 to 764 [ 78.729533][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 78.729551][ T5740] Call Trace: [ 78.729560][ T5740] [ 78.729569][ T5740] dump_stack_lvl+0xf2/0x150 [ 78.729629][ T5740] dump_stack+0x15/0x20 [ 78.761236][ T5740] should_fail_ex+0x229/0x230 [ 78.765955][ T5740] should_fail+0xb/0x10 [ 78.770205][ T5740] should_fail_usercopy+0x1a/0x20 [ 78.775291][ T5740] _copy_from_user+0x1e/0xd0 [ 78.775326][ T5740] copy_msghdr_from_user+0x54/0x2a0 [ 78.775477][ T5740] __sys_sendmsg+0x17d/0x280 [ 78.775513][ T5740] __x64_sys_sendmsg+0x46/0x50 [ 78.775540][ T5740] x64_sys_call+0x2689/0x2d60 [ 78.775568][ T5740] do_syscall_64+0xc9/0x1c0 [ 78.775617][ T5740] ? clear_bhb_loop+0x55/0xb0 [ 78.775646][ T5740] ? clear_bhb_loop+0x55/0xb0 [ 78.775746][ T5740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.775773][ T5740] RIP: 0033:0x7f69bda479f9 [ 78.775802][ T5740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.775917][ T5740] RSP: 002b:00007f69bc6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.775937][ T5740] RAX: ffffffffffffffda RBX: 00007f69bdbd5f80 RCX: 00007f69bda479f9 [ 78.775951][ T5740] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000000000003 [ 78.775964][ T5740] RBP: 00007f69bc6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.775976][ T5740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.775989][ T5740] R13: 0000000000000000 R14: 00007f69bdbd5f80 R15: 00007ffdfe2a26f8 [ 78.776006][ T5740] [ 78.844862][ T5745] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 78.943551][ T5745] loop4: detected capacity change from 0 to 512 [ 78.950767][ T5745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.957447][ T5760] netlink: 56 bytes leftover after parsing attributes in process `syz.1.532'. [ 78.976210][ T5745] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.992670][ T5745] EXT4-fs (loop4): 1 truncate cleaned up [ 78.999171][ T5745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.016012][ T5768] IPVS: Error joining to the multicast group [ 79.023733][ T5770] loop2: detected capacity change from 0 to 512 [ 79.033983][ T5770] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.535: corrupted in-inode xattr: invalid ea_ino [ 79.053115][ T5770] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.535: couldn't read orphan inode 15 (err -117) [ 79.068575][ T5770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.091655][ T5775] loop1: detected capacity change from 0 to 512 [ 79.106309][ T5775] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.537: casefold flag without casefold feature [ 79.131313][ T5775] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.537: couldn't read orphan inode 15 (err -117) [ 79.132651][ T4399] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.154000][ T5775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.173693][ T29] audit: type=1400 audit(1723090625.748:629): avc: denied { create } for pid=5774 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 79.197548][ T29] audit: type=1400 audit(1723090625.778:630): avc: denied { setopt } for pid=5769 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.217053][ T29] audit: type=1400 audit(1723090625.778:631): avc: denied { connect } for pid=5769 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.221460][ T5789] loop0: detected capacity change from 0 to 128 [ 79.236550][ T29] audit: type=1400 audit(1723090625.778:632): avc: denied { write } for pid=5769 comm="syz.2.535" path="socket:[14931]" dev="sockfs" ino=14931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.239027][ T29] audit: type=1400 audit(1723090625.778:633): avc: denied { setopt } for pid=5784 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.247176][ T5789] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.298747][ T5789] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.337248][ T5789] FAULT_INJECTION: forcing a failure. [ 79.337248][ T5789] name failslab, interval 1, probability 0, space 0, times 0 [ 79.337810][ T29] audit: type=1400 audit(1723090625.908:634): avc: denied { create } for pid=5788 comm="syz.0.542" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.349940][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz.0.542 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 79.370845][ T29] audit: type=1400 audit(1723090625.908:635): avc: denied { read append open } for pid=5788 comm="syz.0.542" path="/67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.381329][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 79.381346][ T5789] Call Trace: [ 79.381355][ T5789] [ 79.381364][ T5789] dump_stack_lvl+0xf2/0x150 [ 79.381418][ T5789] dump_stack+0x15/0x20 [ 79.381452][ T5789] should_fail_ex+0x229/0x230 [ 79.427127][ T29] audit: type=1400 audit(1723090625.908:636): avc: denied { write } for pid=5788 comm="syz.0.542" name="memory.events" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.437120][ T5789] ? ext4_init_io_end+0x31/0xb0 [ 79.437155][ T5789] should_failslab+0x8f/0xb0 [ 79.440434][ T29] audit: type=1400 audit(1723090625.908:637): avc: denied { ioctl } for pid=5788 comm="syz.0.542" path="/67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop0" ino=12 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.443347][ T5789] kmem_cache_alloc_noprof+0x4c/0x290 [ 79.443382][ T5789] ext4_init_io_end+0x31/0xb0 [ 79.544707][ T5789] ext4_do_writepages+0x78c/0x2110 [ 79.549889][ T5789] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 79.555779][ T5789] ? kick_pool+0x268/0x2c0 [ 79.560282][ T5789] ? __rcu_read_unlock+0x4e/0x70 [ 79.565326][ T5789] ? __queue_delayed_work+0x105/0x1a0 [ 79.570835][ T5789] ? xas_load+0x3ae/0x3d0 [ 79.575189][ T5789] ? xas_load+0x3ae/0x3d0 [ 79.579573][ T5789] ? __rcu_read_unlock+0x4e/0x70 [ 79.584523][ T5789] ? xa_load+0xb9/0xe0 [ 79.588627][ T5789] ? folio_mark_accessed+0x11b/0x360 [ 79.593931][ T5789] ? __crc32c_le_base+0x4e6/0x520 [ 79.598997][ T5789] ext4_writepages+0x159/0x2e0 [ 79.603862][ T5789] ? __pfx_ext4_writepages+0x10/0x10 [ 79.609170][ T5789] do_writepages+0x1d8/0x480 [ 79.613804][ T5789] ? __ext4_handle_dirty_metadata+0x1fa/0x470 [ 79.619928][ T5789] ? _raw_spin_unlock+0x26/0x50 [ 79.624811][ T5789] filemap_fdatawrite_wbc+0xdb/0x100 [ 79.630172][ T5789] file_write_and_wait_range+0xc8/0x170 [ 79.635742][ T5789] generic_buffers_fsync_noflush+0x4c/0x130 [ 79.641647][ T5789] ext4_sync_file+0x20b/0x6c0 [ 79.646504][ T5789] ? __pfx_ext4_sync_file+0x10/0x10 [ 79.651792][ T5789] vfs_fsync_range+0x122/0x140 [ 79.656600][ T5789] ? up_write+0x30/0xf0 [ 79.660767][ T5789] ext4_buffered_write_iter+0x338/0x380 [ 79.666391][ T5789] ext4_file_write_iter+0x29f/0xe30 [ 79.671621][ T5789] ? kstrtouint+0x77/0xc0 [ 79.675961][ T5789] ? kstrtouint_from_user+0xb0/0xe0 [ 79.681273][ T5789] ? avc_policy_seqno+0x15/0x20 [ 79.686143][ T5789] ? selinux_file_permission+0x22c/0x360 [ 79.691793][ T5789] vfs_write+0x78f/0x900 [ 79.696072][ T5789] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 79.701812][ T5789] ksys_write+0xeb/0x1b0 [ 79.706132][ T5789] __x64_sys_write+0x42/0x50 [ 79.710794][ T5789] x64_sys_call+0x27dd/0x2d60 [ 79.715506][ T5789] do_syscall_64+0xc9/0x1c0 [ 79.720053][ T5789] ? clear_bhb_loop+0x55/0xb0 [ 79.724845][ T5789] ? clear_bhb_loop+0x55/0xb0 [ 79.730170][ T5789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.736145][ T5789] RIP: 0033:0x7f53513579f9 [ 79.740560][ T5789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.760205][ T5789] RSP: 002b:00007f534ffd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.768629][ T5789] RAX: ffffffffffffffda RBX: 00007f53514e5f80 RCX: 00007f53513579f9 [ 79.776615][ T5789] RDX: 000000000000010b RSI: 00000000200006c0 RDI: 0000000000000004 [ 79.784597][ T5789] RBP: 00007f534ffd7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.792653][ T5789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.800625][ T5789] R13: 0000000000000000 R14: 00007f53514e5f80 R15: 00007fff9f389428 [ 79.808662][ T5789] [ 79.836882][ T5798] netlink: 56 bytes leftover after parsing attributes in process `syz.3.544'. [ 79.925190][ T4347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.959957][ T4696] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.974257][ T5803] : renamed from ipvlan1 [ 80.009062][ T5807] loop3: detected capacity change from 0 to 512 [ 80.017736][ T5807] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.549: casefold flag without casefold feature [ 80.032373][ T5807] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.549: couldn't read orphan inode 15 (err -117) [ 80.047492][ T5807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.094466][ T29] audit: type=1400 audit(1723090626.668:638): avc: denied { ioctl } for pid=5806 comm="syz.3.549" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.138136][ T4160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.876494][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 80.890934][ T5814] loop0: detected capacity change from 0 to 512 [ 80.898747][ T4228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.905540][ T5814] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.548: bg 0: block 393: padding at end of block bitmap is not set [ 80.931507][ T5814] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 80.942005][ T5814] EXT4-fs (loop0): 2 truncates cleaned up [ 80.956099][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.986016][ T5824] netlink: 56 bytes leftover after parsing attributes in process `syz.4.555'. [ 81.005781][ T5828] loop1: detected capacity change from 0 to 512 [ 81.017014][ T5830] loop4: detected capacity change from 0 to 764 [ 81.027480][ T5828] EXT4-fs (loop1): 1 truncate cleaned up [ 81.041936][ T5828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.070410][ T5828] bridge0: port 3(syz_tun) entered blocking state [ 81.077100][ T5828] bridge0: port 3(syz_tun) entered disabled state [ 81.122407][ T5828] syz_tun: entered allmulticast mode [ 81.154339][ T5828] syz_tun: entered promiscuous mode [ 81.154550][ T5828] bridge0: port 3(syz_tun) entered blocking state [ 81.154598][ T5828] bridge0: port 3(syz_tun) entered forwarding state [ 81.179669][ T5828] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.554: Directory hole found for htree leaf block 0 [ 81.209353][ T5845] ================================================================== [ 81.217463][ T5845] BUG: KCSAN: data-race in print_cpu / tick_nohz_stop_idle [ 81.224772][ T5845] [ 81.227092][ T5845] read-write to 0xffff888237d20540 of 8 bytes by interrupt on cpu 1: [ 81.235155][ T5845] tick_nohz_stop_idle+0xaa/0x110 [ 81.240185][ T5845] tick_irq_enter+0xa2/0x150 [ 81.244792][ T5845] sysvec_apic_timer_interrupt+0x66/0x80 [ 81.250463][ T5845] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.256478][ T5845] acpi_safe_halt+0x21/0x30 [ 81.261032][ T5845] acpi_idle_do_entry+0x1d/0x30 [ 81.265907][ T5845] acpi_idle_enter+0x96/0xb0 [ 81.270516][ T5845] cpuidle_enter_state+0xcf/0x270 [ 81.275561][ T5845] cpuidle_enter+0x40/0x70 [ 81.279998][ T5845] do_idle+0x195/0x230 [ 81.284080][ T5845] cpu_startup_entry+0x25/0x30 [ 81.288854][ T5845] start_secondary+0x94/0xa0 [ 81.293454][ T5845] common_startup_64+0x12c/0x137 [ 81.298415][ T5845] [ 81.300739][ T5845] read to 0xffff888237d20540 of 8 bytes by task 5845 on cpu 0: [ 81.308288][ T5845] print_cpu+0x562/0x670 [ 81.312549][ T5845] timer_list_show+0x115/0x180 [ 81.317327][ T5845] seq_read_iter+0x65b/0x940 [ 81.322534][ T5845] proc_reg_read_iter+0x11e/0x190 [ 81.327576][ T5845] copy_splice_read+0x3a4/0x5d0 [ 81.332439][ T5845] splice_direct_to_actor+0x26c/0x670 [ 81.337826][ T5845] do_splice_direct+0xd7/0x150 [ 81.342684][ T5845] do_sendfile+0x3ab/0x950 [ 81.347109][ T5845] __x64_sys_sendfile64+0x110/0x150 [ 81.352319][ T5845] x64_sys_call+0xed5/0x2d60 [ 81.356920][ T5845] do_syscall_64+0xc9/0x1c0 [ 81.361438][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.367349][ T5845] [ 81.369672][ T5845] value changed: 0x000000066c671cd3 -> 0x000000066c680fa6 [ 81.376777][ T5845] [ 81.379099][ T5845] Reported by Kernel Concurrency Sanitizer on: [ 81.385331][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz.2.560 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 81.395934][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 81.406079][ T5845] ================================================================== [ 81.480514][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 81.645881][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 81.654754][ T5845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 81.808824][ T4696] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.853109][ T4347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.