last executing test programs: 3.708333728s ago: executing program 0 (id=1460): fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x881) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0xd, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000023fad7f09010400000000001a000000000000092412aa25400956acd125b7151b0437926617c8816361254f30714fa1e351094758227feb68fc777c95d7837758b9b1e36d37fc005f54147296d40ac0fdfac0ce4cfe26fd10e6adea766f314d661562a7fa25358f20628d04da96c013d0"], 0x38}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f0000001540)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {&(0x7f0000000000)="d1", 0x1}], 0x2}}], 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0xff34, 0x5}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 3.634929964s ago: executing program 0 (id=1461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r0}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20) close(r0) semop(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000007500)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0xfffffffd}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a00010010c4e3257eaa66a5725a38cd58d26115453baa910be00000140000001000010000000000000000000000000ac1d60cf3212b5c9f6437bd5488f1830fdb7f2dc7"], 0xd4}}, 0x0) 3.548714672s ago: executing program 0 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (fail_nth: 12) 3.207879269s ago: executing program 0 (id=1463): add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00', 0x2, 0xfffffffffffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000001580)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYBLOB="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"], 0x41, 0x304, &(0x7f0000001880)="$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") socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x8002, @TCA_SFB_PARMS={0x28, 0x2, {0x0, 0x4, 0xffffbffd, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c884}, 0x4048800) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000340)=0xffffffd9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}], 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000280)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$NFT_BATCH(r4, 0x0, 0x0) iopl(0x3) fcntl$dupfd(r1, 0x0, r2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0xb20}, 0x48) 3.042269953s ago: executing program 0 (id=1467): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@sysvgroups}, {@debug}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x2d}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@max_dir_size_kb}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0x6, 0x64a, &(0x7f00000013c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x64}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e02f00712002c051e0089e9aaa911d7c2290f0043051327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x4, 0x0, 0x6, @multicast}, 0x14) 2.320228421s ago: executing program 0 (id=1476): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440), 0x4, 0x4eb, &(0x7f0000000540)="$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") setxattr$security_ima(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='mqueue\x00', 0x0, 0x0) chdir(&(0x7f0000000600)='./file0\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x20000000003}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.288741044s ago: executing program 3 (id=1478): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x60) 2.129145827s ago: executing program 1 (id=1480): fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x881) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0xd, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000023fad7f09010400000000001a000000000000092412aa25400956acd125b7151b0437926617c8816361254f30714fa1e351094758227feb68fc777c95d7837758b9b1e36d37fc005f54147296d40ac0fdfac0ce4cfe26fd10e6adea766f314d661562a7fa25358f20628d04da96c013d0"], 0x38}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f0000001540)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {&(0x7f0000000000)="d1", 0x1}], 0x2}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 2.011672857s ago: executing program 3 (id=1481): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x4, @mcast2}, @ib={0x1b, 0x0, 0x0, {"007008000074ff00"}, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xf5, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f0000001540), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc051, &(0x7f0000000040), 0x1, 0x4d7, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x7000, 0xffffffff, 0x30, 0x1}, 0x48) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2e, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) 2.011389627s ago: executing program 1 (id=1482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e250000000f"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = socket(0x28, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000380), &(0x7f0000000280)=@udp=r3}, 0x20) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d00000000000000ff07000000000000c9fb90d3abc52620e66db24b7c4f64fd9120d01eaf7503e1c7cfe204909190cf53b6c107bdd3bbcb1b23721d91ea46be5b513aafd253d4342e", 0x6c, r4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000190001fe000001000000000c000900c400208100000000000000000000000000bee22332317a8f9a4997362f9c73a02a03e606e32715a884ec7f3e6f7481eb0cee074e945debeb9a8c2ed03bb86b29caa3217852747c04a972f02c9e420611ee8d2ed83b4f74a20ce8ade21991ce606c202ff3a723810c31c70bfbed650474dc332e232deb5ff07559be0bf7b846ad548668b6c5e7c430c793b62cf70038c243b485e4c2b9cd960fed3c58edeed87210dfc70d3797bd90b7afad498771ebe999e7432bc6e1d332168e1a", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 1.949582772s ago: executing program 1 (id=1483): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000080)=0x9, 0x4) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 1.949333061s ago: executing program 1 (id=1484): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x560e, &(0x7f0000003d40)=""/175) 1.159480126s ago: executing program 3 (id=1493): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount(&(0x7f0000000400)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='ext3\x00', 0x0, 0x0) getpid() r0 = memfd_secret(0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) listen(r0, 0x9) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) socket$inet6(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002880)={&(0x7f0000002840)='kfree_skb\x00', r6}, 0x10) 1.069491673s ago: executing program 1 (id=1494): ioprio_set$pid(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0xe, 0x0, @thr={&(0x7f0000000340)="8522f98112418cff7a", &(0x7f0000000380)="317536a9310fbb7431374b7e7eacd3a3d5dc8162cef12aa20abbf5b1c52e9e37b92608168b90b2cdb7e09abc9527bbe38b8f5a27ab8ad8bcc0847ed89bdc4278694f5999184f834129c51b57139268ea4e8cd3e093f451ba163fb43699b7ca2566dfc817b68fea41fcde"}}, &(0x7f0000000440)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x8e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaa0ef19480727d5bb58495e6aa54179a02930dcb1439b3978918fdaa4caaffffffffffff86dd6000000000580600fe8000000000000000000000000000aafe8000007c5c945d88a5b30ab6f1c4c6ea174a0d9e97153fef03ad97b6e2eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780000dc11075865604428d0e38e031e5030035cfe10f989cabf0ca63a1b54e01410724304020402080afffffffb0000000803127f140b4763f3aede80b75ed7ed53758a00"], 0x0) syz_emit_ethernet(0x4b, &(0x7f00000017c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a3ff200150600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50050031907800007e"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 978.287071ms ago: executing program 4 (id=1497): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket(0x2b, 0x0, 0xffff2dc9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_writepages_result\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}]}, 0x6c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 890.820118ms ago: executing program 3 (id=1498): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000540)={[{@data_err_abort}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@dioread_nolock}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xe}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r0, 0x1, 0x8}, 0x8) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x951880, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b3326736181c20822012fb00b9000000060000000000f0ff0c0000f3ff00"}) setxattr$security_capability(&(0x7f00000002c0)='.\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) 890.471178ms ago: executing program 2 (id=1499): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa8, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @remote, @private1, [@dstopts={0x2c, 0xd, '\x00', [@generic={0x0, 0x32, "d7897ecdf7133b3e03ab65762dcf02a95b38f5f35b434e6b81725b3d3973928969b768c9410e28bdcd980653a292d702b12e"}, @generic={0x0, 0x1b, "eb4422a287b5b723e69524086158beaf54180a3224d73d99edb3f5"}, @jumbo, @hao={0xc9, 0x10, @mcast1}, @jumbo]}]}}}}}}}, 0x0) 890.174498ms ago: executing program 4 (id=1500): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x60) 842.817302ms ago: executing program 2 (id=1501): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRES8=r0], 0x0, 0x56, 0x0, 0x100000a, 0x6}, 0x20) 842.525192ms ago: executing program 4 (id=1502): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, r2, 0x105, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}}, 0x0) (fail_nth: 3) 792.631216ms ago: executing program 4 (id=1503): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x4, @mcast2}, @ib={0x1b, 0x0, 0x0, {"007008000074ff00"}, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xf5, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f0000001540), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc051, &(0x7f0000000040), 0x1, 0x4d7, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x7000, 0xffffffff, 0x30, 0x1}, 0x48) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2e, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) 785.150377ms ago: executing program 2 (id=1504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 763.582018ms ago: executing program 2 (id=1505): r0 = inotify_init1(0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) ptrace(0x4208, r2) (async, rerun: 32) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000ae4400400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000000000000000000000000000000000001c00000000000000000400"/120], 0x78) (async) close(r1) (async) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x4000801) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="85000000c909a634f6d5a0000000040040000900"/30], &(0x7f0000000400)='GPL\x00', 0x10000002, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x7fff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000800000000000000325402008500000000100000186900000a00000009100000f8ffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x28, &(0x7f0000000500)=""/40, 0x41100, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x4, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000bc0)=[0xffffffffffffffff], &(0x7f0000000c00)=[{0x1, 0x2, 0x3, 0x7}, {0x1, 0x1, 0xa, 0x7}], 0x10, 0xfffffffc}, 0x90) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/time\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000080014001280090001007665746800000000040002800a000100aaaaaaaaaa0000000800040000000000"], 0x48}}, 0x0) (async) close(r8) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000001280)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000e00)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf250f0000006800018008000100", @ANYRESOCT=r5, @ANYBLOB="1400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007866726d30000000000000000000000008000300010000001400020070696d7265673100000000000000000008000100", @ANYBLOB="f7a7ea99828a6c178157d6ca009caa711fc7ab6f3f9193cc1c", @ANYBLOB="08000300020000000c000180080003000100000004000180780c0180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d3672656700000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006e6963766630000000000000000000001400020076657468315f746f5f6261746164760008000300000000003400018014000200776c616e30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="140002007663616e3000"/20], 0x138}, 0x1, 0x0, 0x0, 0x24048041}, 0x4000000) r10 = openat$cgroup_ro(r1, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) recvfrom$x25(r10, &(0x7f0000000200)=""/166, 0xa6, 0x40, &(0x7f0000000140), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000001cb20e01c5fbf3c6ec43fea31af84f08953ce2dc5d214d3814269df8cbbd1d5b3815df3bd7939742961566602de2a1e671cf25d7d855525457cb14103e034d2339d5a0c4569965b2c549efea26d2600fc4ddd3020628a48ba4117904597aa398a4a0f2955f582cf8f66f5ebedae6053f8675fc174a413a58454c850adcffec82d5abaec9f5ef449089e9bf6ebca6432ea0b1df921524c254309827840e65c527ccbb02ed6000f9891c790b", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf25090000002c000180060001000a000000060005004e1f00000500020003000000050002009e00000008000300e000000108000300020000000800030008000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 763.090939ms ago: executing program 4 (id=1506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{}, "5a640e0011105655", "698bc8443f1088353ae2443d5562416a", "4c0800ed", "95c7fe525d3a48a7"}, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 617.54978ms ago: executing program 3 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r0}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20) close(r0) semop(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000007500)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0xfffffffd}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000005080)={&(0x7f0000002bc0)=@l2tp6={0xa, 0x0, 0x353, @private0}, 0x80, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a00010010c4e3257eaa66a5725a38cd58d26115453baa910be00000140000001000010000000000000000000000000ac1d60cf3212b5c9f6437bd5488f1830fdb7f2dc7"], 0xd4}}, 0x0) 617.21936ms ago: executing program 4 (id=1508): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x3, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000001c0)=""/199, 0xc7, 0x4, &(0x7f00000000c0)) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xb, 0x7f, 0x9, 0x7, 0x0, 0x1, 0x40000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f00000002c0), 0xa}, 0x810, 0x5, 0x9, 0x2, 0x100, 0x4, 0x5, 0x0, 0x1ff, 0x0, 0x7}, 0x0, 0x1, r0, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) r5 = dup(r3) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) 616.7681ms ago: executing program 2 (id=1509): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\xba\xa4\x16\x04\xf9An)3\xeb9\x10A\xde\xab\xc6K\x98\xc7\x87\xd6\xde\x959\xa0N\xe3\x01\xaf:\xe1\x9e\xa8\xbb\xcc\xeds\xd5\x9a\xccq\xe0\x9bN\x16\x00]\xf3\xac\r\xb0\x89\x8dQ\xd3\xb2\xfd\xf0#\xdaM\xd9\xf3\x8e\xce?A\x96T\xb8e\"\x17\x86o\xaf\vv\xf9V b0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r7, @ANYBLOB="00000000000000000800cfffecc5"], 0x94}}, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080), &(0x7f0000000200)={'U-'}, 0x16, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x8f8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r10, 0x400, 0x0) 59.369876ms ago: executing program 1 (id=1511): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket(0x2b, 0x0, 0xffff2dc9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_writepages_result\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}]}, 0x6c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 0s ago: executing program 3 (id=1512): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140), 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x20, 0x7880, 0xc, 0x40, {{0x20, 0x4, 0x0, 0x6, 0x80, 0x64, 0x0, 0x3d, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0x13, 0x4d, [@rand_addr=0x64010100, @rand_addr=0x64010102, @private=0xa010101, @broadcast]}, @end, @timestamp_addr={0x44, 0x24, 0x90, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@broadcast, 0x9}, {@broadcast, 0x2}, {@broadcast, 0x9}]}, @noop, @cipso={0x86, 0x1b, 0x0, [{0x6, 0xd, "ed177a2b4041058294bffb"}, {0x2, 0x8, "cd08be63aa3c"}]}, @lsrr={0x83, 0x17, 0xc8, [@broadcast, @rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010102, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0xac, 0xfe, 0x40, 0x6c, @local, @empty, 0x7800, 0x40, 0x1000, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0xe, 0xc, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x67, 0x0, 0x14, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp={0x44, 0x14, 0x81, 0x0, 0x1, [0x2fa115e1, 0x5, 0x2, 0x7]}, @end, @timestamp_prespec={0x44, 0x4c, 0xeb, 0x3, 0x7, [{@private=0xa010101, 0x9}, {@private=0xa010102, 0xc}, {@remote, 0xdd}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x8001}, {@private=0xa010102, 0x82}, {@multicast2, 0x4}, {@loopback, 0x8}, {@loopback, 0x75}, {@private=0xa010100, 0xf35}]}, @generic={0x86, 0xc, "b0b7e15de8f69d197e7a"}, @generic={0x88, 0x4, 'tt'}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x2, 0xffff, 0x40, @private0, @mcast1, 0x80, 0x20, 0x3, 0x7fff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000006c0)={@initdev, @initdev, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x401, 0x60, @private2, @mcast2, 0x8, 0x8, 0x1a81, 0x80000}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x4, 0x8, {{0x13, 0x4, 0x2, 0x8, 0x4c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x11, "c3d24ab6b1266df45b6b76b0c42fe9"}, @rr={0x7, 0x7, 0x7, [@empty]}, @ssrr={0x89, 0xb, 0xcf, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @lsrr={0x83, 0xf, 0xb, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x41}, @empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'pimreg0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80100004800c000280080001"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1ac, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r11}, 0x38) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) r13 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r13, 0x29, 0x48, &(0x7f0000000100), 0x120) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r12}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r12, &(0x7f0000000140)="174661b2c3f23bcb1767a2eb3a4e444a6a3ccf52ff0dc3548b98621139b302d080773aaa0177ba3b5c678fb226d76b6c44c82190378cab450385425599675f0fc0e1f3d0e0ef9166c5bed7", &(0x7f00000000c0)=""/110}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ice loop1): dx_probe:822: inode #2: comm syz.1.1055: Directory hole found for htree index block [ 95.350009][ T7338] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1055: Directory hole found for htree index block [ 95.363327][ T7338] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1055: Directory hole found for htree index block [ 95.487962][ T7343] loop2: detected capacity change from 0 to 512 [ 95.499725][ T7343] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1058: attempt to clear invalid blocks 1 len 1 [ 95.506341][ T7348] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7348 comm=syz.4.1057 [ 95.520230][ T7343] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1058: bg 0: block 343: padding at end of block bitmap is not set [ 95.541060][ T7343] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 95.550361][ T7343] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1058: invalid indirect mapped block 1819239214 (level 0) [ 95.567073][ T7343] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1058: invalid indirect mapped block 1819239214 (level 1) [ 95.581956][ T7345] usb usb8: usbfs: process 7345 (syz.1.1059) did not claim interface 1 before use [ 95.593359][ T7343] EXT4-fs (loop2): 1 truncate cleaned up [ 95.615663][ T7343] tipc: Enabling of bearer rejected, failed to enable media [ 95.624880][ T7343] futex_wake_op: syz.2.1058 tries to shift op by 144; fix this program [ 95.655861][ T7360] vhci_hcd: invalid port number 203 [ 95.661185][ T7360] vhci_hcd: default hub control req: 2017 v0000 i00cb l0 [ 95.695206][ T7360] loop1: detected capacity change from 0 to 1024 [ 95.854882][ T29] audit: type=1400 audit(1720843301.485:704): avc: denied { write } for pid=7392 comm="syz.1.1077" path="socket:[17304]" dev="sockfs" ino=17304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.904050][ T7393] usb usb8: usbfs: process 7393 (syz.0.1070) did not claim interface 1 before use [ 95.928390][ T7400] loop2: detected capacity change from 0 to 2048 [ 95.986019][ T7400] loop2: p1 < > p4 [ 95.990755][ T7400] loop2: p4 size 8388608 extends beyond EOD, truncated [ 96.047506][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 96.050735][ T7422] loop2: detected capacity change from 0 to 512 [ 96.066968][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 96.099587][ T7422] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 96.108269][ T7422] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 96.120662][ T29] audit: type=1400 audit(1720843301.755:705): avc: denied { mount } for pid=7423 comm="syz.1.1084" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 96.144555][ T7422] EXT4-fs (loop2): 1 truncate cleaned up [ 96.217903][ T29] audit: type=1400 audit(1720843301.855:706): avc: denied { unmount } for pid=3555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 96.352509][ T7458] sctp: [Deprecated]: syz.3.1094 (pid 7458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.352509][ T7458] Use struct sctp_sack_info instead [ 96.395858][ T7459] SELinux: security_context_str_to_sid () failed with errno=-22 [ 96.403583][ T29] audit: type=1400 audit(1720843302.035:707): avc: denied { remount } for pid=7446 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 96.413533][ T7461] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.462483][ T7459] loop2: detected capacity change from 0 to 8192 [ 96.496226][ T7459] loop2: p1 p2 p4 [ 96.500467][ T7459] loop2: p1 size 108922248 extends beyond EOD, truncated [ 96.508556][ T7459] loop2: p2 start 861536256 is beyond EOD, truncated [ 96.515598][ T7459] loop2: p4 start 4194304 is beyond EOD, truncated [ 96.630180][ T7483] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.964047][ T7537] loop1: detected capacity change from 0 to 512 [ 97.026532][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.063221][ T29] audit: type=1400 audit(1720843302.695:708): avc: denied { setattr } for pid=7539 comm="syz.4.1111" name="ns" dev="proc" ino=18483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.096713][ T7541] usb usb8: usbfs: process 7541 (syz.0.1108) did not claim interface 1 before use [ 97.164067][ T7549] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.298252][ T7571] loop3: detected capacity change from 0 to 128 [ 97.305109][ T7571] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 97.396204][ T7582] loop3: detected capacity change from 0 to 512 [ 97.404630][ T7582] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.426949][ T7583] loop2: detected capacity change from 0 to 1024 [ 97.440856][ T7588] loop1: detected capacity change from 0 to 1024 [ 97.446841][ T7583] EXT4-fs: Ignoring removed orlov option [ 97.452954][ T7583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.461434][ T7588] EXT4-fs: Ignoring removed orlov option [ 97.467240][ T7588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.467365][ T7582] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.677800][ T29] audit: type=1400 audit(1720843303.305:709): avc: denied { lock } for pid=7619 comm="syz.1.1125" path="socket:[17927]" dev="sockfs" ino=17927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 97.801937][ T7624] loop1: detected capacity change from 0 to 2048 [ 97.839915][ T7624] EXT4-fs mount: 57 callbacks suppressed [ 97.839985][ T7624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.906176][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.940856][ T7630] usb usb8: usbfs: process 7630 (syz.3.1126) did not claim interface 1 before use [ 98.145687][ T7642] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.500994][ T7670] __nla_validate_parse: 24 callbacks suppressed [ 98.501103][ T7670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1138'. [ 98.619282][ T7686] loop0: detected capacity change from 0 to 4096 [ 98.627867][ T7686] EXT4-fs: Ignoring removed nobh option [ 98.662452][ T7686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.715029][ T7686] netlink: 'syz.0.1140': attribute type 7 has an invalid length. [ 98.865004][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.909432][ T7702] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1146'. [ 99.003244][ T7708] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 99.097230][ T7710] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.339888][ T7733] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1152'. [ 99.394103][ T7738] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1153'. [ 99.429029][ T7731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1151'. [ 99.455445][ C1] sched: RT throttling activated [ 99.475702][ T7742] loop3: detected capacity change from 0 to 256 [ 99.565173][ T7752] loop1: detected capacity change from 0 to 128 [ 99.583450][ T7752] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 99.809650][ T7767] 9pnet_fd: Insufficient options for proto=fd [ 99.928229][ T7775] program syz.4.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.024354][ T7770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1165'. [ 100.290490][ T7798] loop3: detected capacity change from 0 to 2048 [ 100.346787][ T7798] loop3: p1 < > p4 [ 100.356300][ T7798] loop3: p4 size 8388608 extends beyond EOD, truncated [ 100.426124][ T5295] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 100.452988][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 100.458170][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 100.494400][ T7806] loop3: detected capacity change from 0 to 512 [ 100.502979][ T7806] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1175: attempt to clear invalid blocks 1 len 1 [ 100.517638][ T7806] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1175: bg 0: block 343: padding at end of block bitmap is not set [ 100.532292][ T7806] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 100.542532][ T7806] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1175: invalid indirect mapped block 1819239214 (level 0) [ 100.558702][ T7806] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1175: invalid indirect mapped block 1819239214 (level 1) [ 100.573128][ T7806] EXT4-fs (loop3): 1 truncate cleaned up [ 100.580485][ T7806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.608461][ T7806] tipc: Enabling of bearer rejected, failed to enable media [ 100.631703][ T7806] futex_wake_op: syz.3.1175 tries to shift op by 144; fix this program [ 100.682511][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.891910][ T7829] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1180'. [ 100.920591][ T7827] usb usb8: usbfs: process 7827 (syz.3.1177) did not claim interface 1 before use [ 101.054853][ T29] audit: type=1400 audit(1720843306.685:710): avc: denied { read write } for pid=7842 comm="syz.1.1184" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.093575][ T7844] loop1: detected capacity change from 0 to 512 [ 101.125851][ T7844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 101.168127][ T7844] System zones: 1-12 [ 101.179370][ T29] audit: type=1400 audit(1720843306.725:711): avc: denied { open } for pid=7842 comm="syz.1.1184" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.217537][ T7844] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.230660][ T7841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1183'. [ 101.249021][ T7844] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1184: invalid indirect mapped block 1819239214 (level 1) [ 101.291223][ T7844] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1184: bg 0: block 361: padding at end of block bitmap is not set [ 101.337071][ T7853] loop0: detected capacity change from 0 to 4096 [ 101.339694][ T7844] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 101.344117][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.353891][ T7844] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1184: attempt to clear invalid blocks 33619980 len 1 [ 101.371644][ T7853] EXT4-fs: Ignoring removed nobh option [ 101.381479][ T7844] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1184: invalid indirect mapped block 1819239214 (level 0) [ 101.383018][ T7858] vhci_hcd: invalid port number 203 [ 101.400727][ T7858] vhci_hcd: default hub control req: 2017 v0000 i00cb l0 [ 101.402592][ T7844] EXT4-fs (loop1): 1 truncate cleaned up [ 101.414324][ T7844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.432785][ T7844] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1184: Directory hole found for htree index block [ 101.447225][ T7844] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1184: Directory hole found for htree index block [ 101.460851][ T7853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.473786][ T7844] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1184: Directory hole found for htree index block [ 101.487099][ T7844] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1184: Directory hole found for htree index block [ 101.489210][ T7853] netlink: 'syz.0.1185': attribute type 7 has an invalid length. [ 101.538165][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.571872][ T7866] nfs4: Unknown parameter 'contex' [ 101.599149][ T7868] syz.4.1191[7868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.599206][ T7868] syz.4.1191[7868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.692080][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.753810][ T29] audit: type=1400 audit(1720843307.385:712): avc: denied { ioctl } for pid=7896 comm="syz.1.1201" path="socket:[19674]" dev="sockfs" ino=19674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.758175][ T7897] loop1: detected capacity change from 0 to 128 [ 101.787417][ T29] audit: type=1400 audit(1720843307.425:713): avc: denied { getopt } for pid=7882 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.794152][ T7885] loop3: detected capacity change from 0 to 1024 [ 101.830986][ T7900] vhci_hcd: invalid port number 203 [ 101.836387][ T7900] vhci_hcd: default hub control req: 2017 v0000 i00cb l0 [ 101.854024][ T7900] loop0: detected capacity change from 0 to 1024 [ 101.866012][ T7903] nfs4: Unknown parameter 'contex' [ 101.872133][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1197'. [ 101.886350][ T7885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.916266][ T29] audit: type=1400 audit(1720843307.545:714): avc: denied { write } for pid=7882 comm="syz.3.1196" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.930825][ T7909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.937965][ T29] audit: type=1400 audit(1720843307.555:715): avc: denied { add_name } for pid=7882 comm="syz.3.1196" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.972382][ T7900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.974539][ T29] audit: type=1400 audit(1720843307.605:716): avc: denied { create } for pid=7908 comm="syz.1.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.022071][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.037870][ T29] audit: type=1326 audit(1720843307.675:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.2.1208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d34952bd9 code=0x0 [ 102.070366][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.120558][ T7921] usb usb8: usbfs: process 7921 (syz.4.1205) did not claim interface 1 before use [ 102.147122][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 102.157332][ T7935] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7935 comm=syz.0.1213 [ 102.210563][ T7937] x_tables: duplicate underflow at hook 1 [ 102.289034][ T7944] nfs4: Unknown parameter 'contex' [ 102.539621][ T7964] vhci_hcd: invalid port number 203 [ 102.544938][ T7964] vhci_hcd: default hub control req: 2017 v0000 i00cb l0 [ 102.560145][ T7964] loop1: detected capacity change from 0 to 1024 [ 102.569773][ T7968] 9pnet_fd: Insufficient options for proto=fd [ 102.591419][ T7964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.622758][ T29] audit: type=1326 audit(1720843308.255:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7972 comm="syz.0.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f04b4841bd9 code=0x7ffc0000 [ 102.661852][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.725275][ T7986] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7986 comm=syz.1.1224 [ 102.751378][ T7988] FAULT_INJECTION: forcing a failure. [ 102.751378][ T7988] name failslab, interval 1, probability 0, space 0, times 0 [ 102.764062][ T7988] CPU: 0 PID: 7988 Comm: syz.1.1226 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 102.774175][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.784445][ T7988] Call Trace: [ 102.787740][ T7988] [ 102.790673][ T7988] dump_stack_lvl+0xf2/0x150 [ 102.795291][ T7988] dump_stack+0x15/0x20 [ 102.799484][ T7988] should_fail_ex+0x229/0x230 [ 102.804254][ T7988] ? nf_ct_ext_add+0xe6/0x1a0 [ 102.809022][ T7988] __should_failslab+0x92/0xa0 [ 102.813906][ T7988] should_failslab+0x9/0x20 [ 102.818423][ T7988] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 102.824712][ T7988] krealloc_noprof+0x48/0xa0 [ 102.829343][ T7988] nf_ct_ext_add+0xe6/0x1a0 [ 102.833856][ T7988] init_conntrack+0x539/0x970 [ 102.838564][ T7988] nf_conntrack_in+0x899/0xf20 [ 102.843383][ T7988] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 102.848880][ T7988] ipv4_conntrack_in+0x1d/0x30 [ 102.853864][ T7988] nf_hook_slow+0x86/0x1b0 [ 102.858446][ T7988] ? __pfx_ip_rcv+0x10/0x10 [ 102.863051][ T7988] ip_rcv+0x103/0x140 [ 102.867070][ T7988] ? __pfx_ip_rcv_finish+0x10/0x10 [ 102.872274][ T7988] ? __pfx_ip_rcv+0x10/0x10 [ 102.876795][ T7988] __netif_receive_skb+0x10a/0x280 [ 102.881983][ T7988] netif_receive_skb+0x4a/0x320 [ 102.886884][ T7988] ? virtio_net_hdr_to_skb+0x6e5/0xaf0 [ 102.892363][ T7988] ? tun_rx_batched+0xba/0x410 [ 102.897142][ T7988] tun_rx_batched+0xf0/0x410 [ 102.901817][ T7988] tun_get_user+0x1dc6/0x23b0 [ 102.906515][ T7988] ? selinux_file_permission+0x22c/0x360 [ 102.912162][ T7988] tun_chr_write_iter+0x18e/0x240 [ 102.917254][ T7988] vfs_write+0x78f/0x900 [ 102.921559][ T7988] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 102.927132][ T7988] ksys_write+0xeb/0x1b0 [ 102.931513][ T7988] __x64_sys_write+0x42/0x50 [ 102.936166][ T7988] x64_sys_call+0x27ef/0x2d70 [ 102.940895][ T7988] do_syscall_64+0xc9/0x1c0 [ 102.945418][ T7988] ? clear_bhb_loop+0x55/0xb0 [ 102.950177][ T7988] ? clear_bhb_loop+0x55/0xb0 [ 102.954868][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.960775][ T7988] RIP: 0033:0x7f70e60bb75f [ 102.965257][ T7988] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 102.984875][ T7988] RSP: 002b:00007f70e533e010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 102.993380][ T7988] RAX: ffffffffffffffda RBX: 00007f70e624af60 RCX: 00007f70e60bb75f [ 103.001355][ T7988] RDX: 000000000000002a RSI: 0000000020000100 RDI: 00000000000000c8 [ 103.009418][ T7988] RBP: 00007f70e533e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.017398][ T7988] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 103.025371][ T7988] R13: 000000000000000b R14: 00007f70e624af60 R15: 00007ffe85129058 [ 103.033351][ T7988] [ 103.088405][ T7993] loop3: detected capacity change from 0 to 2048 [ 103.114467][ T29] audit: type=1400 audit(1720843308.745:719): avc: denied { write } for pid=7996 comm="syz.1.1230" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 103.140717][ T8003] 9pnet_fd: Insufficient options for proto=fd [ 103.177578][ T7993] loop3: p1 < > p4 [ 103.188041][ T8010] vhci_hcd: invalid port number 203 [ 103.193303][ T8010] vhci_hcd: default hub control req: 2017 v0000 i00cb l0 [ 103.210757][ T7993] loop3: p4 size 8388608 extends beyond EOD, truncated [ 103.246913][ T8019] nfs4: Unknown parameter 'fscontexttch' [ 103.256628][ T8018] loop1: detected capacity change from 0 to 1024 [ 103.293816][ T8023] loop3: detected capacity change from 0 to 1024 [ 103.303763][ T8023] EXT4-fs: Ignoring removed orlov option [ 103.309663][ T8023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.331686][ T8018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.349591][ T8023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.382666][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.474244][ T8053] loop1: detected capacity change from 0 to 128 [ 103.485678][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.499040][ T8054] 9pnet_fd: Insufficient options for proto=fd [ 103.513824][ T8053] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 103.613758][ T8070] FAULT_INJECTION: forcing a failure. [ 103.613758][ T8070] name failslab, interval 1, probability 0, space 0, times 0 [ 103.613913][ T8070] CPU: 0 PID: 8070 Comm: syz.4.1245 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 103.613935][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.613954][ T8070] Call Trace: [ 103.613973][ T8070] [ 103.613981][ T8070] dump_stack_lvl+0xf2/0x150 [ 103.614049][ T8070] dump_stack+0x15/0x20 [ 103.614086][ T8070] should_fail_ex+0x229/0x230 [ 103.614109][ T8070] ? kobject_uevent_env+0x1a4/0x550 [ 103.614138][ T8070] __should_failslab+0x92/0xa0 [ 103.614167][ T8070] should_failslab+0x9/0x20 [ 103.614257][ T8070] kmalloc_trace_noprof+0x4b/0x2a0 [ 103.614297][ T8070] ? __pfx_dev_uevent_name+0x10/0x10 [ 103.614389][ T8070] kobject_uevent_env+0x1a4/0x550 [ 103.614423][ T8070] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 103.614454][ T8070] ? device_pm_check_callbacks+0x632/0x650 [ 103.614555][ T8070] kobject_uevent+0x1c/0x30 [ 103.614591][ T8070] device_del+0x6fa/0x780 [ 103.614654][ T8070] device_destroy+0x67/0xa0 [ 103.614684][ T8070] vcs_remove_sysfs+0x36/0x60 [ 103.614720][ T8070] vc_deallocate+0x100/0x210 [ 103.614802][ T8070] vt_disallocate_all+0x16d/0x200 [ 103.614850][ T8070] vt_ioctl+0x1546/0x1810 [ 103.614876][ T8070] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 103.614899][ T8070] tty_ioctl+0x821/0xbe0 [ 103.615012][ T8070] ? __pfx_tty_ioctl+0x10/0x10 [ 103.615048][ T8070] __se_sys_ioctl+0xd3/0x150 [ 103.615080][ T8070] __x64_sys_ioctl+0x43/0x50 [ 103.615138][ T8070] x64_sys_call+0x1581/0x2d70 [ 103.615166][ T8070] do_syscall_64+0xc9/0x1c0 [ 103.615200][ T8070] ? clear_bhb_loop+0x55/0xb0 [ 103.615261][ T8070] ? clear_bhb_loop+0x55/0xb0 [ 103.615292][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.615407][ T8070] RIP: 0033:0x7f32b5f46bd9 [ 103.615425][ T8070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.615447][ T8070] RSP: 002b:00007f32b51a7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.615470][ T8070] RAX: ffffffffffffffda RBX: 00007f32b60d5038 RCX: 00007f32b5f46bd9 [ 103.615515][ T8070] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000006 [ 103.615527][ T8070] RBP: 00007f32b51a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.615540][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.615554][ T8070] R13: 000000000000006e R14: 00007f32b60d5038 R15: 00007fff527f89a8 [ 103.615574][ T8070] [ 103.639677][ T8074] raw_sendmsg: syz.0.1247 forgot to set AF_INET. Fix it! [ 103.676057][ T8079] vhci_hcd: invalid port number 203 [ 103.676073][ T8079] vhci_hcd: default hub control req: 2017 v0000 i00cb l0 [ 103.690438][ T8079] loop1: detected capacity change from 0 to 1024 [ 103.717711][ T8079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.778814][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.820247][ T8076] __nla_validate_parse: 10 callbacks suppressed [ 103.820290][ T8076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1248'. [ 104.157537][ T8108] loop3: detected capacity change from 0 to 1024 [ 104.163438][ T8109] loop0: detected capacity change from 0 to 1024 [ 104.173555][ T8109] EXT4-fs: Ignoring removed orlov option [ 104.179355][ T8109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.197218][ T5295] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.227146][ T8109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.267001][ T8105] FAULT_INJECTION: forcing a failure. [ 104.267001][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 104.279745][ T8105] CPU: 1 PID: 8105 Comm: syz.1.1251 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 104.289827][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.299932][ T8105] Call Trace: [ 104.303265][ T8105] [ 104.306209][ T8105] dump_stack_lvl+0xf2/0x150 [ 104.310853][ T8105] dump_stack+0x15/0x20 [ 104.315205][ T8105] should_fail_ex+0x229/0x230 [ 104.319916][ T8105] ? copy_mm+0xe0/0x11d0 [ 104.324228][ T8105] __should_failslab+0x92/0xa0 [ 104.329063][ T8105] should_failslab+0x9/0x20 [ 104.333665][ T8105] kmem_cache_alloc_noprof+0x4c/0x290 [ 104.339114][ T8105] copy_mm+0xe0/0x11d0 [ 104.343204][ T8105] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 104.348918][ T8105] ? hrtimer_init+0x104/0x1f0 [ 104.353609][ T8105] ? __init_rwsem+0x5d/0x70 [ 104.358121][ T8105] ? copy_signal+0x339/0x370 [ 104.362775][ T8105] copy_process+0xee1/0x1f90 [ 104.367387][ T8105] kernel_clone+0x167/0x5e0 [ 104.371924][ T8105] ? vfs_write+0x5a5/0x900 [ 104.376407][ T8105] __x64_sys_clone+0xe8/0x120 [ 104.381093][ T8105] x64_sys_call+0x23e7/0x2d70 [ 104.385790][ T8105] do_syscall_64+0xc9/0x1c0 [ 104.390342][ T8105] ? clear_bhb_loop+0x55/0xb0 [ 104.395034][ T8105] ? clear_bhb_loop+0x55/0xb0 [ 104.399727][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.405671][ T8105] RIP: 0033:0x7f70e60bcbd9 [ 104.410109][ T8105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.429767][ T8105] RSP: 002b:00007f70e533dff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 104.438189][ T8105] RAX: ffffffffffffffda RBX: 00007f70e624af60 RCX: 00007f70e60bcbd9 [ 104.446165][ T8105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.454170][ T8105] RBP: 00007f70e533e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.462145][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.470118][ T8105] R13: 000000000000000b R14: 00007f70e624af60 R15: 00007ffe85129058 [ 104.478112][ T8105] [ 104.492517][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1260'. [ 104.525771][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.575652][ T8129] loop3: detected capacity change from 0 to 512 [ 104.634158][ T8129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.653580][ T8129] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.707813][ T8139] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1265'. [ 104.722414][ T8141] loop0: detected capacity change from 0 to 512 [ 104.735542][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.747392][ T8141] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1267: attempt to clear invalid blocks 1 len 1 [ 104.750641][ T8139] loop1: detected capacity change from 0 to 512 [ 104.771228][ T8141] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1267: bg 0: block 343: padding at end of block bitmap is not set [ 104.785914][ T8141] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 104.794826][ T8141] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1267: invalid indirect mapped block 1819239214 (level 0) [ 104.809290][ T8139] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.1265: Failed to acquire dquot type 1 [ 104.810681][ T8141] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1267: invalid indirect mapped block 1819239214 (level 1) [ 104.822414][ T8139] EXT4-fs (loop1): 1 truncate cleaned up [ 104.836715][ T8141] EXT4-fs (loop0): 1 truncate cleaned up [ 104.849992][ T8141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.855041][ T8139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.867449][ T8141] tipc: Enabling of bearer rejected, failed to enable media [ 104.886579][ T8141] futex_wake_op: syz.0.1267 tries to shift op by 144; fix this program [ 104.895174][ T8139] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.938337][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.956602][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.967397][ T8156] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.170830][ T8214] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 105.218090][ T8222] loop0: detected capacity change from 0 to 2048 [ 105.237666][ T8222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.244895][ T8227] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 105.283341][ T8229] loop2: detected capacity change from 0 to 1024 [ 105.290079][ T8229] EXT4-fs: Ignoring removed orlov option [ 105.296076][ T8229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.308386][ T8229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.330868][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.373367][ T8220] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.391906][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 105.396205][ T8237] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 22 with error 28 [ 105.410476][ T8237] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.410476][ T8237] [ 105.420199][ T8237] EXT4-fs (loop0): Total free blocks count 0 [ 105.426215][ T8237] EXT4-fs (loop0): Free/Dirty block details [ 105.432112][ T8237] EXT4-fs (loop0): free_blocks=2415919104 [ 105.437876][ T8237] EXT4-fs (loop0): dirty_blocks=32 [ 105.443012][ T8237] EXT4-fs (loop0): Block reservation details [ 105.449016][ T8237] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 106.047248][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 106.071874][ T8277] FAULT_INJECTION: forcing a failure. [ 106.071874][ T8277] name failslab, interval 1, probability 0, space 0, times 0 [ 106.084580][ T8277] CPU: 0 PID: 8277 Comm: syz.4.1296 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 106.094656][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 106.104828][ T8277] Call Trace: [ 106.108162][ T8277] [ 106.111110][ T8277] dump_stack_lvl+0xf2/0x150 [ 106.115817][ T8277] dump_stack+0x15/0x20 [ 106.120084][ T8277] should_fail_ex+0x229/0x230 [ 106.124767][ T8277] ? radix_tree_node_alloc+0x8b/0x1e0 [ 106.130153][ T8277] __should_failslab+0x92/0xa0 [ 106.134944][ T8277] should_failslab+0x9/0x20 [ 106.139461][ T8277] kmem_cache_alloc_noprof+0x4c/0x290 [ 106.144988][ T8277] radix_tree_node_alloc+0x8b/0x1e0 [ 106.150199][ T8277] idr_get_free+0x1f5/0x550 [ 106.154766][ T8277] idr_alloc_u32+0xcb/0x180 [ 106.159338][ T8277] tcf_idr_check_alloc+0x171/0x270 [ 106.164565][ T8277] tcf_ctinfo_init+0x3f6/0x7f0 [ 106.169387][ T8277] tcf_action_init_1+0x339/0x490 [ 106.174368][ T8277] tcf_action_init+0x1a0/0x530 [ 106.179153][ T8277] tc_ctl_action+0x292/0x840 [ 106.183759][ T8277] ? __pfx_tc_ctl_action+0x10/0x10 [ 106.188888][ T8277] rtnetlink_rcv_msg+0x85e/0x910 [ 106.193889][ T8277] ? __kfree_skb+0x102/0x150 [ 106.198555][ T8277] ? packet_rcv+0xc9/0x940 [ 106.203126][ T8277] ? strlen+0x19/0x30 [ 106.207135][ T8277] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 106.212627][ T8277] ? kmem_cache_free+0xd8/0x280 [ 106.217526][ T8277] ? nlmon_xmit+0x51/0x60 [ 106.221887][ T8277] ? __kfree_skb+0x102/0x150 [ 106.225709][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 106.225753][ T29] audit: type=1400 audit(1720843311.865:731): avc: denied { mount } for pid=8281 comm="syz.3.1297" name="/" dev="ramfs" ino=19358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 106.226499][ T8277] ? consume_skb+0x57/0x180 [ 106.240027][ T8282] loop3: detected capacity change from 0 to 512 [ 106.254670][ T8277] ? nlmon_xmit+0x51/0x60 [ 106.254735][ T8277] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 106.254767][ T8277] ? __dev_queue_xmit+0xb21/0x1e50 [ 106.280267][ T8277] ? ref_tracker_free+0x3a5/0x410 [ 106.285305][ T8277] netlink_rcv_skb+0x12c/0x230 [ 106.290141][ T8277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.295628][ T8277] rtnetlink_rcv+0x1c/0x30 [ 106.300057][ T8277] netlink_unicast+0x58d/0x660 [ 106.304841][ T8277] netlink_sendmsg+0x5ca/0x6e0 [ 106.309615][ T8277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.314927][ T8277] __sock_sendmsg+0x140/0x180 [ 106.319612][ T8277] ____sys_sendmsg+0x312/0x410 [ 106.324428][ T8277] __sys_sendmsg+0x1e9/0x280 [ 106.329078][ T8277] __x64_sys_sendmsg+0x46/0x50 [ 106.333863][ T8277] x64_sys_call+0xb25/0x2d70 [ 106.338548][ T8277] do_syscall_64+0xc9/0x1c0 [ 106.343109][ T8277] ? clear_bhb_loop+0x55/0xb0 [ 106.347839][ T8277] ? clear_bhb_loop+0x55/0xb0 [ 106.352610][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.358551][ T8277] RIP: 0033:0x7f32b5f46bd9 [ 106.362969][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.382627][ T8277] RSP: 002b:00007f32b51c8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.391085][ T8277] RAX: ffffffffffffffda RBX: 00007f32b60d4f60 RCX: 00007f32b5f46bd9 [ 106.399067][ T8277] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 106.407065][ T8277] RBP: 00007f32b51c80a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.415211][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.423347][ T8277] R13: 000000000000000b R14: 00007f32b60d4f60 R15: 00007fff527f89a8 [ 106.431330][ T8277] [ 106.444222][ T29] audit: type=1400 audit(1720843311.875:732): avc: denied { read } for pid=8281 comm="syz.3.1297" path="socket:[19365]" dev="sockfs" ino=19365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.467404][ T29] audit: type=1400 audit(1720843311.905:733): avc: denied { mounton } for pid=8281 comm="syz.3.1297" path="/278/file0" dev="ramfs" ino=19358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 106.468539][ T8277] syz.4.1296 (8277) used greatest stack depth: 9288 bytes left [ 106.511680][ T8282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.519878][ T8292] loop0: detected capacity change from 0 to 1024 [ 106.524486][ T8282] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.541472][ T8292] EXT4-fs: Ignoring removed orlov option [ 106.547264][ T8292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.555501][ T29] audit: type=1400 audit(1720843312.185:734): avc: denied { unlink } for pid=8281 comm="syz.3.1297" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.579357][ T8282] netlink: 'syz.3.1297': attribute type 10 has an invalid length. [ 106.587441][ T8282] netlink: 'syz.3.1297': attribute type 10 has an invalid length. [ 106.602031][ T8292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.629268][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.647434][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.663251][ T29] audit: type=1400 audit(1720843312.295:735): avc: denied { unmount } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 106.745090][ T8299] usb usb8: usbfs: process 8299 (syz.2.1300) did not claim interface 1 before use [ 106.773152][ T8303] loop0: detected capacity change from 0 to 512 [ 106.784762][ T8303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 106.794496][ T8303] System zones: 1-12 [ 106.799187][ T8303] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.805772][ T8303] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1302: invalid indirect mapped block 1819239214 (level 1) [ 106.831702][ T8303] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1302: bg 0: block 361: padding at end of block bitmap is not set [ 106.846870][ T8315] loop1: detected capacity change from 0 to 2048 [ 106.853999][ T8303] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 106.856824][ T8315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.883753][ T8303] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1302: attempt to clear invalid blocks 33619980 len 1 [ 106.897591][ T8303] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1302: invalid indirect mapped block 1819239214 (level 0) [ 106.912039][ T8303] EXT4-fs (loop0): 1 truncate cleaned up [ 106.919571][ T8303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.935326][ T8303] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz.0.1302: Directory hole found for htree index block [ 106.947963][ T8303] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz.0.1302: Directory hole found for htree index block [ 106.960720][ T8303] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz.0.1302: Directory hole found for htree index block [ 106.973821][ T8303] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz.0.1302: Directory hole found for htree index block [ 106.997192][ T8314] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.012608][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.019168][ T8333] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 22 with error 28 [ 107.034013][ T8333] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.034013][ T8333] [ 107.043695][ T8333] EXT4-fs (loop1): Total free blocks count 0 [ 107.049769][ T8333] EXT4-fs (loop1): Free/Dirty block details [ 107.055786][ T8333] EXT4-fs (loop1): free_blocks=2415919104 [ 107.061529][ T8333] EXT4-fs (loop1): dirty_blocks=32 [ 107.066665][ T8333] EXT4-fs (loop1): Block reservation details [ 107.072643][ T8333] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 107.116131][ T8337] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.152472][ T8349] FAULT_INJECTION: forcing a failure. [ 107.152472][ T8349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.165647][ T8349] CPU: 1 PID: 8349 Comm: syz.3.1309 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 107.175740][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.185822][ T8349] Call Trace: [ 107.189123][ T8349] [ 107.192072][ T8349] dump_stack_lvl+0xf2/0x150 [ 107.196714][ T8349] dump_stack+0x15/0x20 [ 107.200914][ T8349] should_fail_ex+0x229/0x230 [ 107.205633][ T8349] should_fail+0xb/0x10 [ 107.209850][ T8349] should_fail_usercopy+0x1a/0x20 [ 107.214910][ T8349] _copy_from_iter+0xd3/0xb00 [ 107.219628][ T8349] ? kmalloc_reserve+0x16e/0x190 [ 107.224648][ T8349] ? __build_skb_around+0x196/0x1f0 [ 107.229887][ T8349] ? __alloc_skb+0x217/0x300 [ 107.234513][ T8349] ? __virt_addr_valid+0x1ed/0x250 [ 107.239657][ T8349] ? __check_object_size+0x35b/0x510 [ 107.244982][ T8349] netlink_sendmsg+0x460/0x6e0 [ 107.249793][ T8349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.255126][ T8349] __sock_sendmsg+0x140/0x180 [ 107.259909][ T8349] ____sys_sendmsg+0x312/0x410 [ 107.264729][ T8349] __sys_sendmsg+0x1e9/0x280 [ 107.269339][ T8349] __x64_sys_sendmsg+0x46/0x50 [ 107.274126][ T8349] x64_sys_call+0xb25/0x2d70 [ 107.278750][ T8349] do_syscall_64+0xc9/0x1c0 [ 107.283296][ T8349] ? clear_bhb_loop+0x55/0xb0 [ 107.288072][ T8349] ? clear_bhb_loop+0x55/0xb0 [ 107.292755][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.298762][ T8349] RIP: 0033:0x7f84b6935bd9 [ 107.303199][ T8349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.322904][ T8349] RSP: 002b:00007f84b5bb7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.331372][ T8349] RAX: ffffffffffffffda RBX: 00007f84b6ac3f60 RCX: 00007f84b6935bd9 [ 107.339475][ T8349] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000005 [ 107.347510][ T8349] RBP: 00007f84b5bb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.355483][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.363490][ T8349] R13: 000000000000000b R14: 00007f84b6ac3f60 R15: 00007ffe4a504688 [ 107.371545][ T8349] [ 107.409022][ T8367] loop0: detected capacity change from 0 to 512 [ 107.416965][ T8365] FAULT_INJECTION: forcing a failure. [ 107.416965][ T8365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.427028][ T8367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.430206][ T8365] CPU: 1 PID: 8365 Comm: syz.3.1310 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 107.452130][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.462261][ T8365] Call Trace: [ 107.465573][ T8365] [ 107.468507][ T8365] dump_stack_lvl+0xf2/0x150 [ 107.473155][ T8365] dump_stack+0x15/0x20 [ 107.477350][ T8365] should_fail_ex+0x229/0x230 [ 107.482099][ T8365] should_fail+0xb/0x10 [ 107.486265][ T8365] should_fail_usercopy+0x1a/0x20 [ 107.491325][ T8365] _copy_to_user+0x1e/0xa0 [ 107.495754][ T8365] simple_read_from_buffer+0xa0/0x110 [ 107.501232][ T8365] proc_fail_nth_read+0xfc/0x140 [ 107.506240][ T8365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.511793][ T8365] vfs_read+0x1a2/0x6e0 [ 107.516040][ T8365] ? __rcu_read_unlock+0x4e/0x70 [ 107.520995][ T8365] ? __fget_files+0x1da/0x210 [ 107.525750][ T8365] ksys_read+0xeb/0x1b0 [ 107.530000][ T8365] __x64_sys_read+0x42/0x50 [ 107.534526][ T8365] x64_sys_call+0x27e5/0x2d70 [ 107.539252][ T8365] do_syscall_64+0xc9/0x1c0 [ 107.543824][ T8365] ? clear_bhb_loop+0x55/0xb0 [ 107.548566][ T8365] ? clear_bhb_loop+0x55/0xb0 [ 107.553361][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.559270][ T8365] RIP: 0033:0x7f84b69346bc [ 107.563754][ T8365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 107.583368][ T8365] RSP: 002b:00007f84b5bb7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.591791][ T8365] RAX: ffffffffffffffda RBX: 00007f84b6ac3f60 RCX: 00007f84b69346bc [ 107.599809][ T8365] RDX: 000000000000000f RSI: 00007f84b5bb70b0 RDI: 0000000000000006 [ 107.607799][ T8365] RBP: 00007f84b5bb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.615778][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.623836][ T8365] R13: 000000000000000b R14: 00007f84b6ac3f60 R15: 00007ffe4a504688 [ 107.631885][ T8365] [ 107.652908][ T29] audit: type=1326 audit(1720843313.285:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04b4838c27 code=0x7ffc0000 [ 107.661581][ T8371] loop2: detected capacity change from 0 to 1024 [ 107.693060][ T29] audit: type=1326 audit(1720843313.315:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f04b47dd5d9 code=0x7ffc0000 [ 107.701145][ T8375] vhci_hcd: invalid port number 203 [ 107.716585][ T29] audit: type=1326 audit(1720843313.315:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b4841bd9 code=0x7ffc0000 [ 107.716696][ T29] audit: type=1326 audit(1720843313.315:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04b4838c27 code=0x7ffc0000 [ 107.721901][ T8375] vhci_hcd: default hub control req: 2017 v0000 i00cb l0 [ 107.745693][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.771139][ T8371] EXT4-fs: Ignoring removed orlov option [ 107.780681][ T55] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 107.784405][ T8371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.823534][ T8371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.841227][ T8379] loop3: detected capacity change from 0 to 512 [ 107.852742][ T4854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.863768][ T8379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 107.875091][ T8379] System zones: 1-12 [ 107.897112][ T8379] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.911357][ T8379] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1317: invalid indirect mapped block 1819239214 (level 1) [ 107.960028][ T8379] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1317: bg 0: block 361: padding at end of block bitmap is not set [ 108.003361][ T8379] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 108.020620][ T29] audit: type=1326 audit(1720843313.655:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e60bcbd9 code=0x7ffc0000 [ 108.049922][ T8379] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1317: attempt to clear invalid blocks 33619980 len 1 [ 108.065355][ T8399] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.074709][ T8379] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1317: invalid indirect mapped block 1819239214 (level 0) [ 108.094877][ T8379] EXT4-fs (loop3): 1 truncate cleaned up [ 108.101169][ T8379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.119127][ T8379] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1317: Directory hole found for htree index block [ 108.133372][ T8379] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1317: Directory hole found for htree index block [ 108.147858][ T8379] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1317: Directory hole found for htree index block [ 108.182493][ T8379] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1317: Directory hole found for htree index block [ 108.184416][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1323'. [ 108.203974][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1323'. [ 108.214244][ T8420] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 108.252167][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.303066][ T8437] atomic_op ffff88810dfcd528 conn xmit_atomic 0000000000000000 [ 108.337031][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 108.360328][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 108.371273][ T8446] FAULT_INJECTION: forcing a failure. [ 108.371273][ T8446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.384643][ T8446] CPU: 1 PID: 8446 Comm: syz.4.1332 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 108.394722][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 108.404884][ T8446] Call Trace: [ 108.408165][ T8446] [ 108.411113][ T8446] dump_stack_lvl+0xf2/0x150 [ 108.415796][ T8446] dump_stack+0x15/0x20 [ 108.419965][ T8446] should_fail_ex+0x229/0x230 [ 108.424680][ T8446] should_fail+0xb/0x10 [ 108.428841][ T8446] should_fail_usercopy+0x1a/0x20 [ 108.433872][ T8446] _copy_from_user+0x1e/0xd0 [ 108.438469][ T8446] copy_msghdr_from_user+0x54/0x2a0 [ 108.443711][ T8446] do_recvmmsg+0x290/0x720 [ 108.448219][ T8446] __x64_sys_recvmmsg+0xe2/0x170 [ 108.453233][ T8446] x64_sys_call+0x271d/0x2d70 [ 108.457925][ T8446] do_syscall_64+0xc9/0x1c0 [ 108.462448][ T8446] ? clear_bhb_loop+0x55/0xb0 [ 108.467145][ T8446] ? clear_bhb_loop+0x55/0xb0 [ 108.471897][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.477967][ T8446] RIP: 0033:0x7f32b5f46bd9 [ 108.482383][ T8446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.502042][ T8446] RSP: 002b:00007f32b51a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 108.510550][ T8446] RAX: ffffffffffffffda RBX: 00007f32b60d5038 RCX: 00007f32b5f46bd9 [ 108.518558][ T8446] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 108.526564][ T8446] RBP: 00007f32b51a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.534543][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.542577][ T8446] R13: 000000000000006e R14: 00007f32b60d5038 R15: 00007fff527f89a8 [ 108.550567][ T8446] [ 108.562729][ T8441] syzkaller0: entered promiscuous mode [ 108.568505][ T8441] syzkaller0: entered allmulticast mode [ 108.607665][ T8453] loop0: detected capacity change from 0 to 1024 [ 108.616512][ T8453] EXT4-fs: Ignoring removed oldalloc option [ 108.634662][ T8457] loop1: detected capacity change from 0 to 512 [ 108.643573][ T8457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 108.651607][ T8457] System zones: 1-12 [ 108.652020][ T8453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.659066][ T8457] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.674678][ T8457] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1335: invalid indirect mapped block 1819239214 (level 1) [ 108.690541][ T8457] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1335: bg 0: block 361: padding at end of block bitmap is not set [ 108.705000][ T8457] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 108.714155][ T8457] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1335: attempt to clear invalid blocks 33619980 len 1 [ 108.729835][ T8457] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1335: invalid indirect mapped block 1819239214 (level 0) [ 108.744841][ T8457] EXT4-fs (loop1): 1 truncate cleaned up [ 108.751431][ T8457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.777372][ T8457] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1335: Directory hole found for htree index block [ 108.790177][ T8457] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1335: Directory hole found for htree index block [ 108.802994][ T8457] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1335: Directory hole found for htree index block [ 108.816328][ T8457] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1335: Directory hole found for htree index block [ 108.838205][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.969970][ T5869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.980639][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.052279][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.065193][ T8503] loop3: detected capacity change from 0 to 512 [ 109.080674][ T8503] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 109.144353][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.171960][ T8517] loop1: detected capacity change from 0 to 512 [ 109.189158][ T8521] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 109.211934][ T8524] loop2: detected capacity change from 0 to 512 [ 109.224213][ T8517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.225106][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.241223][ T8524] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 109.254837][ T8524] EXT4-fs (loop2): invalid inodes per group: 4 [ 109.254837][ T8524] [ 109.277712][ T8527] loop3: detected capacity change from 0 to 512 [ 109.300253][ T8527] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1348: attempt to clear invalid blocks 1 len 1 [ 109.343433][ T8527] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1348: bg 0: block 343: padding at end of block bitmap is not set [ 109.366343][ T3555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.377996][ T36] bridge_slave_1: left allmulticast mode [ 109.383708][ T36] bridge_slave_1: left promiscuous mode [ 109.388250][ T8527] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 109.389399][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.399205][ T8527] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1348: invalid indirect mapped block 1819239214 (level 0) [ 109.419932][ T36] bridge_slave_0: left allmulticast mode [ 109.425685][ T36] bridge_slave_0: left promiscuous mode [ 109.426904][ T8527] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1348: invalid indirect mapped block 1819239214 (level 1) [ 109.431527][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.447669][ T8527] EXT4-fs (loop3): 1 truncate cleaned up [ 109.459365][ T8527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.542484][ T8555] futex_wake_op: syz.3.1348 tries to shift op by 144; fix this program [ 109.552529][ T8551] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.628618][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.639598][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.650361][ T36] bond0 (unregistering): Released all slaves [ 109.664179][ T8527] tipc: Enabling of bearer rejected, failed to enable media [ 109.695187][ T36] tipc: Left network mode [ 109.717276][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.746575][ T8507] chnl_net:caif_netlink_parms(): no params data found [ 109.789469][ T36] hsr_slave_0: left promiscuous mode [ 109.817601][ T8589] loop3: detected capacity change from 0 to 4096 [ 109.824252][ T8589] EXT4-fs: Ignoring removed nobh option [ 109.847576][ T36] hsr_slave_1: left promiscuous mode [ 109.858176][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.865710][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.873182][ T8594] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.896066][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.903560][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.931387][ T8589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.945874][ T36] veth1_macvtap: left promiscuous mode [ 109.951470][ T36] veth0_macvtap: left promiscuous mode [ 109.957089][ T36] veth1_vlan: left promiscuous mode [ 109.962353][ T36] veth0_vlan: left promiscuous mode [ 110.035607][ T8589] netlink: 'syz.3.1352': attribute type 7 has an invalid length. [ 110.120082][ T8608] serio: Serial port pts0 [ 110.176896][ T36] team0 (unregistering): Port device team_slave_1 removed [ 110.194993][ T36] team0 (unregistering): Port device team_slave_0 removed [ 110.204470][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.272442][ T8607] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 110.364825][ T8623] loop3: detected capacity change from 0 to 512 [ 110.398096][ T8623] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1361: attempt to clear invalid blocks 1 len 1 [ 110.411499][ T8623] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1361: bg 0: block 343: padding at end of block bitmap is not set [ 110.412879][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.433104][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.445158][ T8623] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 110.447154][ T8507] bridge_slave_0: entered allmulticast mode [ 110.463740][ T8623] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1361: invalid indirect mapped block 1819239214 (level 0) [ 110.480734][ T8623] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1361: invalid indirect mapped block 1819239214 (level 1) [ 110.495516][ T8507] bridge_slave_0: entered promiscuous mode [ 110.503047][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.510154][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.525329][ T8623] EXT4-fs (loop3): 1 truncate cleaned up [ 110.527242][ T8507] bridge_slave_1: entered allmulticast mode [ 110.541545][ T8623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.547983][ T8507] bridge_slave_1: entered promiscuous mode [ 110.627747][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.641886][ T8623] tipc: Enabling of bearer rejected, failed to enable media [ 110.652761][ T8653] futex_wake_op: syz.3.1361 tries to shift op by 144; fix this program [ 110.670953][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.773646][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.790369][ T8507] team0: Port device team_slave_0 added [ 110.800344][ T8507] team0: Port device team_slave_1 added [ 110.838796][ T8665] loop3: detected capacity change from 0 to 512 [ 110.847891][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.855046][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.858752][ T8665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.881039][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.916619][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.923758][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.937201][ T8665] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.949767][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.994734][ T8600] chnl_net:caif_netlink_parms(): no params data found [ 111.034939][ T8507] hsr_slave_0: entered promiscuous mode [ 111.044491][ T8507] hsr_slave_1: entered promiscuous mode [ 111.061193][ T8507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.072833][ T8507] Cannot create hsr debugfs directory [ 111.082992][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.099435][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.165567][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.242324][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.249518][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.258583][ T8600] bridge_slave_0: entered allmulticast mode [ 111.265637][ T8600] bridge_slave_0: entered promiscuous mode [ 111.273032][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.280363][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.290554][ T8600] bridge_slave_1: entered allmulticast mode [ 111.297317][ T8600] bridge_slave_1: entered promiscuous mode [ 111.308387][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.354299][ T8600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.366425][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.391611][ T8600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.421371][ T8600] team0: Port device team_slave_0 added [ 111.447712][ T8600] team0: Port device team_slave_1 added [ 111.485262][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.492318][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.518290][ T8600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.607561][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.614547][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.640853][ T8600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.647069][ T8716] loop1: detected capacity change from 0 to 512 [ 111.664563][ T8716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 111.681022][ T36] bridge_slave_1: left allmulticast mode [ 111.682416][ T8716] System zones: [ 111.686743][ T36] bridge_slave_1: left promiscuous mode [ 111.690312][ T8716] 1-12 [ 111.696053][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.706667][ T8716] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.713256][ T8716] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1366: invalid indirect mapped block 1819239214 (level 1) [ 111.728062][ T36] bridge_slave_0: left allmulticast mode [ 111.733733][ T36] bridge_slave_0: left promiscuous mode [ 111.737921][ T8716] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1366: bg 0: block 361: padding at end of block bitmap is not set [ 111.739456][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.761365][ T8716] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 111.772127][ T8716] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1366: attempt to clear invalid blocks 33619980 len 1 [ 111.787850][ T8716] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1366: invalid indirect mapped block 1819239214 (level 0) [ 111.807532][ T8716] EXT4-fs (loop1): 1 truncate cleaned up [ 111.813984][ T8716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.852207][ T8716] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1366: Directory hole found for htree index block [ 111.864910][ T8716] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1366: Directory hole found for htree index block [ 111.881578][ T8716] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1366: Directory hole found for htree index block [ 111.910660][ T8716] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.1366: Directory hole found for htree index block [ 111.968736][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.981302][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.992107][ T36] bond0 (unregistering): Released all slaves [ 112.066815][ T8600] hsr_slave_0: entered promiscuous mode [ 112.074821][ T8600] hsr_slave_1: entered promiscuous mode [ 112.083990][ T8600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.115215][ T8600] Cannot create hsr debugfs directory [ 112.238655][ T36] hsr_slave_0: left promiscuous mode [ 112.247982][ T36] hsr_slave_1: left promiscuous mode [ 112.268983][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.276512][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.295806][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.303321][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.335688][ T36] veth1_macvtap: left promiscuous mode [ 112.341225][ T36] veth0_macvtap: left promiscuous mode [ 112.346833][ T36] veth1_vlan: left promiscuous mode [ 112.352121][ T36] veth0_vlan: left promiscuous mode [ 112.740095][ T36] team0 (unregistering): Port device team_slave_1 removed [ 112.763046][ T36] team0 (unregistering): Port device team_slave_0 removed [ 112.863480][ T8722] FAULT_INJECTION: forcing a failure. [ 112.863480][ T8722] name failslab, interval 1, probability 0, space 0, times 0 [ 112.876819][ T8722] CPU: 1 PID: 8722 Comm: syz.3.1368 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 112.886918][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 112.896996][ T8722] Call Trace: [ 112.900290][ T8722] [ 112.903235][ T8722] dump_stack_lvl+0xf2/0x150 [ 112.907859][ T8722] dump_stack+0x15/0x20 [ 112.912073][ T8722] should_fail_ex+0x229/0x230 [ 112.916777][ T8722] ? kvmalloc_node_noprof+0x72/0x170 [ 112.922289][ T8722] __should_failslab+0x92/0xa0 [ 112.927216][ T8722] should_failslab+0x9/0x20 [ 112.931804][ T8722] __kmalloc_node_noprof+0xa8/0x380 [ 112.937057][ T8722] kvmalloc_node_noprof+0x72/0x170 [ 112.942205][ T8722] alloc_netdev_mqs+0x99/0x8b0 [ 112.947040][ T8722] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 112.952561][ T8722] rtnl_create_link+0x233/0x680 [ 112.957435][ T8722] rtnl_newlink+0xe10/0x1690 [ 112.962053][ T8722] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 112.968336][ T8722] ? _raw_spin_unlock+0x26/0x50 [ 112.973221][ T8722] ? __mutex_lock+0x221/0x8e0 [ 112.978007][ T8722] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.983056][ T8722] rtnetlink_rcv_msg+0x85e/0x910 [ 112.988050][ T8722] ? memcg_list_lru_alloc+0xd2/0x740 [ 112.993353][ T8722] ? mod_objcg_state+0x2e2/0x4e0 [ 112.998376][ T8722] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 113.003911][ T8722] ? xas_load+0x3ae/0x3d0 [ 113.008274][ T8722] ? kmem_cache_free+0xd8/0x280 [ 113.013211][ T8722] ? nlmon_xmit+0x51/0x60 [ 113.017555][ T8722] ? __kfree_skb+0x102/0x150 [ 113.022208][ T8722] ? consume_skb+0x57/0x180 [ 113.026735][ T8722] ? nlmon_xmit+0x51/0x60 [ 113.031111][ T8722] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 113.036417][ T8722] ? __dev_queue_xmit+0xb21/0x1e50 [ 113.041611][ T8722] ? ref_tracker_free+0x3a5/0x410 [ 113.046656][ T8722] netlink_rcv_skb+0x12c/0x230 [ 113.051472][ T8722] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 113.056973][ T8722] rtnetlink_rcv+0x1c/0x30 [ 113.061561][ T8722] netlink_unicast+0x58d/0x660 [ 113.066380][ T8722] netlink_sendmsg+0x5ca/0x6e0 [ 113.071168][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.076506][ T8722] __sock_sendmsg+0x140/0x180 [ 113.081200][ T8722] ____sys_sendmsg+0x312/0x410 [ 113.085997][ T8722] __sys_sendmsg+0x1e9/0x280 [ 113.090676][ T8722] __x64_sys_sendmsg+0x46/0x50 [ 113.095609][ T8722] x64_sys_call+0xb25/0x2d70 [ 113.100317][ T8722] do_syscall_64+0xc9/0x1c0 [ 113.104919][ T8722] ? clear_bhb_loop+0x55/0xb0 [ 113.109673][ T8722] ? clear_bhb_loop+0x55/0xb0 [ 113.114395][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.120326][ T8722] RIP: 0033:0x7f84b6935bd9 [ 113.124758][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.144394][ T8722] RSP: 002b:00007f84b5bb7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.152967][ T8722] RAX: ffffffffffffffda RBX: 00007f84b6ac3f60 RCX: 00007f84b6935bd9 [ 113.160951][ T8722] RDX: 0000000000000000 RSI: 0000000020001240 RDI: 0000000000000003 [ 113.169053][ T8722] RBP: 00007f84b5bb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.177041][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.185033][ T8722] R13: 000000000000000b R14: 00007f84b6ac3f60 R15: 00007ffe4a504688 [ 113.193028][ T8722] [ 113.206289][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 113.230648][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 113.244731][ T8742] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8742 comm=syz.3.1370 [ 113.264079][ T8742] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1370'. [ 113.280651][ T8742] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1370'. [ 113.291821][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 113.291836][ T29] audit: type=1400 audit(1720843318.935:785): avc: denied { map } for pid=8743 comm="syz.1.1369" path="socket:[21023]" dev="sockfs" ino=21023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.321050][ T29] audit: type=1400 audit(1720843318.935:786): avc: denied { read } for pid=8743 comm="syz.1.1369" path="socket:[21023]" dev="sockfs" ino=21023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.386246][ T8507] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.390713][ T29] audit: type=1400 audit(1720843318.985:787): avc: denied { setattr } for pid=8743 comm="syz.1.1369" name="RDS" dev="sockfs" ino=21024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.416800][ T8746] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 113.474687][ T8507] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.539303][ T8753] loop3: detected capacity change from 0 to 2048 [ 113.546883][ T8507] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.568616][ T8753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8753 comm=syz.3.1373 [ 113.598996][ T8507] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.731155][ T8774] loop3: detected capacity change from 0 to 512 [ 113.762174][ T8774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 113.772807][ T8774] System zones: 1-12 [ 113.777811][ T8774] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.784398][ T8774] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1375: invalid indirect mapped block 1819239214 (level 1) [ 113.807409][ T8774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1375: bg 0: block 361: padding at end of block bitmap is not set [ 113.829871][ T8774] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 113.839007][ T8774] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1375: attempt to clear invalid blocks 33619980 len 1 [ 113.881857][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.957081][ T8774] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1375: invalid indirect mapped block 1819239214 (level 0) [ 113.971045][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881126e7a00: rx timeout, send abort [ 113.979414][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888112757c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.979461][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888112757800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 113.979474][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 113.979504][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 113.979519][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 113.979541][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 113.979557][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 113.997151][ T8774] EXT4-fs (loop3): 1 truncate cleaned up [ 114.008237][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.008255][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.008279][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.008293][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.008330][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.021526][ T8774] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1375: Directory hole found for htree index block [ 114.027837][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.035808][ T8774] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1375: Directory hole found for htree index block [ 114.040867][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.050402][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.052969][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.068373][ T8774] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1375: Directory hole found for htree index block [ 114.072492][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.087544][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.091145][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.097680][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.109886][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.151406][ T8507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.155207][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.161774][ T8507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.168971][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.177830][ T8774] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1375: Directory hole found for htree index block [ 114.185781][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.219964][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.221479][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.221495][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.221514][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.228054][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.235015][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.268652][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.275178][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.281756][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.288315][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.294881][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.301434][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.308772][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.315340][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.321915][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.328485][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.335037][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.341578][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.348133][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.354673][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.361256][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.367792][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.370014][ T8507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.374325][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.387621][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.394170][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.400705][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.407262][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.413781][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.420368][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.426917][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.433469][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.440021][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.446589][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.453119][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.459693][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.466227][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.471095][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881126e7a00: abort rx timeout. Force session deactivation [ 114.473008][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.489452][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.496015][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.502540][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.509109][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.515656][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.522207][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.528752][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.535295][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.541837][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.548398][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.554912][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.561470][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.568011][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.574586][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.581137][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.587690][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.594221][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.600797][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.601479][ T8507] veth0_vlan: entered promiscuous mode [ 114.607338][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.619362][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.625914][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.632467][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.639031][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.645602][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.648516][ T8507] veth1_vlan: entered promiscuous mode [ 114.652117][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.664154][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 114.670705][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 114.724622][ T8600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.743073][ T29] audit: type=1400 audit(1720843320.375:788): avc: denied { getopt } for pid=8809 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.778353][ T8816] sctp: [Deprecated]: syz.1.1381 (pid 8816) Use of int in max_burst socket option. [ 114.778353][ T8816] Use struct sctp_assoc_value instead [ 114.798433][ T8507] veth0_macvtap: entered promiscuous mode [ 114.807875][ T8600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.825613][ T8818] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.826749][ T8507] veth1_macvtap: entered promiscuous mode [ 114.860287][ T8600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.871185][ T8816] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1381'. [ 114.884632][ T8600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.901671][ T8825] loop1: detected capacity change from 0 to 512 [ 114.923980][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.934482][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.944369][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.955040][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.965218][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.975776][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.985704][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.996169][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.019913][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.054875][ T8825] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.068833][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.079467][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.089480][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.100212][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.110119][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.120723][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.130734][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.141243][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.277855][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.299745][ T8507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.308580][ T8507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.317437][ T8507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.326441][ T8507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.367624][ T8849] loop3: detected capacity change from 0 to 2048 [ 115.395221][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.415421][ T8849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8849 comm=syz.3.1383 [ 115.457296][ T8600] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.496498][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.503633][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.533952][ T8600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.544400][ T8600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.564298][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.571752][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.668126][ T8871] loop1: detected capacity change from 0 to 2048 [ 115.708826][ T8871] loop1: p1 < > p4 [ 115.727642][ T8871] loop1: p4 size 8388608 extends beyond EOD, truncated [ 115.771034][ T8600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.815997][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 115.846164][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 115.856150][ T8880] usb usb8: usbfs: process 8880 (syz.3.1386) did not claim interface 1 before use [ 115.863326][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 116.095533][ T8919] vhci_hcd: invalid port number 203 [ 116.100780][ T8919] vhci_hcd: default hub control req: 2017 v0000 i00cb l0 [ 116.137811][ T8919] loop0: detected capacity change from 0 to 1024 [ 116.172403][ T8600] veth0_vlan: entered promiscuous mode [ 116.195068][ T8600] veth1_vlan: entered promiscuous mode [ 116.234934][ T8600] veth0_macvtap: entered promiscuous mode [ 116.242937][ T8600] veth1_macvtap: entered promiscuous mode [ 116.256739][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.267349][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.277217][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.287826][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.297772][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.308277][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.318297][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.328809][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.338840][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.349307][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.362201][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.372835][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.383394][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.393340][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.404161][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.414042][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.424768][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.434733][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.445448][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.455483][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.465983][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.478962][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.491059][ T8600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.499907][ T8600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.509094][ T8600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.518052][ T8600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.578665][ T8942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.609837][ T8942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.639254][ T8945] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.644174][ T8942] bond0 (unregistering): Released all slaves [ 116.770206][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1393'. [ 116.782666][ T8956] Cannot find add_set index 0 as target [ 116.801062][ T8959] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8959 comm=syz.1.1393 [ 116.836043][ T8959] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1393'. [ 116.855597][ T8959] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1393'. [ 116.865171][ T8961] loop3: detected capacity change from 0 to 4096 [ 116.888347][ T8961] EXT4-fs: Ignoring removed nobh option [ 116.938276][ T8961] netlink: 'syz.3.1395': attribute type 7 has an invalid length. [ 117.053397][ T8987] serio: Serial port pts0 [ 117.104384][ T8993] netlink: 'syz.0.1402': attribute type 10 has an invalid length. [ 117.115338][ T8993] team0: Port device netdevsim1 added [ 117.126300][ T8993] netlink: 'syz.0.1402': attribute type 10 has an invalid length. [ 117.137854][ T8993] team0: Port device netdevsim1 removed [ 117.145978][ T8993] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 117.349110][ T8996] usb usb8: usbfs: process 8996 (syz.1.1401) did not claim interface 1 before use [ 117.437581][ T9001] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.693215][ T9023] loop3: detected capacity change from 0 to 128 [ 117.703638][ T9023] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 117.776413][ T9025] FAULT_INJECTION: forcing a failure. [ 117.776413][ T9025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.789790][ T9025] CPU: 1 PID: 9025 Comm: syz.4.1406 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 117.799883][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 117.810065][ T9025] Call Trace: [ 117.813377][ T9025] [ 117.816372][ T9025] dump_stack_lvl+0xf2/0x150 [ 117.821004][ T9025] dump_stack+0x15/0x20 [ 117.825198][ T9025] should_fail_ex+0x229/0x230 [ 117.829911][ T9025] __should_fail_alloc_page+0xfd/0x110 [ 117.835426][ T9025] __alloc_pages_noprof+0x109/0x360 [ 117.840664][ T9025] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 117.846135][ T9025] vma_alloc_folio_noprof+0x176/0x2d0 [ 117.851543][ T9025] do_wp_page+0x62b/0x22b0 [ 117.856004][ T9025] ? __rcu_read_lock+0x36/0x50 [ 117.860815][ T9025] ? __rcu_read_lock+0x36/0x50 [ 117.865608][ T9025] handle_mm_fault+0xc4c/0x2ac0 [ 117.870556][ T9025] exc_page_fault+0x3b9/0x650 [ 117.875278][ T9025] asm_exc_page_fault+0x26/0x30 [ 117.880215][ T9025] RIP: 0033:0x7f7a6b59d500 [ 117.884645][ T9025] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 117.904356][ T9025] RSP: 002b:00007f7a6a9584b0 EFLAGS: 00010202 [ 117.910476][ T9025] RAX: 0000000000006005 RBX: 00007f7a6a958550 RCX: 0000000000000022 [ 117.918515][ T9025] RDX: 0000000000000fff RSI: 0000000000000400 RDI: 00007f7a6a9585f0 [ 117.926499][ T9025] RBP: 0000000000000023 R08: 00007f7a62539000 R09: 0000000000000004 [ 117.934482][ T9025] R10: 0000000020000942 R11: 0000000000000441 R12: 0000000000000301 [ 117.942558][ T9025] R13: 00007f7a6b757f80 R14: 0000000000000013 R15: 00007f7a6a9585f0 [ 117.950561][ T9025] [ 117.953718][ T9025] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 117.997901][ T9029] loop3: detected capacity change from 0 to 512 [ 118.006524][ T9027] loop1: detected capacity change from 0 to 512 [ 118.029850][ T9029] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.067185][ T9027] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1408: attempt to clear invalid blocks 1 len 1 [ 118.099670][ T9027] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1408: bg 0: block 343: padding at end of block bitmap is not set [ 118.114988][ T9027] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 118.124886][ T9027] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1408: invalid indirect mapped block 1819239214 (level 0) [ 118.143125][ T9027] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1408: invalid indirect mapped block 1819239214 (level 1) [ 118.159167][ T9027] EXT4-fs (loop1): 1 truncate cleaned up [ 118.171436][ T9027] tipc: Enabling of bearer rejected, failed to enable media [ 118.220808][ T9027] futex_wake_op: syz.1.1408 tries to shift op by 144; fix this program [ 118.255524][ T9038] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.382730][ T9053] loop1: detected capacity change from 0 to 4096 [ 118.400095][ T9053] EXT4-fs: Ignoring removed nobh option [ 118.432738][ T9053] netlink: 'syz.1.1414': attribute type 7 has an invalid length. [ 118.525884][ T9069] serio: Serial port pts0 [ 118.636275][ T9075] loop0: detected capacity change from 0 to 128 [ 118.644669][ T9075] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 118.709758][ T9081] loop1: detected capacity change from 0 to 2048 [ 118.754480][ T9089] loop0: detected capacity change from 0 to 512 [ 118.792749][ T9089] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.844178][ T9080] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.883989][ T9084] usb usb8: usbfs: process 9084 (syz.4.1418) did not claim interface 1 before use [ 118.894205][ T9096] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 22 with error 28 [ 118.906651][ T9096] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.906651][ T9096] [ 118.916343][ T9096] EXT4-fs (loop1): Total free blocks count 0 [ 118.922338][ T9096] EXT4-fs (loop1): Free/Dirty block details [ 118.928308][ T9096] EXT4-fs (loop1): free_blocks=2415919104 [ 118.934064][ T9096] EXT4-fs (loop1): dirty_blocks=32 [ 118.939279][ T9096] EXT4-fs (loop1): Block reservation details [ 118.945290][ T9096] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 118.962431][ T29] audit: type=1400 audit(1720843324.595:789): avc: denied { bind } for pid=9093 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.059543][ T29] audit: type=1400 audit(1720843324.695:790): avc: denied { write } for pid=9093 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.232895][ T9125] loop3: detected capacity change from 0 to 512 [ 119.242402][ T9125] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1424: attempt to clear invalid blocks 1 len 1 [ 119.257277][ T9125] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1424: bg 0: block 343: padding at end of block bitmap is not set [ 119.272071][ T9125] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 119.282984][ T9125] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1424: invalid indirect mapped block 1819239214 (level 0) [ 119.298874][ T9125] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1424: invalid indirect mapped block 1819239214 (level 1) [ 119.313325][ T9125] EXT4-fs (loop3): 1 truncate cleaned up [ 119.324568][ T9125] tipc: Enabling of bearer rejected, failed to enable media [ 119.333857][ T9125] futex_wake_op: syz.3.1424 tries to shift op by 144; fix this program [ 119.515306][ T9133] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.529127][ T55] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 119.541382][ T55] EXT4-fs (loop1): This should not happen!! Data will be lost [ 119.541382][ T55] [ 119.641887][ T9142] loop1: detected capacity change from 0 to 512 [ 119.671140][ T9142] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.1429: corrupted in-inode xattr: invalid ea_ino [ 119.701406][ T9142] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1429: couldn't read orphan inode 15 (err -117) [ 119.714645][ T29] audit: type=1400 audit(1720843325.345:791): avc: denied { read } for pid=9151 comm="syz.4.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.886161][ T9167] loop3: detected capacity change from 0 to 512 [ 119.908749][ T9167] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.964873][ T9173] loop0: detected capacity change from 0 to 2048 [ 120.087517][ T9168] chnl_net:caif_netlink_parms(): no params data found [ 120.126524][ T9188] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.152588][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.159724][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.167251][ T9168] bridge_slave_0: entered allmulticast mode [ 120.173972][ T9168] bridge_slave_0: entered promiscuous mode [ 120.182618][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.189783][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.208959][ T9168] bridge_slave_1: entered allmulticast mode [ 120.217437][ T9168] bridge_slave_1: entered promiscuous mode [ 120.227408][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.281215][ T29] audit: type=1400 audit(1720843325.915:792): avc: denied { write } for pid=9217 comm="syz.0.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.286522][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.312360][ T29] audit: type=1400 audit(1720843325.955:793): avc: denied { ioctl } for pid=9217 comm="syz.0.1440" path="socket:[22451]" dev="sockfs" ino=22451 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 120.341278][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.361149][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.362206][ T9222] loop0: detected capacity change from 0 to 128 [ 120.378580][ T9222] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 120.392279][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 120.404544][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 120.417512][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 120.427891][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.439932][ T9168] team0: Port device team_slave_0 added [ 120.446862][ T9168] team0: Port device team_slave_1 added [ 120.467982][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.474990][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.500959][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.524696][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.531753][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.557769][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.592860][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.603971][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1446'. [ 120.632751][ T9235] loop1: detected capacity change from 0 to 512 [ 120.649907][ T9237] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9237 comm=syz.4.1446 [ 120.675035][ T9235] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.687296][ T9237] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1446'. [ 120.700752][ T9168] hsr_slave_0: entered promiscuous mode [ 120.707987][ T9237] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1446'. [ 120.717503][ T9168] hsr_slave_1: entered promiscuous mode [ 120.725825][ T9168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.733457][ T9168] Cannot create hsr debugfs directory [ 120.757722][ T9247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.793638][ T28] bridge_slave_1: left allmulticast mode [ 120.799506][ T28] bridge_slave_1: left promiscuous mode [ 120.805211][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.819672][ T28] bridge_slave_0: left allmulticast mode [ 120.825484][ T28] bridge_slave_0: left promiscuous mode [ 120.831168][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.889885][ T9256] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.923840][ T9264] loop1: detected capacity change from 0 to 128 [ 120.952330][ T9264] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 121.037977][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.054617][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.065586][ T28] bond0 (unregistering): Released all slaves [ 121.085053][ T9251] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1449'. [ 121.094477][ T9259] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1453'. [ 121.131909][ T28] tipc: Left network mode [ 121.183367][ T29] audit: type=1400 audit(1720843326.815:794): avc: denied { ioctl } for pid=9296 comm="syz.0.1457" path="socket:[23119]" dev="sockfs" ino=23119 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 121.234999][ T29] audit: type=1400 audit(1720843326.855:795): avc: denied { wake_alarm } for pid=9280 comm="syz.1.1454" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.256277][ T29] audit: type=1400 audit(1720843326.865:796): avc: denied { read } for pid=9296 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.313666][ T28] hsr_slave_0: left promiscuous mode [ 121.327800][ T28] hsr_slave_1: left promiscuous mode [ 121.337930][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.345488][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.362901][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.370501][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.383689][ T28] veth1_macvtap: left promiscuous mode [ 121.389299][ T28] veth0_macvtap: left promiscuous mode [ 121.394959][ T28] veth1_vlan: left promiscuous mode [ 121.400463][ T28] veth0_vlan: left promiscuous mode [ 121.416679][ T9321] loop0: detected capacity change from 0 to 512 [ 121.448054][ T9321] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.511478][ T9325] FAULT_INJECTION: forcing a failure. [ 121.511478][ T9325] name failslab, interval 1, probability 0, space 0, times 0 [ 121.524191][ T9325] CPU: 1 PID: 9325 Comm: syz.0.1462 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 121.534281][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 121.544361][ T9325] Call Trace: [ 121.547656][ T9325] [ 121.550669][ T9325] dump_stack_lvl+0xf2/0x150 [ 121.555296][ T9325] dump_stack+0x15/0x20 [ 121.559527][ T9325] should_fail_ex+0x229/0x230 [ 121.564281][ T9325] ? sk_prot_alloc+0x41/0x190 [ 121.568992][ T9325] __should_failslab+0x92/0xa0 [ 121.573850][ T9325] should_failslab+0x9/0x20 [ 121.578440][ T9325] kmem_cache_alloc_noprof+0x4c/0x290 [ 121.583870][ T9325] ? security_inode_alloc+0x32/0xd0 [ 121.589093][ T9325] sk_prot_alloc+0x41/0x190 [ 121.593630][ T9325] sk_alloc+0x33/0x360 [ 121.597799][ T9325] ? inet6_create+0x392/0x830 [ 121.602491][ T9325] inet6_create+0x3b1/0x830 [ 121.607145][ T9325] __sock_create+0x2db/0x4f0 [ 121.611766][ T9325] sock_create_kern+0x38/0x50 [ 121.616513][ T9325] l2tp_tunnel_register+0x2c7/0xd10 [ 121.621734][ T9325] l2tp_nl_cmd_tunnel_create+0x1b8/0x510 [ 121.627463][ T9325] genl_rcv_msg+0x61b/0x6c0 [ 121.632024][ T9325] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 121.638214][ T9325] netlink_rcv_skb+0x12c/0x230 [ 121.642997][ T9325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.648038][ T9325] genl_rcv+0x28/0x40 [ 121.652042][ T9325] netlink_unicast+0x58d/0x660 [ 121.656865][ T9325] netlink_sendmsg+0x5ca/0x6e0 [ 121.661661][ T9325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.666953][ T9325] __sock_sendmsg+0x140/0x180 [ 121.671632][ T9325] ____sys_sendmsg+0x312/0x410 [ 121.676535][ T9325] __sys_sendmsg+0x1e9/0x280 [ 121.681218][ T9325] __x64_sys_sendmsg+0x46/0x50 [ 121.686225][ T9325] x64_sys_call+0xb25/0x2d70 [ 121.690886][ T9325] do_syscall_64+0xc9/0x1c0 [ 121.695414][ T9325] ? clear_bhb_loop+0x55/0xb0 [ 121.700128][ T9325] ? clear_bhb_loop+0x55/0xb0 [ 121.704822][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.710735][ T9325] RIP: 0033:0x7f362caa5bd9 [ 121.715182][ T9325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.734810][ T9325] RSP: 002b:00007f362bd27048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.743266][ T9325] RAX: ffffffffffffffda RBX: 00007f362cc33f60 RCX: 00007f362caa5bd9 [ 121.751253][ T9325] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 121.759323][ T9325] RBP: 00007f362bd270a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.767307][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.775293][ T9325] R13: 000000000000000b R14: 00007f362cc33f60 R15: 00007fff4ad72348 [ 121.783276][ T9325] [ 121.787644][ T28] team0 (unregistering): Port device team_slave_1 removed [ 121.805467][ T28] team0 (unregistering): Port device team_slave_0 removed [ 121.840915][ T9328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=9328 comm=syz.4.1464 [ 121.869211][ T9329] loop0: detected capacity change from 0 to 128 [ 121.886111][ T9329] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 121.956250][ T9307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1458'. [ 121.976771][ T9333] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.044679][ T9343] FAULT_INJECTION: forcing a failure. [ 122.044679][ T9343] name failslab, interval 1, probability 0, space 0, times 0 [ 122.057369][ T9343] CPU: 1 PID: 9343 Comm: syz.3.1468 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 122.067564][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 122.069883][ T9345] loop0: detected capacity change from 0 to 1024 [ 122.077620][ T9343] Call Trace: [ 122.077631][ T9343] [ 122.077640][ T9343] dump_stack_lvl+0xf2/0x150 [ 122.077688][ T9343] dump_stack+0x15/0x20 [ 122.088691][ T9345] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.090270][ T9343] should_fail_ex+0x229/0x230 [ 122.099641][ T9345] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842e118, mo2=0000] [ 122.109238][ T9343] ? skb_clone+0x154/0x1f0 [ 122.109280][ T9343] __should_failslab+0x92/0xa0 [ 122.114412][ T9345] System zones: [ 122.122007][ T9343] should_failslab+0x9/0x20 [ 122.122056][ T9343] kmem_cache_alloc_noprof+0x4c/0x290 [ 122.122130][ T9343] skb_clone+0x154/0x1f0 [ 122.122186][ T9343] __netlink_deliver_tap+0x2bd/0x4c0 [ 122.122214][ T9343] netlink_sendskb+0x123/0x140 [ 122.126893][ T9345] 0-1 [ 122.131562][ T9343] netlink_unicast+0x291/0x660 [ 122.135090][ T9345] , 3-12 [ 122.139576][ T9343] netlink_ack+0x4c2/0x4f0 [ 122.139621][ T9343] netlink_rcv_skb+0x19c/0x230 [ 122.145006][ T9345] [ 122.181189][ T9343] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.186721][ T9343] rtnetlink_rcv+0x1c/0x30 [ 122.191162][ T9343] netlink_unicast+0x58d/0x660 [ 122.196019][ T9343] netlink_sendmsg+0x5ca/0x6e0 [ 122.200932][ T9343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.206279][ T9343] __sock_sendmsg+0x140/0x180 [ 122.211055][ T9343] ____sys_sendmsg+0x312/0x410 [ 122.215900][ T9343] __sys_sendmsg+0x1e9/0x280 [ 122.220523][ T9343] __x64_sys_sendmsg+0x46/0x50 [ 122.225368][ T9343] x64_sys_call+0xb25/0x2d70 [ 122.229991][ T9343] do_syscall_64+0xc9/0x1c0 [ 122.234554][ T9343] ? clear_bhb_loop+0x55/0xb0 [ 122.239262][ T9343] ? clear_bhb_loop+0x55/0xb0 [ 122.244067][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.250024][ T9343] RIP: 0033:0x7f84b6935bd9 [ 122.254454][ T9343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.274207][ T9343] RSP: 002b:00007f84b5bb7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.282648][ T9343] RAX: ffffffffffffffda RBX: 00007f84b6ac3f60 RCX: 00007f84b6935bd9 [ 122.290688][ T9343] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 122.298749][ T9343] RBP: 00007f84b5bb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.306739][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.314733][ T9343] R13: 000000000000000b R14: 00007f84b6ac3f60 R15: 00007ffe4a504688 [ 122.322782][ T9343] [ 122.329594][ T9345] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1467: Invalid block bitmap block 0 in block_group 0 [ 122.353247][ T9345] Quota error (device loop0): write_blk: dquota write failed [ 122.360833][ T9345] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 122.422563][ T9345] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.1467: Failed to acquire dquot type 0 [ 122.453849][ T9345] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.1467: Freeing blocks not in datazone - block = 0, count = 4096 [ 122.467594][ T9345] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1467: Invalid inode bitmap blk 0 in block_group 0 [ 122.487585][ T36] EXT4-fs error (device loop0): ext4_release_dquot:6883: comm kworker/u8:2: Failed to release dquot type 0 [ 122.529839][ T9345] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 122.586326][ T9345] EXT4-fs (loop0): 1 orphan inode deleted [ 122.595959][ T9401] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 122.613157][ T9168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.639959][ T9168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.654065][ T9404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 122.670823][ T9404] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9404 comm=syz.3.1474 [ 122.687484][ T9168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.700172][ T9168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.763322][ T9416] loop0: detected capacity change from 0 to 512 [ 122.809626][ T9422] loop3: detected capacity change from 0 to 2048 [ 122.822653][ T9416] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.846768][ T9422] loop3: p1 < > p4 [ 122.851104][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.864429][ T9168] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.866807][ T9422] loop3: p4 size 8388608 extends beyond EOD, truncated [ 122.884957][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.892075][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.911885][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.919035][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.945904][ T9168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.956403][ T9168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.187653][ T9443] sctp: [Deprecated]: syz.4.1485 (pid 9443) Use of int in max_burst socket option. [ 123.187653][ T9443] Use struct sctp_assoc_value instead [ 123.243114][ T9446] loop3: detected capacity change from 0 to 512 [ 123.294690][ T9446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 123.311794][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.322187][ T9446] System zones: 1-12 [ 123.333239][ T9446] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.354870][ T9446] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1481: invalid indirect mapped block 1819239214 (level 1) [ 123.376146][ T9446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1481: bg 0: block 361: padding at end of block bitmap is not set [ 123.392766][ T9464] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9464 comm=syz.4.1487 [ 123.409394][ T9446] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 123.430657][ T9446] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1481: attempt to clear invalid blocks 33619980 len 1 [ 123.458375][ T9446] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1481: invalid indirect mapped block 1819239214 (level 0) [ 123.474849][ T9168] veth0_vlan: entered promiscuous mode [ 123.485798][ T9446] EXT4-fs (loop3): 1 truncate cleaned up [ 123.489345][ T9168] veth1_vlan: entered promiscuous mode [ 123.512292][ T9168] veth0_macvtap: entered promiscuous mode [ 123.522685][ T9168] veth1_macvtap: entered promiscuous mode [ 123.528931][ T9446] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1481: Directory hole found for htree index block [ 123.534278][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.551718][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.561617][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.572082][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.582016][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.592488][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.602369][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.612823][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.622739][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.633254][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.648267][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.648927][ T9491] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1481: Directory hole found for htree index block [ 123.658767][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.678317][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.688224][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.698785][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.708687][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.719322][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.729197][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.739711][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.749551][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.760157][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.766643][ T9446] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1481: Directory hole found for htree index block [ 123.772418][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.796478][ T9168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.805340][ T9168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.814298][ T9168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.823119][ T9168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.835876][ T9446] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1481: Directory hole found for htree index block [ 123.941660][ T9522] /dev/md0: Can't lookup blockdev [ 123.944569][ T9521] sctp: [Deprecated]: syz.4.1495 (pid 9521) Use of int in max_burst socket option. [ 123.944569][ T9521] Use struct sctp_assoc_value instead [ 123.979907][ T9517] syzkaller0: entered promiscuous mode [ 123.985530][ T9517] syzkaller0: entered allmulticast mode [ 124.019504][ T9522] geneve2: entered promiscuous mode [ 124.024762][ T9522] geneve2: entered allmulticast mode [ 124.068487][ T9530] tipc: Started in network mode [ 124.073561][ T9530] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 124.082741][ T9530] tipc: Enabling of bearer rejected, failed to enable media [ 124.093829][ T9530] futex_wake_op: syz.4.1497 tries to shift op by 144; fix this program [ 124.118574][ T9532] loop3: detected capacity change from 0 to 512 [ 124.129767][ T9532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.151189][ T9532] EXT4-fs (loop3): 1 orphan inode deleted [ 124.157090][ T9532] EXT4-fs (loop3): 1 truncate cleaned up [ 124.171164][ T9540] bond0: entered promiscuous mode [ 124.176322][ T9540] bond_slave_0: entered promiscuous mode [ 124.182272][ T9540] bond_slave_1: entered promiscuous mode [ 124.187523][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 124.187540][ T29] audit: type=1400 audit(1720843329.815:799): avc: denied { mounton } for pid=9531 comm="syz.3.1498" path="/340/bus/bus" dev="loop3" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.273741][ T29] audit: type=1400 audit(1720843329.905:800): avc: denied { watch_reads } for pid=9549 comm="syz.2.1505" path="/4/file1" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.309766][ T9554] sctp: [Deprecated]: syz.4.1506 (pid 9554) Use of int in max_burst socket option. [ 124.309766][ T9554] Use struct sctp_assoc_value instead [ 124.325592][ T9532] loop3: detected capacity change from 512 to 0 [ 124.343880][ T3083] syz-executor: attempt to access beyond end of device [ 124.343880][ T3083] loop3: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 124.358383][ T3083] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 124.386824][ T9561] FAULT_INJECTION: forcing a failure. [ 124.386824][ T9561] name failslab, interval 1, probability 0, space 0, times 0 [ 124.387831][ T3083] syz-executor: attempt to access beyond end of device [ 124.387831][ T3083] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 124.403014][ T9561] CPU: 0 PID: 9561 Comm: syz.2.1509 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 124.413419][ T3083] buffer_io_error: 1 callbacks suppressed [ 124.413434][ T3083] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 124.423337][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 124.423357][ T9561] Call Trace: [ 124.423366][ T9561] [ 124.423375][ T9561] dump_stack_lvl+0xf2/0x150 [ 124.430526][ T3083] EXT4-fs (loop3): I/O error while writing superblock [ 124.437308][ T9561] dump_stack+0x15/0x20 [ 124.437348][ T9561] should_fail_ex+0x229/0x230 [ 124.473876][ T9561] ? skb_clone+0x154/0x1f0 [ 124.478342][ T9561] __should_failslab+0x92/0xa0 [ 124.483224][ T9561] should_failslab+0x9/0x20 [ 124.487748][ T9561] kmem_cache_alloc_noprof+0x4c/0x290 [ 124.493157][ T9561] skb_clone+0x154/0x1f0 [ 124.497446][ T9561] __netlink_deliver_tap+0x2bd/0x4c0 [ 124.502852][ T9561] netlink_unicast+0x63b/0x660 [ 124.507659][ T9561] netlink_sendmsg+0x5ca/0x6e0 [ 124.512483][ T9561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.517787][ T9561] __sock_sendmsg+0x140/0x180 [ 124.522478][ T9561] sock_sendmsg+0x96/0xe0 [ 124.526863][ T9561] splice_to_socket+0x657/0x9d0 [ 124.531745][ T9561] ? __pfx_splice_to_socket+0x10/0x10 [ 124.537129][ T9561] do_splice+0x99b/0x1150 [ 124.541588][ T9561] ? get_pid_task+0x8e/0xc0 [ 124.546149][ T9561] ? proc_fail_nth_write+0x12d/0x160 [ 124.552034][ T9561] ? __fget_files+0x1da/0x210 [ 124.556752][ T9561] __se_sys_splice+0x24c/0x390 [ 124.561527][ T9561] __x64_sys_splice+0x78/0x90 [ 124.566218][ T9561] x64_sys_call+0x297f/0x2d70 [ 124.571028][ T9561] do_syscall_64+0xc9/0x1c0 [ 124.575633][ T9561] ? clear_bhb_loop+0x55/0xb0 [ 124.580338][ T9561] ? clear_bhb_loop+0x55/0xb0 [ 124.585039][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.590961][ T9561] RIP: 0033:0x7ff51bce1bd9 [ 124.595417][ T9561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.615120][ T9561] RSP: 002b:00007ff51af63048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 124.623568][ T9561] RAX: ffffffffffffffda RBX: 00007ff51be6ff60 RCX: 00007ff51bce1bd9 [ 124.631638][ T9561] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 124.639610][ T9561] RBP: 00007ff51af630a0 R08: 0000000000007fff R09: 0000000000000000 [ 124.647604][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.655576][ T9561] R13: 000000000000000b R14: 00007ff51be6ff60 R15: 00007ffcf25af038 [ 124.663681][ T9561] [ 124.754386][ T9565] loop2: detected capacity change from 0 to 512 [ 124.766539][ T9565] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 124.998048][ T9569] loop1: detected capacity change from 0 to 512 [ 125.011296][ T50] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.040960][ T9569] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1511: attempt to clear invalid blocks 1 len 1 [ 125.075502][ C1] ================================================================== [ 125.083647][ C1] BUG: KCSAN: data-race in can_receive / can_stat_update [ 125.090724][ C1] [ 125.093147][ C1] read-write to 0xffff88811312e488 of 8 bytes by interrupt on cpu 0: [ 125.101234][ C1] can_receive+0x4e/0x1f0 [ 125.105601][ C1] can_rcv+0xe7/0x180 [ 125.109612][ C1] __netif_receive_skb+0x123/0x280 [ 125.114764][ C1] process_backlog+0x21d/0x3c0 [ 125.119577][ C1] __napi_poll+0x63/0x3c0 [ 125.123941][ C1] net_rx_action+0x324/0x740 [ 125.128564][ C1] handle_softirqs+0xc3/0x280 [ 125.133277][ C1] do_softirq+0x5e/0x90 [ 125.137468][ C1] __local_bh_enable_ip+0x6e/0x70 [ 125.142507][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 125.147465][ C1] icmp6_dst_alloc+0x2c4/0x320 [ 125.152236][ C1] mld_sendpack+0x2f6/0x6d0 [ 125.157004][ C1] mld_ifc_work+0x517/0x7e0 [ 125.161509][ C1] process_scheduled_works+0x483/0x9a0 [ 125.166980][ C1] worker_thread+0x526/0x720 [ 125.171579][ C1] kthread+0x1d1/0x210 [ 125.175668][ C1] ret_from_fork+0x4b/0x60 [ 125.180159][ C1] ret_from_fork_asm+0x1a/0x30 [ 125.184975][ C1] [ 125.187298][ C1] read to 0xffff88811312e488 of 8 bytes by interrupt on cpu 1: [ 125.194841][ C1] can_stat_update+0x31b/0x6b0 [ 125.199619][ C1] call_timer_fn+0x3a/0x300 [ 125.204132][ C1] __run_timer_base+0x417/0x640 [ 125.209002][ C1] run_timer_softirq+0x31/0x70 [ 125.213767][ C1] handle_softirqs+0xc3/0x280 [ 125.218457][ C1] do_softirq+0x5e/0x90 [ 125.222622][ C1] __local_bh_enable_ip+0x6e/0x70 [ 125.227659][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 125.232610][ C1] fib6_flush_trees+0x124/0x1f0 [ 125.237468][ C1] addrconf_dad_completed+0x46b/0x8a0 [ 125.242853][ C1] addrconf_dad_work+0x891/0xbd0 [ 125.247807][ C1] process_scheduled_works+0x483/0x9a0 [ 125.253273][ C1] worker_thread+0x526/0x720 [ 125.257871][ C1] kthread+0x1d1/0x210 [ 125.261954][ C1] ret_from_fork+0x4b/0x60 [ 125.266392][ C1] ret_from_fork_asm+0x1a/0x30 [ 125.271194][ C1] [ 125.273518][ C1] value changed: 0x000000000000684b -> 0x000000000000684c [ 125.280712][ C1] [ 125.283033][ C1] Reported by Kernel Concurrency Sanitizer on: [ 125.289178][ C1] CPU: 1 PID: 36 Comm: kworker/u8:2 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 125.299247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.309308][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 125.315318][ C1] ================================================================== [ 125.325125][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 125.335352][ T29] audit: type=1400 audit(1720843330.965:801): avc: denied { write } for pid=3072 comm="syz-executor" path="pipe:[1701]" dev="pipefs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 125.361702][ T9569] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1511: bg 0: block 343: padding at end of block bitmap is not set [ 125.395026][ T29] audit: type=1400 audit(1720843330.995:802): avc: denied { recv } for pid=9168 comm="syz-executor" saddr=10.128.0.163 src=42588 daddr=10.128.0.202 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 125.432138][ T9569] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 125.442926][ T9569] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1511: invalid indirect mapped block 1819239214 (level 0) [ 125.458618][ T9569] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1511: invalid indirect mapped block 1819239214 (level 1) [ 125.459401][ T50] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.483014][ T9569] EXT4-fs (loop1): 1 truncate cleaned up [ 125.567385][ T50] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.637820][ T50] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.712951][ T50] bridge_slave_1: left allmulticast mode [ 125.718846][ T50] bridge_slave_1: left promiscuous mode [ 125.724560][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.732658][ T50] bridge_slave_0: left allmulticast mode [ 125.738464][ T50] bridge_slave_0: left promiscuous mode [ 125.744155][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.961704][ T50] tipc: Left network mode [ 126.065823][ T50] IPVS: stopping backup sync thread 8521 ... [ 126.075731][ T50] hsr_slave_0: left promiscuous mode [ 126.081688][ T50] hsr_slave_1: left promiscuous mode [ 126.081797][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8881133b1600: rx timeout, send abort [ 126.096431][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.103995][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.111708][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.119267][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.131116][ T50] veth1_macvtap: left promiscuous mode [ 126.136765][ T50] veth0_macvtap: left promiscuous mode [ 126.142353][ T50] veth1_vlan: left promiscuous mode [ 126.147717][ T50] veth0_vlan: left promiscuous mode [ 126.238562][ T50] team0 (unregistering): Port device team_slave_1 removed [ 126.248643][ T50] team0 (unregistering): Port device team_slave_0 removed [ 126.551216][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.596346][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8881133b1600: abort rx timeout. Force session deactivation [ 126.610507][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.660251][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.719982][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.950777][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.998986][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.039690][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.079935][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.203556][ T50] bridge_slave_1: left allmulticast mode [ 127.209272][ T50] bridge_slave_1: left promiscuous mode [ 127.214979][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.223277][ T50] bridge_slave_0: left allmulticast mode [ 127.229178][ T50] bridge_slave_0: left promiscuous mode [ 127.234931][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.242974][ T50] bridge_slave_1: left allmulticast mode [ 127.248685][ T50] bridge_slave_1: left promiscuous mode [ 127.254383][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.262476][ T50] bridge_slave_0: left allmulticast mode [ 127.268263][ T50] bridge_slave_0: left promiscuous mode [ 127.273987][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.448453][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.459163][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.469235][ T50] bond0 (unregistering): Released all slaves [ 127.537299][ T50] tipc: Left network mode [ 127.541976][ T50] tipc: Left network mode [ 127.649357][ T50] hsr_slave_0: left promiscuous mode [ 127.655061][ T50] hsr_slave_1: left promiscuous mode [ 127.662271][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.669886][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.679905][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.687440][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.698198][ T50] hsr_slave_0: left promiscuous mode [ 127.703849][ T50] hsr_slave_1: left promiscuous mode [ 127.709766][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.717274][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.726156][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.733655][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.745445][ T50] veth1_macvtap: left promiscuous mode [ 127.750957][ T50] veth0_macvtap: left promiscuous mode [ 127.756487][ T50] veth1_vlan: left promiscuous mode [ 127.761828][ T50] veth0_vlan: left promiscuous mode [ 127.767799][ T50] veth1_macvtap: left promiscuous mode [ 127.773295][ T50] veth0_macvtap: left promiscuous mode [ 127.778866][ T50] veth1_vlan: left promiscuous mode [ 127.784093][ T50] veth0_vlan: left promiscuous mode [ 127.920116][ T50] team0 (unregistering): Port device team_slave_1 removed [ 127.931902][ T50] team0 (unregistering): Port device team_slave_0 removed [ 127.998264][ T50] team0 (unregistering): Port device team_slave_1 removed [ 128.008075][ T50] team0 (unregistering): Port device team_slave_0 removed [ 128.699845][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.119795][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.179477][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.238702][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.324568][ T50] bridge_slave_1: left allmulticast mode [ 129.330378][ T50] bridge_slave_1: left promiscuous mode [ 129.336082][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.344148][ T50] bridge_slave_0: left allmulticast mode [ 129.349875][ T50] bridge_slave_0: left promiscuous mode [ 129.355658][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.478429][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.487205][ T50] bond_slave_0: left promiscuous mode [ 129.494272][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.503525][ T50] bond_slave_1: left promiscuous mode [ 129.510383][ T50] bond0 (unregistering): Released all slaves [ 129.647868][ T50] hsr_slave_0: left promiscuous mode [ 129.653851][ T50] hsr_slave_1: left promiscuous mode [ 129.660369][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.667976][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.676356][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.683756][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.693757][ T50] veth1_macvtap: left promiscuous mode [ 129.699300][ T50] veth0_macvtap: left promiscuous mode [ 129.704903][ T50] veth1_vlan: left promiscuous mode [ 129.710170][ T50] veth0_vlan: left promiscuous mode [ 129.799305][ T50] team0 (unregistering): Port device team_slave_1 removed [ 129.809786][ T50] team0 (unregistering): Port device team_slave_0 removed