last executing test programs: 2.283012977s ago: executing program 2 (id=644): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x32f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000080040000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.211996113s ago: executing program 4 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000e0a080000fd03000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000899}, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x144f, 0x4, 0x9, 0x800, 0x40}) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000300)={0x631f, 0x2, [{0x2, 0x1}, {0xe, 0x1}]}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c00078008"], 0x130}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000040)=0x1) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fremovexattr(r9, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00') sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xfffffffffffffeb3, 0x2, 0x3, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.912057538s ago: executing program 3 (id=648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000010000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00000000000000e000000100000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c"], 0x1fc}}, 0x0) 1.906028859s ago: executing program 3 (id=650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB], 0x60}}, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0000000300000000000000000000000000000000000000045f21e91f1f16209844792c7d3d733511814fca3aa3ea284a8a236f657d4b5a89cc5b97701bcfbcd42dd261eb79fd7c31e6f06262ce32df4c6970a0c9c981712b91b426ebfeffffffffffffff0000000029b17df400007433cca1b26e445b6c9579e3f7eb026a0a7153ccb91c1e74"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008002}, 0x40000) 1.856866653s ago: executing program 2 (id=652): mlockall(0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x100000, 0x7, 0x0, 0x0, 0x9ac3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x100000, 0x7, 0x0, 0x0, 0x9ac3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2, 0x8000, 0x940}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$eJzs3V1v29Ydx/Ef5SfFHYJiG4IgSJOTZAUcLFMouXFgZMCqUZTNTRIFUh5sYECRNXYRRE63JAMW3xS+2BPQvYHd9WK72IsYsOu9iu1uA4rtbsBuWPCQsiVbD1btJG3y/QStKPLPc/4kFf7BSDwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ49Vct+yoEbQ2Ns1oXi0Km2OWZ63N6WY2cXNiv5KT/qdiURezWRe/fbj4Qvq/67qcvbusYvpS1N5bF96+963ZQm/9MQl9GZq2wafP9x7d73a3n5wgdkZTN/8qqXCCoDW/FcRh0Kyu+SaIQ7O6suLeXq/Hph40/Hgr7vhN40V+oRNGZsm7acqrq8vGL22FG621WrXh92be/V7FdVfMjxayAy2pFHvrQaMRtNZsTLo4jblrPv1pFuBXm8bsPOxuL09KMg0qnySoMimo4lYq5XKlUl65s3rnruvOHpvhphz3gI5FnPmHFl8zZ3fyBk6pkNb/fzpSQ0W1tKFNmaF/PNUUKVRzxPJcr/6/e9sf229//e9V+YvSD/LFl2Tr/5Xs3ZVR9X9ELkbGrjBsiTNi/nR/5vJWnuq59vRI99VVV9t6cgZtG5mrp23h12eSxz+SzOiINflqKVCsUIGaqto5Jp9jtKoVrcjVB1pXXbGM6grUkK9YW4rVkW8/UZ4i+aqqo1CRjJbk6aaMylrVqpZl5KukLYXaUEtrqqmq/yVJsqOHdr8vj9kK9YLKIwIW+oMqY1oaVf9/9kn2Oc3rv0v9f1Nln4OF/Cw2Lgb4Ckjy6/8pXX0x2QAAAAAAgBfBsf/67tjv7t+RlKgeNHz3VacFAAAAAADOkKNkQZflyP6kTe/I4fofAAAAAIDXjWPvsXMkLdof9TuHd0Kd5B8BZl5CigAAAAAA4JTsnf9X5qXEDlpxVc5U1/8AAAAAAOBr4Hd9Y+zP9sbYTXpf6xckxe0F56//WVA05+y3N7/j7FbTJdXdPObYLwA69UvO+XygXvsyL8m+8/zLTt5bPgjmwbiDn+9MGuvfiY4kMD/T38CIBJy055XZ/J0+1bVslWv5OPMP9gqyS7JeFutBwy95YeNeWdXq+ULH3+z88vHDX0nRwXbuPOxulz78uPvA5rKfztrfTRv9ZCCdwvCdcZjLMzvegr3nYtgWn1O91+XvW81Fx/br9rZ/RtXdQn9H4w7AYZ+/0fXsmF1fzGIX9w5G3E+3v5huf7lkD9nA1kdzzmEW5aNbPuxAjMiiaLO4kcXcWLqRvfTyS9spOMXvzkiV0vFjMJBFpT+LyfvC+e+xfTEui3xfLKdZ/C1taEQWy9NlceyIAMCrsnNYhewg5sfqbq889E5qX6ruTK7u7w9W92d/TBK7wow0m383MbaXotIz+pJj69C87Il19tKQM7qb15WiRpzR3VNUt7Svvxw+AylP+1gW/0+S5F7Z9vuHI1X1s3SFz0b2GzcqM+kuvP1s9+d2APzUR9sfbT+uVJZX3Pdc905Fc3Yz8pcZHc2U32wCAE7wjJ2JEc57upZFXHvw73ezqYGK982DnxSU9KE+VlcPdKv3CIGrw1td7PsZwq3sqlV9V63mwtv3zklHY8u6NfKqztbSvtjKQeyceqsMVurD2OUXfBQAAHi5rk+ow8Prf3Gg/t/SUhaxdGnodfdgLT/6hOBRseXJyb9/1nsDAIA3gx997ix2futEUdD+oLy6Wq521n0Thd6PTRTU1nwTtDp+5K1XW2u+aUdhJ/TChmlHWghqfmzijXY7jDqmHkamHcbBpn3yu8kf/R77zWqrE3hxu+FXY994YatTnZGpBbFn2hs/bATxuh/ZleO27wX1wKt2grBl4nAj8vySMbHv9wUGNb/VCepBOtky7ShoVqMt85OwsdH0Tc2PvShod8KsQduX1zFBqx5GTdtsScnUDzoEAOB19PT53qP73e72kzET+5ock0/MD2mQ75sBAPiKOSzXU6xUfIEJAQAAAAAAAAAAAAAAAAAAAACAY05y/99UE3PDbhaUDub84vyRtf6kYe04OuvEppkoTLtW75aIvUd/HxN87mBOb/f3x+y/tA381zekt+wcZXNmz76vc3ZvvLwD9/2dbI+OjEkXDl20cHAsZs/+r0M68fjPIxYlSZKMX31hcB/Oj9vAwYlZSU/mT3EIBk4TjJsBvIa+CAAA//9z/kFZ") (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") llistxattr(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0) 1.367672434s ago: executing program 1 (id=655): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[], 0xf) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x24001440) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000c40)=""/122) 1.30040697s ago: executing program 0 (id=656): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = inotify_init() write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[], 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000035000100000000000000000001000000040000800c0001"], 0x24}}, 0x0) inotify_add_watch(r3, &(0x7f0000000140)='./bus\x00', 0xc6000173) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x6, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) splice(r0, 0x0, r2, 0x0, 0x16, 0x0) 1.252034194s ago: executing program 4 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) munmap(&(0x7f000061d000/0x3000)=nil, 0x3000) munmap(&(0x7f00006fc000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mlock(&(0x7f0000465000/0x1000)=nil, 0x1000) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1, 0x0, 0x0) 1.251391124s ago: executing program 4 (id=658): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0xffffffffffffff18, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c005f9777b9c76729a3be8334cf1c0a4e45329cd90a590c5b94019b6ecab343e04b184e054e733099c3ca976b37a497381aa4acfcc943332fc028c3423ba13d12a11dc02374c04330f3a1edbb67a8cfde97ab1a7d933f69242f1b4c21dc1cf10cee829b4e6e0cfa755956ee88cfea1c6e52f34bf4df1954add768223cf426ca626247a6b6419212200451fc604703c02b639ca29312", @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="10002d800a0000000202020202020000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, r7, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7b09b99a38161cafe0ed18cba6d833826c8920da7740f7c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5faa791aa7c1704b230223110999ac29d8ebc23529109da5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc903659f14e9909223c010c0778112922ee2c18e3bf2a77"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f0d4aeb7f1cdf18002cc8773be17107f6fe1366729ef73b4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc8a3a877f7697fa109291e6a8164052f848af576d39eec5"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24084880}, 0x40) 1.247872295s ago: executing program 0 (id=659): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = inotify_init() write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[], 0x15) inotify_add_watch(r3, &(0x7f0000000140)='./bus\x00', 0xc6000173) splice(r0, 0x0, r2, 0x0, 0x16, 0x0) (fail_nth: 5) 997.904866ms ago: executing program 0 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000000c0021"], 0x48}}, 0x0) 943.0295ms ago: executing program 3 (id=661): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0xe000, 0x130}, 0x18) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000002c0)={0x5, &(0x7f0000000140)=[{0x5, 0x6, 0x1, 0x6}, {0x2, 0x80, 0x0, 0xe}, {0x8492, 0x9, 0x4, 0x2}, {0x8000, 0x0, 0x8, 0xc8}, {0x4, 0x3, 0x0, 0xfffffe01}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000008468e2729f386dc0b2992d32a5773535f97c4c92a64d600dfdecba2baec1c5e184537a077ee0d35826427a189aed76c25530eea7089a960300007e7292ac75e6e8d6b4d8bebf3bd70ffe4731f869ad7abe52653755590cea4ed966fae4f0d949d51be3fbd364c6661ff53bca18a7441e2e5c290924d7e2e0dc868fd59fc25410dfc5a95e287731b85e75e060af5638b51099f5da67eea64bbb9d7975da7cc0199ab1e4a9876c3a6d2dc242b25c8fe63e1eeda65f4fcbaadc0684440bb341270ccf", @ANYRES16=r2, @ANYBLOB="030300000000000000000a06000028000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e3000000000000000000000001400018008000300030000000800030003000000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x8}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x4, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000380), 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5d0201329b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160f9c83d1ce575225460dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002da3020000c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd696e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd8d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e700"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 942.853421ms ago: executing program 2 (id=662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000010000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000080ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00000000000000e000000100000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c"], 0x1fc}}, 0x0) 904.173164ms ago: executing program 2 (id=663): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) syz_io_uring_setup(0x4603, &(0x7f00000006c0), 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x3, 0x362, [], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x338) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000500)='./file0\x00', 0x2010048, &(0x7f0000001740)=ANY=[], 0xd, 0x2a9, &(0x7f0000000240)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) 699.510051ms ago: executing program 4 (id=664): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x32f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000060000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 649.957055ms ago: executing program 1 (id=665): socket$kcm(0x29, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000340)={[{@resuid}, {@noblock_validity}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9b}}, {@nodiscard}]}, 0x0, 0x466, &(0x7f0000000400)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) io_setup(0x6, &(0x7f0000000240)=0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000f40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) 649.498495ms ago: executing program 3 (id=666): prctl$PR_SET_FP_MODE(0x2d, 0x3) prctl$PR_SET_FP_MODE(0x2d, 0x2) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x3) prctl$PR_SET_FP_MODE(0x2d, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x2) prctl$PR_SET_FP_MODE(0x2d, 0x3) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x5) prctl$PR_SET_FP_MODE(0x2d, 0x2) prctl$PR_SET_FP_MODE(0x2d, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x3) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x2) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x81c7, 0xf, 0xce, 0x1, 0x8}, 0x14) prctl$PR_SET_FP_MODE(0x2d, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x6abd9f04964dc2a3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x10}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xffff}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x90}}, 0x20048801) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x3) 649.255775ms ago: executing program 4 (id=667): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000340)={[{@nojournal_checksum}, {@usrjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7d2, &(0x7f0000001940)="$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") chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) brk(0x20ffc004) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b050000000000000049714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdeb003588aa623fa71f31bf0f871ab5c2ff8a6fc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9db000000000000af0000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb16a443925ea5f8cc80fcf546a64027f0158b331fe45653143401c6fe5e4fad8a898dcebe77b6c861bd4847643b5bc8e8b46426ba214e9a2d9f0117879929a463649dda957aed4e007e98ad8212abf14d09345005b6f618aa69400000001000000004353bd9969fd727162de2275f0f570aad3a69d23b50e900cb3e7b1ef01e52d02fc7bee53b39ab1181a8a56b7aec9402e78eee057adcfd4b57ec057992666b33453c4a6e8dcf20809b28396dd23347b2f"], 0x0, 0x4}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x45d94bbab7f4fbf6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x275a, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c00028005000900010000000400060014000700200100000000000000000000000000010500080001"], 0x6c}, 0x1, 0xba01}, 0x0) 647.681256ms ago: executing program 0 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) munmap(&(0x7f000061d000/0x3000)=nil, 0x3000) munmap(&(0x7f00006fc000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mlock(&(0x7f0000465000/0x1000)=nil, 0x1000) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1, 0x0, 0x0) 614.687509ms ago: executing program 2 (id=669): r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x4f}, 0x90) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x8, 0x0, 0xfffffffc, 0x4, 0x3, 0x0, 0x400}, 0x0, 0x0, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x3, @private2, 0xfffffffd}]}, &(0x7f0000000180)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f000044d000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, 0x0, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000340)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) write$cgroup_type(r6, &(0x7f0000000000), 0x180600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='host1x_channel_submit\x00', r7}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) setsockopt$sock_int(r5, 0x1, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) syz_io_uring_setup(0x7, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x13e, 0x0, r0}, 0x0, 0x0) r9 = inotify_init() r10 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r9, &(0x7f0000000240)='./file0\x00', 0x847) write$binfmt_elf32(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff3ae644850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000680)='net/if_inet6\x00') 572.144572ms ago: executing program 3 (id=670): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = inotify_init() write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[], 0x15) inotify_add_watch(r3, &(0x7f0000000140)='./bus\x00', 0xc6000173) splice(r0, 0x0, r2, 0x0, 0x16, 0x0) 571.967842ms ago: executing program 3 (id=671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB], 0x60}}, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0000000900000000000000000000000000000000000000045f21e91f1f16209844792c7d3d733511814fca3aa3ea284a8a236f657d4b5a89cc5b97701bcfbcd42dd261eb79fd7c31e6f06262ce32df4c6970a0c9c981712b91b426ebfeffffffffffffff0000000029b17df400007433cca1b26e445b6c9579e3f7eb026a0a7153ccb91c1e74"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008002}, 0x40000) 560.713803ms ago: executing program 0 (id=672): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0x3}, 0x10a38a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0x3}, 0x10a38a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0041b6cb30000000b7020000f3ffffb0150000008600000095a87dd73cb3023c478454a446586c9d957a3c0e265d98ca7d34de12c743cdb1b4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x81, 0x6, 0x5, 0x0, 0x3], 0x2, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x81, 0x6, 0x5, 0x0, 0x3], 0x2, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r4, 0x0) (async) r5 = syz_open_pts(r4, 0x0) r6 = dup(r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r8}, 0x10) r9 = open(&(0x7f0000000100)='.\x00', 0x555502, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) r10 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) dup3(r10, r9, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5381, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x1001, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000100)=0x11) (async) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000100)=0x11) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r12, 0x1, &(0x7f00000028c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x2}]) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4018, r11}, 0x18) syz_emit_ethernet(0x34e, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) 553.176073ms ago: executing program 1 (id=673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000010000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000002b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00000000000000e000000100000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c"], 0x1fc}}, 0x0) 487.989279ms ago: executing program 1 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c400000010000100"/20, @ANYRES32=r2, @ANYBLOB="20000000000000009c001680980001800c000700ff070000050000000c000400090000000200000014000a00010400000000000000000000100000000c0004c027428991e16166000c000900070000000600000040000c80140001a100"], 0xc4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$inet(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xe7, 0x0) lseek(r4, 0x7fffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_complete(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x7f, 0xa, 0x100, r6, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0xb}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000008010400000000000000000000000006000240000000000900010073797a310000000014000480080004400000000008000340000000000500030021"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 356.684841ms ago: executing program 4 (id=675): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) io_uring_setup(0x0, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000057c0)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c0002800600010000000000280003800c00010000000000000000000c00010000000000000000000c00010000000000000000001c0004800400010000000000000000000c000100000000000e0000000c0002000000008a8e743037"], 0x9c}, 0x1, 0xba01}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000201100081006000000002000020d3"]) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@local, @multicast1, 0x0, "ea0f38d1a15892def51090fffff3cd08000000e4353d68bcfa00"}, 0x3c) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000140)=0x9, 0x4) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8, 0x2}, {0x10}}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) r6 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x8ea3}) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000), 0x1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) 272.953757ms ago: executing program 0 (id=676): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000002"], 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') r1 = memfd_create(&(0x7f0000000540)='D\xa3\xd5Wj\x00\x00\x8b\xa2\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x010X\x91\xfd\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17~h\xff\xff\xff\xff\xff\xffJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85Q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\x1a%\\\xe0N\x9b6\xfa\x00\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5\r\xfe\x81\xa8nYM_\b\x85\x1av\x9da\x8d\x1c\xb0=B\f\xe7\x87\x96o\xad\x04\xb0\x7fQ\x83\xffS\xe4\x14eU/\xcc\xcf}h\xbbC\x1dU\x01\x1f\xba\xf8\xca\x06h:\xbd\x8b\x95\x15\x83', 0x0) r2 = dup3(r0, r1, 0x0) fchdir(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000100), 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x800041}, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x0) io_uring_setup(0x66b, &(0x7f0000000240)={0x0, 0x0, 0x2}) 11.93153ms ago: executing program 1 (id=677): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) ioprio_set$pid(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040), 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000300)='K', 0x1}], 0x2) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) ptrace$poke(0x4, r5, &(0x7f0000000440), 0xeb1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="cde4debd8e15e9", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e0001006970366772657461700000001000028006000e000300000004001200"], 0x44}}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000880)='./file1\x00', 0x2000, &(0x7f0000000680)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r7, @ANYBLOB="808051895a9a38eb372e158620f37a85385b09000000f58fc917c6f18436d86e8b0c667047623fb8ec01e80b643a6964876038f870767dc14846baaef15732ab"], 0x1, 0x127a, &(0x7f0000001b00)="$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") r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500140600fe8000000000000000000000000000aaff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="44c2004018780000"], 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x6, 0x0, @fd=r4, 0x6, 0x0, 0x2, 0x0, 0x0, {0x0, r7}}) (async) io_uring_enter(r4, 0x184c, 0x20e6, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/230], 0x138}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 11.42837ms ago: executing program 1 (id=678): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) r2 = signalfd(r0, &(0x7f0000000100)={[0x4823]}, 0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x0, 0x0) ioctl$sock_ifreq(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x800b, 0x4, 0x800}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@cgroup=r2, r2, 0x2f, 0x0, 0x0, @link_fd=r3, r1}, 0xffffffcc) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x3, 0x2, 0x3}}, 0x4b) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) setsockopt(r7, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000050001000600773070e7040000000000140007800800060000000000080013400000000005000500020000000900020073797a320000000012000300686073683a6e65742c706f7274000000"], 0x60}}, 0x0) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) close(r7) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0x8688}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={'ip6gre0\x00', {0x2, 0x4e21, @empty}}) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) write(r10, 0x0, 0x0) 0s ago: executing program 2 (id=679): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) syz_io_uring_setup(0x4603, &(0x7f00000006c0), 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x3, 0x362, [], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x338) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000500)='./file0\x00', 0x2010048, &(0x7f0000001740)=ANY=[], 0xd, 0x2a9, &(0x7f0000000240)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) kernel console output (not intermixed with test programs): 9 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 68.609667][ T4375] RSP: 002b:00007f251ace1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.618256][ T4375] RAX: ffffffffffffffda RBX: 00007f251c205f80 RCX: 00007f251c0689df [ 68.626258][ T4375] RDX: 0000000000000866 RSI: 0000000020001100 RDI: 00000000000000c8 [ 68.634381][ T4375] RBP: 00007f251ace1090 R08: 0000000000000000 R09: 0000000000000000 [ 68.642488][ T4375] R10: 0000000000000866 R11: 0000000000000293 R12: 0000000000000001 [ 68.650667][ T4375] R13: 0000000000000000 R14: 00007f251c205f80 R15: 00007ffd2a490238 [ 68.659511][ T4375] [ 68.724683][ T4382] loop1: detected capacity change from 0 to 1764 [ 68.747014][ T29] audit: type=1400 audit(1724883657.516:394): avc: denied { mount } for pid=4381 comm="syz.1.167" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 68.754354][ T4382] hugetlbfs: syz.1.167 (4382): Using mlock ulimits for SHM_HUGETLB is obsolete [ 68.811507][ T29] audit: type=1400 audit(1724883657.556:395): avc: denied { execute } for pid=4384 comm="syz.4.150" path="/0/cgroup.stat" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.923531][ T29] audit: type=1400 audit(1724883657.686:396): avc: denied { read } for pid=4389 comm="syz.2.170" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.947409][ T29] audit: type=1400 audit(1724883657.686:397): avc: denied { open } for pid=4389 comm="syz.2.170" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.980388][ T29] audit: type=1400 audit(1724883657.696:398): avc: denied { unmount } for pid=4044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.028804][ T4397] loop1: detected capacity change from 0 to 512 [ 69.048459][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 69.068163][ T4397] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.171: casefold flag without casefold feature [ 69.082188][ T4397] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.171: couldn't read orphan inode 15 (err -117) [ 69.104153][ T4397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.118554][ T4405] loop4: detected capacity change from 0 to 2048 [ 69.127100][ T4405] EXT4-fs: dax option not supported [ 69.163988][ T4044] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.303557][ T4413] loop4: detected capacity change from 0 to 1024 [ 69.338581][ T4413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.348485][ T4420] loop1: detected capacity change from 0 to 164 [ 69.366093][ T4420] Unable to read rock-ridge attributes [ 69.373272][ T4420] Unable to read rock-ridge attributes [ 69.445566][ C0] hrtimer: interrupt took 34265 ns [ 69.530563][ T4048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.852298][ T4437] loop4: detected capacity change from 0 to 256 [ 70.721708][ T4441] loop2: detected capacity change from 0 to 512 [ 70.762269][ T4441] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.186: casefold flag without casefold feature [ 70.776289][ T4441] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.186: couldn't read orphan inode 15 (err -117) [ 70.789402][ T4441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.817844][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.917856][ T4463] loop2: detected capacity change from 0 to 2048 [ 70.946118][ T4463] loop2: p1 < > p4 [ 70.950556][ T4463] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.991832][ T4465] loop2: detected capacity change from 0 to 512 [ 70.999782][ T4465] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.193: casefold flag without casefold feature [ 71.013858][ T4465] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.193: couldn't read orphan inode 15 (err -117) [ 71.026955][ T4465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.612698][ T4474] netlink: 'syz.3.195': attribute type 16 has an invalid length. [ 71.620885][ T4474] netlink: 52250 bytes leftover after parsing attributes in process `syz.3.195'. [ 71.887687][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.190472][ T4481] netlink: 'syz.2.197': attribute type 9 has an invalid length. [ 72.201333][ T4481] bond0: entered promiscuous mode [ 72.206702][ T4481] bond_slave_0: entered promiscuous mode [ 72.212613][ T4481] bond_slave_1: entered promiscuous mode [ 72.219015][ T4481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.227206][ T4481] bond0: left promiscuous mode [ 72.232135][ T4481] bond_slave_0: left promiscuous mode [ 72.237879][ T4481] bond_slave_1: left promiscuous mode [ 72.302832][ T4486] loop2: detected capacity change from 0 to 512 [ 72.310706][ T4486] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.198: casefold flag without casefold feature [ 72.323880][ T4486] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.198: couldn't read orphan inode 15 (err -117) [ 72.336696][ T4486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.362934][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.575176][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 72.575192][ T29] audit: type=1400 audit(1724883661.338:419): avc: denied { recv } for pid=4498 comm="syz.1.201" saddr=10.128.0.163 src=30030 daddr=10.128.0.176 dest=44416 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 72.640372][ T29] audit: type=1400 audit(1724883661.378:420): avc: denied { read write } for pid=4055 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.665863][ T29] audit: type=1400 audit(1724883661.378:421): avc: denied { open } for pid=4055 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.692493][ T29] audit: type=1400 audit(1724883661.378:422): avc: denied { ioctl } for pid=4055 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.720451][ T29] audit: type=1400 audit(1724883661.388:423): avc: denied { write } for pid=4498 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.740713][ T29] audit: type=1400 audit(1724883661.388:424): avc: denied { prog_load } for pid=4498 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.761417][ T29] audit: type=1400 audit(1724883661.388:425): avc: denied { bpf } for pid=4498 comm="syz.1.201" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.782847][ T29] audit: type=1400 audit(1724883661.388:426): avc: denied { perfmon } for pid=4498 comm="syz.1.201" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.804056][ T29] audit: type=1400 audit(1724883661.398:427): avc: denied { prog_run } for pid=4498 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.823694][ T29] audit: type=1400 audit(1724883661.398:428): avc: denied { write } for pid=4498 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 72.882359][ T4511] loop3: detected capacity change from 0 to 256 [ 73.038971][ T4519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.052171][ T4519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.064833][ T4519] bond0 (unregistering): Released all slaves [ 73.444018][ T4523] loop1: detected capacity change from 0 to 128 [ 73.450890][ T4523] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.463488][ T4523] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.496490][ T4528] loop1: detected capacity change from 0 to 512 [ 73.506248][ T4528] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.209: casefold flag without casefold feature [ 73.519347][ T4528] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.209: couldn't read orphan inode 15 (err -117) [ 73.531964][ T4528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.557929][ T4044] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.931166][ T4558] loop3: detected capacity change from 0 to 512 [ 73.941630][ T4558] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.953882][ T4558] EXT4-fs (loop3): 1 truncate cleaned up [ 73.960281][ T4558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.974408][ T4558] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.217: Unrecognised inode hash code 20 [ 73.986205][ T4558] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.217: Corrupt directory, running e2fsck is recommended [ 74.009127][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.150882][ T4565] loop3: detected capacity change from 0 to 2048 [ 74.327878][ T4567] loop3: detected capacity change from 0 to 1024 [ 74.350804][ T4567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.380879][ T4567] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 74.388652][ T4567] netlink: 208132 bytes leftover after parsing attributes in process `syz.3.219'. [ 74.413087][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.435458][ T4573] loop3: detected capacity change from 0 to 512 [ 74.444462][ T4573] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.220: casefold flag without casefold feature [ 74.457893][ T4573] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.220: couldn't read orphan inode 15 (err -117) [ 74.470803][ T4573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.496696][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.677662][ T4585] loop3: detected capacity change from 0 to 8192 [ 74.746430][ T4585] loop3: p1 p4 [ 74.755221][ T4585] loop3: p4 start 50689 is beyond EOD, truncated [ 74.773347][ T4590] loop2: detected capacity change from 0 to 256 [ 74.803958][ T4598] sg_read: process 82 (syz.2.226) changed security contexts after opening file descriptor, this is not allowed. [ 74.894382][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 74.926989][ T4611] loop2: detected capacity change from 0 to 1024 [ 74.933677][ T4611] ext4: Unknown parameter 'pcr' [ 75.004680][ T4616] syzkaller0: entered promiscuous mode [ 75.010240][ T4616] syzkaller0: entered allmulticast mode [ 75.060459][ T1699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.115798][ T1699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.180150][ T1699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.403597][ T1699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.632217][ T4620] chnl_net:caif_netlink_parms(): no params data found [ 75.647141][ T1699] bridge_slave_1: left allmulticast mode [ 75.652853][ T1699] bridge_slave_1: left promiscuous mode [ 75.658692][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.667012][ T1699] bridge_slave_0: left allmulticast mode [ 75.672754][ T1699] bridge_slave_0: left promiscuous mode [ 75.678656][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.697850][ T4641] loop3: detected capacity change from 0 to 512 [ 75.789164][ T1699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.799730][ T1699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.809887][ T1699] bond0 (unregistering): Released all slaves [ 75.820258][ T4642] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 75.854059][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.861355][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.870981][ T4620] bridge_slave_0: entered allmulticast mode [ 75.878349][ T4620] bridge_slave_0: entered promiscuous mode [ 75.884241][ T4650] loop3: detected capacity change from 0 to 512 [ 75.886359][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.898603][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.905323][ T4650] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 75.906198][ T4620] bridge_slave_1: entered allmulticast mode [ 75.924237][ T4620] bridge_slave_1: entered promiscuous mode [ 75.951589][ T4650] netlink: 'syz.3.238': attribute type 24 has an invalid length. [ 75.968555][ T4620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.988102][ T1699] hsr_slave_0: left promiscuous mode [ 75.993528][ T4652] loop2: detected capacity change from 0 to 128 [ 76.001255][ T1699] hsr_slave_1: left promiscuous mode [ 76.007650][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.009059][ T4652] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 76.015245][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.022718][ T4652] FAT-fs (loop2): Filesystem has been set read-only [ 76.037186][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.045091][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.055541][ T1699] veth1_macvtap: left promiscuous mode [ 76.061107][ T1699] veth0_macvtap: left promiscuous mode [ 76.066745][ T1699] veth1_vlan: left promiscuous mode [ 76.072035][ T1699] veth0_vlan: left promiscuous mode [ 76.173067][ T1699] team0 (unregistering): Port device team_slave_1 removed [ 76.189103][ T1699] team0 (unregistering): Port device team_slave_0 removed [ 76.233774][ T4620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.280508][ T4620] team0: Port device team_slave_0 added [ 76.292200][ T4620] team0: Port device team_slave_1 added [ 76.325660][ T4620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.332731][ T4620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.358699][ T4620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.384750][ T4620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.392905][ T4620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.419838][ T4620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.489605][ T4620] hsr_slave_0: entered promiscuous mode [ 76.497859][ T4620] hsr_slave_1: entered promiscuous mode [ 76.504125][ T4620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.511841][ T4620] Cannot create hsr debugfs directory [ 77.105340][ T4620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.124574][ T4620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.147255][ T4620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.171480][ T4620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.258040][ T4620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.297901][ T4620] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.321682][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.328825][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.357688][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.365056][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.411205][ T4620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.522322][ T4620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.799032][ T4620] veth0_vlan: entered promiscuous mode [ 77.821068][ T4620] veth1_vlan: entered promiscuous mode [ 77.848327][ T4620] veth0_macvtap: entered promiscuous mode [ 77.868119][ T4620] veth1_macvtap: entered promiscuous mode [ 77.889190][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.899734][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.909714][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.920791][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.930699][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.941268][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.951134][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.961643][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.018869][ T4620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.036917][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.047423][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.057354][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.067970][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.077989][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.088484][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.098354][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.108844][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.121455][ T4620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.135357][ T4620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.144511][ T4620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.153397][ T4620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.162385][ T4620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.191773][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 78.191787][ T29] audit: type=1400 audit(1724883666.958:571): avc: denied { mounton } for pid=4620 comm="syz-executor" path="/root/syzkaller.TD9Vfr/syz-tmp" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.254367][ T29] audit: type=1400 audit(1724883666.998:572): avc: denied { mount } for pid=4620 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.277124][ T29] audit: type=1400 audit(1724883666.998:573): avc: denied { mount } for pid=4620 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.299651][ T29] audit: type=1400 audit(1724883667.008:574): avc: denied { mounton } for pid=4620 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.354118][ T29] audit: type=1400 audit(1724883667.018:575): avc: denied { connect } for pid=4782 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.373959][ T29] audit: type=1400 audit(1724883667.018:576): avc: denied { write } for pid=4782 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.393670][ T29] audit: type=1400 audit(1724883667.018:577): avc: denied { read } for pid=4782 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.414314][ T29] audit: type=1400 audit(1724883667.108:578): avc: denied { name_bind } for pid=4786 comm="syz.1.258" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 78.436205][ T29] audit: type=1400 audit(1724883667.108:579): avc: denied { create } for pid=4784 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.458276][ T29] audit: type=1400 audit(1724883667.208:580): avc: denied { create } for pid=4791 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.497297][ T4792] loop1: detected capacity change from 0 to 256 [ 78.619809][ T4785] openvswitch: netlink: ufid size 62 bytes exceeds the range (1, 16) [ 78.627968][ T4785] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 78.641490][ T4806] loop4: detected capacity change from 0 to 512 [ 78.648797][ T4806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.667945][ T4806] EXT4-fs (loop4): 1 truncate cleaned up [ 78.674118][ T4806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.687829][ T4806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.722879][ T4785] SELinux: Context *)&^]* is not valid (left unmapped). [ 78.901418][ T4821] loop3: detected capacity change from 0 to 128 [ 78.928142][ T3283] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 78.936415][ T3283] FAT-fs (loop3): Filesystem has been set read-only [ 78.943266][ T3283] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 78.986678][ T4830] loop3: detected capacity change from 0 to 128 [ 79.037770][ T4830] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.057349][ T4830] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.098043][ T4830] netlink: 'syz.3.271': attribute type 3 has an invalid length. [ 79.160261][ T4830] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 79.339584][ T4055] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.547672][ T4838] chnl_net:caif_netlink_parms(): no params data found [ 79.583340][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.590492][ T4838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.599301][ T4838] bridge_slave_0: entered allmulticast mode [ 79.606083][ T4838] bridge_slave_0: entered promiscuous mode [ 79.614848][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.622268][ T4838] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.629511][ T4838] bridge_slave_1: entered allmulticast mode [ 79.636492][ T4838] bridge_slave_1: entered promiscuous mode [ 79.655051][ T4838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.670537][ T4838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.700755][ T4838] team0: Port device team_slave_0 added [ 79.707932][ T4838] team0: Port device team_slave_1 added [ 79.732630][ T4838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.739655][ T4838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.765886][ T4838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.768322][ T4838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.783526][ T4838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.809715][ T4838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.864014][ T4838] hsr_slave_0: entered promiscuous mode [ 79.870606][ T4838] hsr_slave_1: entered promiscuous mode [ 79.879212][ T4838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.888689][ T4838] Cannot create hsr debugfs directory [ 79.980981][ T4838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.009870][ T4874] loop4: detected capacity change from 0 to 512 [ 80.016890][ T4874] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.028941][ T4874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 80.037114][ T4874] System zones: 1-12 [ 80.042041][ T4874] EXT4-fs (loop4): 1 truncate cleaned up [ 80.049440][ T4874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.052410][ T4838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.086336][ T4620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.107840][ T4879] loop4: detected capacity change from 0 to 512 [ 80.117551][ T4879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.130873][ T4879] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.142332][ T4838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.158548][ T4879] netlink: 100 bytes leftover after parsing attributes in process `syz.4.284'. [ 80.183106][ T4620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.207275][ T4838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.269720][ T4890] syzkaller1: entered promiscuous mode [ 80.275272][ T4890] syzkaller1: entered allmulticast mode [ 80.296115][ T4890] loop4: detected capacity change from 0 to 1764 [ 80.300127][ T4838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.313053][ T4838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.313674][ T4890] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.332555][ T4890] ISOFS: unable to read i-node block [ 80.333968][ T4838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.337902][ T4890] isofs_fill_super: get root inode failed [ 80.357631][ T4838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.385182][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.392640][ T4838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.400045][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.407160][ T4838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.433256][ T4898] loop3: detected capacity change from 0 to 512 [ 80.548491][ T4838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.560919][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.569886][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.586166][ T4908] Unsupported ieee802154 address type: 0 [ 80.595098][ T4838] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.607960][ T1699] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.615079][ T1699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.629374][ T1699] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.636635][ T1699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.700283][ T4912] loop3: detected capacity change from 0 to 512 [ 80.707748][ T4916] loop2: detected capacity change from 0 to 128 [ 80.745997][ T1699] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 80.751913][ T4912] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.754846][ T1699] FAT-fs (loop2): Filesystem has been set read-only [ 80.772243][ T4912] EXT4-fs (loop3): mount failed [ 80.780291][ T1699] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 80.784721][ T4838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.897705][ T4838] veth0_vlan: entered promiscuous mode [ 80.913999][ T4838] veth1_vlan: entered promiscuous mode [ 80.936921][ T4838] veth0_macvtap: entered promiscuous mode [ 80.962012][ T4838] veth1_macvtap: entered promiscuous mode [ 80.978047][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.988963][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.998972][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.009689][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.020103][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.030760][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.040672][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.051259][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.061250][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.071703][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.082662][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.091081][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.101632][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.111675][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.122366][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.132238][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.142704][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.152732][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.163616][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.173644][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.184734][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.196163][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.208804][ T4838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.217780][ T4838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.226645][ T4838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.235660][ T4838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.299146][ T4946] loop0: detected capacity change from 0 to 512 [ 81.307274][ T4946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.315821][ T4946] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2812: inode #11: comm syz.0.299: corrupted xattr block 95: invalid header [ 81.329766][ T4946] EXT4-fs (loop0): Remounting filesystem read-only [ 81.336456][ T4946] EXT4-fs warning (device loop0): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 81.346811][ T4946] EXT4-fs (loop0): 1 orphan inode deleted [ 81.352917][ T4946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.365727][ T4946] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 81.372534][ T4946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.385892][ T4946] netlink: 'syz.0.299': attribute type 21 has an invalid length. [ 81.393851][ T4946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.299'. [ 81.634083][ T4968] syzkaller0: entered promiscuous mode [ 81.639662][ T4968] syzkaller0: entered allmulticast mode [ 81.722893][ T4974] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 81.759343][ T4976] syzkaller0: entered allmulticast mode [ 81.801915][ T4980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.311'. [ 81.870448][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 82.134576][ T5005] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.316'. [ 82.179186][ T5010] loop3: detected capacity change from 0 to 128 [ 82.202911][ T365] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 82.211467][ T365] FAT-fs (loop3): Filesystem has been set read-only [ 82.218247][ T365] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 82.264241][ T5016] loop3: detected capacity change from 0 to 128 [ 82.367013][ T5023] loop3: detected capacity change from 0 to 512 [ 82.374036][ T5023] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: comm syz.3.322: inode #738197504: comm syz.3.322: iget: illegal inode # [ 82.388181][ T5023] EXT4-fs (loop3): Remounting filesystem read-only [ 82.394712][ T5023] EXT4-fs (loop3): no journal found [ 82.399985][ T5023] EXT4-fs (loop3): can't get journal size [ 82.406156][ T5023] EXT4-fs (loop3): get root inode failed [ 82.411898][ T5023] EXT4-fs (loop3): mount failed [ 82.445417][ T5026] dvmrp0: entered allmulticast mode [ 82.451326][ T5026] dvmrp0: left allmulticast mode [ 82.514270][ T5028] openvswitch: netlink: ct_state flags 00001eac unsupported [ 83.073554][ T5034] loop3: detected capacity change from 0 to 2048 [ 83.087238][ T5034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.118827][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.157635][ T5039] loop2: detected capacity change from 0 to 1024 [ 83.170301][ T5039] EXT4-fs: Ignoring removed orlov option [ 83.188470][ T5039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.210840][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 83.210929][ T29] audit: type=1400 audit(1724883671.978:647): avc: denied { block_suspend } for pid=5038 comm="syz.2.329" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.243057][ T29] audit: type=1326 audit(1724883672.008:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 83.267652][ T29] audit: type=1326 audit(1724883672.008:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 83.291417][ T29] audit: type=1326 audit(1724883672.008:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 83.315606][ T29] audit: type=1326 audit(1724883672.008:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea36919f33 code=0x7ffc0000 [ 83.338724][ T29] audit: type=1326 audit(1724883672.008:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea36919f33 code=0x7ffc0000 [ 83.362766][ T29] audit: type=1326 audit(1724883672.008:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 83.386847][ T29] audit: type=1326 audit(1724883672.008:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 83.410358][ T29] audit: type=1326 audit(1724883672.008:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 83.432396][ T5057] loop3: detected capacity change from 0 to 128 [ 83.433754][ T29] audit: type=1326 audit(1724883672.008:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 83.471046][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 83.533540][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.581697][ T5071] loop2: detected capacity change from 0 to 128 [ 83.590250][ T5071] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 83.602730][ T5071] mmap: syz.2.337 (5071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.630323][ T5074] FAULT_INJECTION: forcing a failure. [ 83.630323][ T5074] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.643691][ T5074] CPU: 0 UID: 0 PID: 5074 Comm: syz.3.338 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 83.654415][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.664524][ T5074] Call Trace: [ 83.667968][ T5074] [ 83.670923][ T5074] dump_stack_lvl+0xf2/0x150 [ 83.675751][ T5074] dump_stack+0x15/0x20 [ 83.679961][ T5074] should_fail_ex+0x229/0x230 [ 83.684744][ T5074] should_fail+0xb/0x10 [ 83.689003][ T5074] should_fail_usercopy+0x1a/0x20 [ 83.694086][ T5074] _copy_from_user+0x1e/0xd0 [ 83.698807][ T5074] do_ipv6_getsockopt+0x12d/0x1430 [ 83.704024][ T5074] ? avc_has_perm_noaudit+0x1cc/0x210 [ 83.709476][ T5074] ? avc_has_perm+0xd4/0x160 [ 83.714183][ T5074] ipv6_getsockopt+0x75/0x1f0 [ 83.718907][ T5074] ? selinux_socket_getsockopt+0x180/0x1b0 [ 83.724805][ T5074] ? selinux_socket_getsockopt+0x180/0x1b0 [ 83.730661][ T5074] tcp_getsockopt+0xaa/0xe0 [ 83.735238][ T5074] sock_common_getsockopt+0x5b/0x70 [ 83.740489][ T5074] do_sock_getsockopt+0x121/0x1a0 [ 83.745561][ T5074] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 83.751684][ T5074] __sys_getsockopt+0x19a/0x210 [ 83.756633][ T5074] __x64_sys_getsockopt+0x66/0x80 [ 83.761758][ T5074] x64_sys_call+0x11cd/0x2d60 [ 83.766534][ T5074] do_syscall_64+0xc9/0x1c0 [ 83.771072][ T5074] ? clear_bhb_loop+0x55/0xb0 [ 83.775896][ T5074] ? clear_bhb_loop+0x55/0xb0 [ 83.780648][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.786653][ T5074] RIP: 0033:0x7fea36919ef9 [ 83.791222][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.810997][ T5074] RSP: 002b:00007fea35597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 83.819522][ T5074] RAX: ffffffffffffffda RBX: 00007fea36ab5f80 RCX: 00007fea36919ef9 [ 83.827502][ T5074] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 83.835506][ T5074] RBP: 00007fea35597090 R08: 0000000020000240 R09: 0000000000000000 [ 83.843485][ T5074] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 83.851508][ T5074] R13: 0000000000000000 R14: 00007fea36ab5f80 R15: 00007fffef9400e8 [ 83.859505][ T5074] [ 83.883947][ T5076] loop3: detected capacity change from 0 to 512 [ 83.899917][ T5076] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 83.908014][ T5076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 83.916372][ T5076] System zones: 0-1, 15-15, 18-18, 34-34 [ 83.917872][ T365] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 83.922208][ T5076] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.937783][ T5076] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.952584][ T5076] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 83.960652][ T5076] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.339: bad orphan inode 16 [ 83.961251][ T5080] loop2: detected capacity change from 0 to 512 [ 83.974217][ T5076] ext4_test_bit(bit=15, block=18) = 1 [ 83.982836][ T5076] is_bad_inode(inode)=0 [ 83.987082][ T5076] NEXT_ORPHAN(inode)=0 [ 83.991212][ T5076] max_ino=32 [ 83.994419][ T5076] i_nlink=2 [ 84.000425][ T5076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.018730][ T5076] tipc: Started in network mode [ 84.023647][ T5076] tipc: Node identity f0, cluster identity 4711 [ 84.029992][ T5076] tipc: Node number set to 240 [ 84.084934][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.112688][ T5093] loop3: detected capacity change from 0 to 128 [ 84.124230][ T5093] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.142578][ T5093] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.203840][ T5101] loop4: detected capacity change from 0 to 512 [ 84.210792][ T5101] EXT4-fs: Ignoring removed nobh option [ 84.216422][ T5101] EXT4-fs: Ignoring removed nobh option [ 84.237324][ T5101] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 84.265174][ T5101] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.347: invalid indirect mapped block 2683928664 (level 1) [ 84.310932][ T5109] loop0: detected capacity change from 0 to 128 [ 84.321152][ T5101] EXT4-fs (loop4): 1 truncate cleaned up [ 84.335919][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.354013][ T5101] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 13: comm syz.4.347: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 84.378497][ T3363] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 84.386941][ T3363] FAT-fs (loop0): Filesystem has been set read-only [ 84.393752][ T3363] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 84.406951][ T5101] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 13: comm syz.4.347: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 84.457456][ T4620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.471458][ T4055] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.538614][ T5129] netlink: 64 bytes leftover after parsing attributes in process `syz.4.353'. [ 85.048051][ T5147] program syz.2.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.073815][ T5145] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 85.181764][ T5151] syzkaller0: entered promiscuous mode [ 85.187429][ T5151] syzkaller0: entered allmulticast mode [ 85.406740][ T5160] loop4: detected capacity change from 0 to 128 [ 85.455141][ T50] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 85.463442][ T50] FAT-fs (loop4): Filesystem has been set read-only [ 85.472841][ T50] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 85.590013][ T5177] pim6reg: entered allmulticast mode [ 85.603700][ T5178] loop0: detected capacity change from 0 to 1024 [ 85.613415][ T5178] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.627627][ T5176] pim6reg: left allmulticast mode [ 85.633484][ T5178] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.644557][ T5178] EXT4-fs (loop0): group descriptors corrupted! [ 85.690089][ T5163] loop0: detected capacity change from 0 to 512 [ 85.741453][ T5163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.755819][ T5163] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.767710][ T5163] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.363: corrupted xattr block 33: invalid ea_ino [ 85.780326][ T5190] loop3: detected capacity change from 0 to 512 [ 85.791133][ T5163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 85.808722][ T5163] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.363: corrupted xattr block 33: invalid ea_ino [ 85.841604][ T5190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.860789][ T5193] loop2: detected capacity change from 0 to 512 [ 85.868212][ T5163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 85.880100][ T5193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.894229][ T5190] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.894261][ T5193] ext4: Bad value for 'inode_readahead_blks' [ 85.945856][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.987715][ T5199] syzkaller0: entered promiscuous mode [ 85.993228][ T5199] syzkaller0: entered allmulticast mode [ 86.117163][ T5204] loop2: detected capacity change from 0 to 512 [ 86.137474][ T5204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.152591][ T5204] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.179202][ T5201] loop3: detected capacity change from 0 to 512 [ 86.202923][ T5201] loop3: detected capacity change from 0 to 256 [ 86.211327][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 86.288395][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.301199][ T4838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.313626][ T5219] loop3: detected capacity change from 0 to 128 [ 86.379795][ T5224] loop2: detected capacity change from 0 to 1764 [ 86.388641][ T50] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 86.397546][ T50] FAT-fs (loop3): Filesystem has been set read-only [ 86.407049][ T50] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 86.448876][ T5235] loop4: detected capacity change from 0 to 256 [ 86.467659][ T5236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.377'. [ 86.503564][ T5235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.377'. [ 86.531290][ T5251] loop0: detected capacity change from 0 to 256 [ 86.637651][ T5260] syzkaller0: entered promiscuous mode [ 86.643233][ T5260] syzkaller0: entered allmulticast mode [ 86.722206][ T5271] netlink: 36 bytes leftover after parsing attributes in process `syz.3.383'. [ 86.743310][ T5271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 86.843331][ T5278] loop0: detected capacity change from 0 to 256 [ 86.853692][ T5278] vfat: Unknown parameter '' [ 86.881288][ T5277] loop4: detected capacity change from 0 to 1024 [ 86.888782][ T5277] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.908462][ T5277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.909829][ T5285] loop3: detected capacity change from 0 to 128 [ 86.960667][ T3363] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 86.968878][ T3363] FAT-fs (loop3): Filesystem has been set read-only [ 86.976186][ T3363] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 86.977090][ T4620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.039702][ T5292] loop3: detected capacity change from 0 to 256 [ 87.064360][ T5288] sctp: [Deprecated]: syz.4.390 (pid 5288) Use of int in max_burst socket option. [ 87.064360][ T5288] Use struct sctp_assoc_value instead [ 87.166245][ T5304] netlink: 'syz.4.393': attribute type 28 has an invalid length. [ 87.174085][ T5304] netlink: 'syz.4.393': attribute type 4 has an invalid length. [ 87.181832][ T5304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.393'. [ 87.199291][ T5304] loop4: detected capacity change from 0 to 164 [ 87.218363][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 87.231659][ T5304] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 87.239584][ T5308] loop2: detected capacity change from 0 to 512 [ 87.251537][ T5308] EXT4-fs: Ignoring removed bh option [ 87.257425][ T5308] ext3: Unknown parameter 'dont_hash' [ 87.299638][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 87.371685][ T5315] syzkaller0: entered promiscuous mode [ 87.377703][ T5315] syzkaller0: entered allmulticast mode [ 87.384040][ T5317] loop2: detected capacity change from 0 to 8192 [ 87.397495][ T5317] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.699768][ T5336] pim6reg: entered allmulticast mode [ 87.792203][ T5343] syzkaller0: entered promiscuous mode [ 87.798575][ T5343] syzkaller0: entered allmulticast mode [ 87.850562][ T5346] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 87.860870][ T5346] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 87.907575][ T3363] tipc: Subscription rejected, illegal request [ 87.932452][ T5352] loop2: detected capacity change from 0 to 128 [ 87.962018][ T3363] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 87.962046][ T3363] FAT-fs (loop2): Filesystem has been set read-only [ 87.962071][ T3363] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 88.014084][ T5356] ebtables: ebtables: counters copy to user failed while replacing table [ 88.050602][ T5364] loop4: detected capacity change from 0 to 128 [ 88.059667][ T5364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5364 comm=syz.4.413 [ 88.072362][ T5367] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 88.081622][ T5366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.416'. [ 88.122543][ T5371] syzkaller1: entered promiscuous mode [ 88.128189][ T5371] syzkaller1: entered allmulticast mode [ 88.163914][ T5383] syzkaller0: entered promiscuous mode [ 88.169471][ T5383] syzkaller0: entered allmulticast mode [ 88.238711][ T5384] loop2: detected capacity change from 0 to 256 [ 88.252650][ T5384] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.300690][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 88.300706][ T29] audit: type=1400 audit(1724883677.073:821): avc: denied { accept } for pid=5385 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.328197][ T29] audit: type=1400 audit(1724883677.073:822): avc: denied { map } for pid=5385 comm="syz.3.421" path="socket:[13267]" dev="sockfs" ino=13267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.355505][ T29] audit: type=1400 audit(1724883677.103:823): avc: denied { nlmsg_read } for pid=5389 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 88.359795][ T5394] netlink: 104 bytes leftover after parsing attributes in process `syz.3.423'. [ 88.401471][ T5397] loop2: detected capacity change from 0 to 128 [ 88.418987][ T5399] loop3: detected capacity change from 0 to 128 [ 88.463635][ T5402] loop2: detected capacity change from 0 to 512 [ 88.476252][ T5402] EXT4-fs: Ignoring removed orlov option [ 88.488560][ T5402] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 88.500372][ T5403] tipc: Failed to obtain node identity [ 88.506034][ T5403] tipc: Enabling of bearer rejected, failed to enable media [ 88.514627][ T36] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 88.516640][ T5405] tipc: Failed to obtain node identity [ 88.522772][ T36] FAT-fs (loop3): Filesystem has been set read-only [ 88.528317][ T5405] tipc: Enabling of bearer rejected, failed to enable media [ 88.559291][ T36] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 88.605507][ T29] audit: type=1400 audit(1724883677.373:824): avc: denied { mount } for pid=5413 comm="syz.0.430" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.632833][ T29] audit: type=1400 audit(1724883677.383:825): avc: denied { watch watch_reads } for pid=5413 comm="syz.0.430" path="/19/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 88.656056][ T29] audit: type=1326 audit(1724883677.403:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.0.430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa225499ef9 code=0x0 [ 88.678979][ T29] audit: type=1326 audit(1724883677.403:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.0.430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa225499ef9 code=0x0 [ 88.745239][ T5426] syzkaller0: entered promiscuous mode [ 88.750987][ T5426] syzkaller0: entered allmulticast mode [ 88.814786][ T5406] chnl_net:caif_netlink_parms(): no params data found [ 88.872947][ T5432] loop2: detected capacity change from 0 to 512 [ 88.906588][ T5432] EXT4-fs: Ignoring removed nobh option [ 88.912670][ T5432] ext4: Unknown parameter 'nogrp' [ 88.920007][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.927218][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.936154][ T5406] bridge_slave_0: entered allmulticast mode [ 88.942789][ T5406] bridge_slave_0: entered promiscuous mode [ 88.951606][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.958746][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.967803][ T5406] bridge_slave_1: entered allmulticast mode [ 88.974332][ T5406] bridge_slave_1: entered promiscuous mode [ 89.001169][ T5406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.013238][ T29] audit: type=1400 audit(1724883677.783:828): avc: denied { read } for pid=5443 comm="syz.4.435" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.014346][ T5406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.039315][ T29] audit: type=1400 audit(1724883677.813:829): avc: denied { open } for pid=5443 comm="syz.4.435" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.071592][ T29] audit: type=1400 audit(1724883677.813:830): avc: denied { ioctl } for pid=5443 comm="syz.4.435" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.107289][ T5406] team0: Port device team_slave_0 added [ 89.113982][ T5406] team0: Port device team_slave_1 added [ 89.130624][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.137670][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.165877][ T5406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.177465][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.184460][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.210547][ T5406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.255099][ T5406] hsr_slave_0: entered promiscuous mode [ 89.267219][ T5406] hsr_slave_1: entered promiscuous mode [ 89.274491][ T5449] xt_hashlimit: max too large, truncated to 1048576 [ 89.281506][ T5406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.282021][ T5449] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 89.289637][ T5406] Cannot create hsr debugfs directory [ 89.329686][ T5455] loop0: detected capacity change from 0 to 128 [ 89.361067][ T5447] loop4: detected capacity change from 0 to 764 [ 89.370355][ T5447] iso9660: Unknown parameter 'ÿÿÿÿ' [ 89.399998][ T365] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 89.408291][ T365] FAT-fs (loop0): Filesystem has been set read-only [ 89.417488][ T365] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 89.487921][ T5466] syzkaller0: entered promiscuous mode [ 89.493462][ T5466] syzkaller0: entered allmulticast mode [ 89.507466][ T5406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.573228][ T5406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.678478][ T5406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.691941][ T5496] loop4: detected capacity change from 0 to 128 [ 89.742811][ T3283] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 89.750992][ T3283] FAT-fs (loop4): Filesystem has been set read-only [ 89.758020][ T3283] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 89.784120][ T5406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.798523][ T5502] loop4: detected capacity change from 0 to 512 [ 89.839579][ T5512] program syz.0.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.842030][ T5502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.866906][ T5502] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.896382][ T5515] syzkaller0: entered promiscuous mode [ 89.901992][ T5515] syzkaller0: entered allmulticast mode [ 89.958603][ T5406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.978621][ T4620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.988263][ T5406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.006959][ T5406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.034742][ T5406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.063586][ T5533] loop3: detected capacity change from 0 to 512 [ 90.079823][ T5533] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2812: inode #11: comm syz.3.458: corrupted xattr block 95: invalid header [ 90.097871][ T5533] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.458: bg 0: block 7: invalid block bitmap [ 90.120337][ T5406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.128621][ T5533] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 90.138722][ T5406] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.146296][ T5533] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2978: inode #11: comm syz.3.458: corrupted xattr block 95: invalid header [ 90.151769][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.166890][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.176442][ T5533] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 90.179824][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.192701][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.195610][ T5533] EXT4-fs (loop3): 1 orphan inode deleted [ 90.206136][ T5533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.254113][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.295068][ T5543] loop3: detected capacity change from 0 to 128 [ 90.336170][ T3363] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 90.344346][ T3363] FAT-fs (loop3): Filesystem has been set read-only [ 90.353373][ T3363] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 90.383625][ T5548] loop3: detected capacity change from 0 to 512 [ 90.393557][ T5406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.408370][ T5548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.427938][ T5548] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.551884][ T5406] veth0_vlan: entered promiscuous mode [ 90.581877][ T5406] veth1_vlan: entered promiscuous mode [ 90.627466][ T5406] veth0_macvtap: entered promiscuous mode [ 90.644746][ T5406] veth1_macvtap: entered promiscuous mode [ 90.667948][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.678486][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.688327][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.698791][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.708692][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.719269][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.729136][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.739773][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.749637][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.760262][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.770120][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.780672][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.793458][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.808927][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.819416][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.829309][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.839910][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.849897][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.860443][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.870272][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.880738][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.890642][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.901266][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.911110][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.913088][ T5559] x_tables: duplicate underflow at hook 3 [ 90.921567][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.924533][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.953821][ T5559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5559 comm=syz.4.462 [ 90.970067][ T5406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.979058][ T5406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.987867][ T5406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.996708][ T5406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.049761][ T5561] loop4: detected capacity change from 0 to 512 [ 91.077916][ T5561] EXT4-fs: Ignoring removed i_version option [ 91.109401][ T5561] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.127663][ T5561] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 91.139770][ T5561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056e118, mo2=0002] [ 91.149007][ T5561] System zones: 1-12 [ 91.154806][ T5561] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.463: corrupted in-inode xattr: e_value size too large [ 91.212281][ T5561] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.463: couldn't read orphan inode 15 (err -117) [ 91.243882][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.281446][ T5561] EXT4-fs (loop4): mounted filesystem 00000000-00c8-1300-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.325412][ T5576] loop0: detected capacity change from 0 to 512 [ 91.353020][ T5576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.375878][ T5576] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.381476][ T5578] syzkaller0: entered promiscuous mode [ 91.391697][ T5578] syzkaller0: entered allmulticast mode [ 91.468715][ T5581] loop4: detected capacity change from 512 to 64 [ 91.531172][ T5581] syz.4.463: attempt to access beyond end of device [ 91.531172][ T5581] loop4: rw=524288, sector=54, nr_sectors = 18 limit=64 [ 91.563682][ T5581] syz.4.463: attempt to access beyond end of device [ 91.563682][ T5581] loop4: rw=0, sector=62, nr_sectors = 8 limit=64 [ 91.566048][ T5587] __nla_validate_parse: 6 callbacks suppressed [ 91.566068][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 91.596247][ T5581] syz.4.463: attempt to access beyond end of device [ 91.596247][ T5581] loop4: rw=0, sector=62, nr_sectors = 8 limit=64 [ 91.637250][ T5587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.657511][ T5590] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 91.665712][ T5591] netlink: 'syz.3.469': attribute type 21 has an invalid length. [ 91.673668][ T5591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.469'. [ 91.682762][ T5591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 91.696143][ T5592] netlink: 'syz.3.469': attribute type 21 has an invalid length. [ 91.704132][ T5592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.469'. [ 91.713173][ T5592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 91.759534][ T5587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.821865][ T5587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.891134][ T4620] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /46/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 91.914202][ T4620] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 91.935591][ T4620] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /46/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 91.960291][ T4620] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 91.985771][ T5587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.993195][ T4620] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /46/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 92.035249][ T5610] loop2: detected capacity change from 0 to 128 [ 92.045183][ T4620] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 92.070220][ T4620] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /46/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 92.095169][ T4620] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 92.101072][ T5587] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.116381][ T4620] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /46/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 92.145360][ T4620] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 92.187636][ T5615] loop2: detected capacity change from 0 to 128 [ 92.197361][ T5587] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.258576][ T5587] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.269892][ T5587] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.308861][ T4838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.373585][ T5624] loop2: detected capacity change from 0 to 512 [ 92.404857][ T5624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.418776][ T5626] syzkaller0: entered promiscuous mode [ 92.424297][ T5626] syzkaller0: entered allmulticast mode [ 92.433359][ T5624] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 92.456292][ T5631] loop3: detected capacity change from 0 to 128 [ 92.471958][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.565134][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.577676][ T4620] EXT4-fs (loop4): unmounting filesystem 00000000-00c8-1300-0000-000000000000. [ 92.669944][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.729473][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.861937][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.907313][ T5643] chnl_net:caif_netlink_parms(): no params data found [ 92.927282][ T5667] loop2: detected capacity change from 0 to 512 [ 92.960169][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.967384][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.968548][ T5667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.974737][ T5643] bridge_slave_0: entered allmulticast mode [ 92.991220][ T5667] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.001563][ T5643] bridge_slave_0: entered promiscuous mode [ 93.012321][ T5676] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 93.023139][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.030481][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.037841][ T5676] bridge0: entered allmulticast mode [ 93.046709][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.054265][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.079539][ T5643] bridge_slave_1: entered allmulticast mode [ 93.088138][ T5643] bridge_slave_1: entered promiscuous mode [ 93.114023][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.174322][ T36] bridge_slave_1: left allmulticast mode [ 93.180300][ T36] bridge_slave_1: left promiscuous mode [ 93.186297][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.197821][ T36] bridge_slave_0: left allmulticast mode [ 93.203855][ T36] bridge_slave_0: left promiscuous mode [ 93.209743][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.290561][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.301423][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.312473][ T36] bond0 (unregistering): Released all slaves [ 93.326727][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.344012][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.373243][ T5643] team0: Port device team_slave_0 added [ 93.381729][ T5643] team0: Port device team_slave_1 added [ 93.409636][ T36] hsr_slave_0: left promiscuous mode [ 93.418211][ T36] hsr_slave_1: left promiscuous mode [ 93.426459][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.433947][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.453749][ T5694] loop2: detected capacity change from 0 to 1024 [ 93.461938][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.469959][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.477679][ T5694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.484472][ T5694] EXT4-fs: Ignoring removed bh option [ 93.493945][ T36] veth1_macvtap: left promiscuous mode [ 93.499710][ T36] veth0_macvtap: left promiscuous mode [ 93.505367][ T36] veth1_vlan: left promiscuous mode [ 93.510683][ T36] veth0_vlan: left promiscuous mode [ 93.521375][ T5694] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (28593!=20869) [ 93.531235][ T5694] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 93.553252][ T5694] JBD2: no valid journal superblock found [ 93.559094][ T5694] EXT4-fs (loop2): Could not load journal inode [ 93.598977][ T3283] tipc: Subscription rejected, illegal request [ 93.663709][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 93.663725][ T29] audit: type=1400 audit(1724883682.433:866): avc: denied { ioctl } for pid=5712 comm="syz.3.498" path="mnt:[4026532646]" dev="nsfs" ino=4026532646 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.695463][ T36] team0 (unregistering): Port device team_slave_1 removed [ 93.706399][ T36] team0 (unregistering): Port device team_slave_0 removed [ 93.749944][ T5697] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 93.760845][ T5697] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 93.780150][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.787226][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.813418][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.824406][ T29] audit: type=1400 audit(1724883682.593:867): avc: denied { append } for pid=5712 comm="syz.3.498" name="event2" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.825800][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.854641][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.880699][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.934656][ T5643] hsr_slave_0: entered promiscuous mode [ 93.941794][ T5643] hsr_slave_1: entered promiscuous mode [ 93.951881][ T5643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.964893][ T5643] Cannot create hsr debugfs directory [ 93.975040][ T5719] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 94.005853][ T5729] loop2: detected capacity change from 0 to 512 [ 94.035829][ T5729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.053473][ T5729] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.067602][ T29] audit: type=1400 audit(1724883682.823:868): avc: denied { read append } for pid=5734 comm="syz.1.504" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.091366][ T29] audit: type=1400 audit(1724883682.823:869): avc: denied { open } for pid=5734 comm="syz.1.504" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.127798][ T29] audit: type=1400 audit(1724883682.893:870): avc: denied { ioctl } for pid=5734 comm="syz.1.504" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.177238][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.221285][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 94.398504][ T5643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.407490][ T5643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.417290][ T5643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.427409][ T5643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.519928][ T5779] loop3: detected capacity change from 0 to 1024 [ 94.530907][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.539774][ T5779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.546553][ T5779] EXT4-fs: Ignoring removed bh option [ 94.553220][ T5779] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (28593!=20869) [ 94.559410][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.577190][ T5779] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.579773][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.594519][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.594560][ T5779] JBD2: no valid journal superblock found [ 94.607713][ T5779] EXT4-fs (loop3): Could not load journal inode [ 94.632145][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.639303][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.666144][ T3283] tipc: Subscription rejected, illegal request [ 94.708144][ T29] audit: type=1400 audit(1724883683.483:871): avc: denied { bind } for pid=5794 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.771177][ T5806] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 94.781295][ T5806] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 94.802904][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.010543][ T5643] veth0_vlan: entered promiscuous mode [ 95.019986][ T5643] veth1_vlan: entered promiscuous mode [ 95.041403][ T5643] veth0_macvtap: entered promiscuous mode [ 95.050692][ T5643] veth1_macvtap: entered promiscuous mode [ 95.062361][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.072925][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.082891][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.093384][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.103314][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.113970][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.124054][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.134686][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.144661][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.155210][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.165057][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.168275][ T5846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2329 sclass=netlink_route_socket pid=5846 comm=syz.2.514 [ 95.175575][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.177358][ T29] audit: type=1400 audit(1724883683.933:872): avc: denied { setopt } for pid=5843 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.219115][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.237628][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.248182][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.258117][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.268798][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.278851][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.281749][ T5849] loop2: detected capacity change from 0 to 1024 [ 95.289348][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.305741][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.308859][ T5849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.316222][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.316249][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.316264][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.330908][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.338688][ T5643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.378487][ T5643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.389691][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.412398][ T5643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.421249][ T5643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.430036][ T5643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.430575][ T5853] loop3: detected capacity change from 0 to 512 [ 95.439307][ T5643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.471177][ T5853] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.521187][ T29] audit: type=1400 audit(1724883684.293:873): avc: denied { map } for pid=5857 comm="syz.3.517" path="socket:[15638]" dev="sockfs" ino=15638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 95.525736][ T5858] loop3: detected capacity change from 0 to 256 [ 95.570549][ T5862] loop4: detected capacity change from 0 to 128 [ 95.589534][ T5861] loop2: detected capacity change from 0 to 512 [ 95.598577][ T5861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.611698][ T5861] EXT4-fs (loop2): 1 orphan inode deleted [ 95.617553][ T5861] EXT4-fs (loop2): 1 truncate cleaned up [ 95.624144][ T365] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 95.632342][ T365] FAT-fs (loop4): Filesystem has been set read-only [ 95.635272][ T5861] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.2.518: path /111/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 95.639196][ T365] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 95.663954][ T5867] netlink: 'syz.3.519': attribute type 5 has an invalid length. [ 95.676885][ T5867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.519'. [ 95.687302][ T5861] EXT4-fs (loop2): Remounting filesystem read-only [ 95.702306][ T29] audit: type=1400 audit(1724883684.473:874): avc: denied { getopt } for pid=5863 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.709064][ T5870] loop4: detected capacity change from 0 to 128 [ 95.742585][ T5870] syz.4.520: attempt to access beyond end of device [ 95.742585][ T5870] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 95.756260][ T5870] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 95.766974][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.768642][ T5872] loop2: detected capacity change from 0 to 256 [ 95.783442][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.798677][ T5872] FAT-fs (loop2): Directory bread(block 64) failed [ 95.805231][ T5872] FAT-fs (loop2): Directory bread(block 65) failed [ 95.812095][ T5872] FAT-fs (loop2): Directory bread(block 66) failed [ 95.819186][ T5872] FAT-fs (loop2): Directory bread(block 67) failed [ 95.826057][ T5872] FAT-fs (loop2): Directory bread(block 68) failed [ 95.832795][ T5872] FAT-fs (loop2): Directory bread(block 69) failed [ 95.839507][ T5872] FAT-fs (loop2): Directory bread(block 70) failed [ 95.846162][ T5872] FAT-fs (loop2): Directory bread(block 71) failed [ 95.852822][ T5872] FAT-fs (loop2): Directory bread(block 72) failed [ 95.859671][ T5872] FAT-fs (loop2): Directory bread(block 73) failed [ 95.879239][ T5872] openvswitch: netlink: IPv4 tun info is not correct [ 95.886843][ T29] audit: type=1326 audit(1724883684.663:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5871 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dbc039ef9 code=0x7ffc0000 [ 96.012301][ T5885] loop2: detected capacity change from 0 to 512 [ 96.027416][ T5885] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.150041][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 96.208726][ T5897] loop2: detected capacity change from 0 to 128 [ 96.243565][ T50] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 96.251842][ T50] FAT-fs (loop2): Filesystem has been set read-only [ 96.263958][ T50] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 96.285651][ T5910] loop2: detected capacity change from 0 to 512 [ 96.353650][ T5918] loop4: detected capacity change from 0 to 512 [ 96.390032][ T5918] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.457448][ T5931] loop3: detected capacity change from 0 to 128 [ 96.469851][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 96.504859][ T3283] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 96.513379][ T3283] FAT-fs (loop3): Filesystem has been set read-only [ 96.520736][ T3283] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 96.522959][ T5930] netlink: 'syz.1.541': attribute type 21 has an invalid length. [ 96.536250][ T5930] netlink: 128 bytes leftover after parsing attributes in process `syz.1.541'. [ 96.546378][ T5930] netlink: 'syz.1.541': attribute type 4 has an invalid length. [ 96.554047][ T5930] netlink: 'syz.1.541': attribute type 5 has an invalid length. [ 97.213219][ T5950] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 97.220084][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.227690][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 97.239101][ T5951] vhci_hcd: connection closed [ 97.239520][ T11] vhci_hcd: stop threads [ 97.248730][ T11] vhci_hcd: release socket [ 97.253202][ T11] vhci_hcd: disconnect device [ 97.369166][ T5954] __nla_validate_parse: 1 callbacks suppressed [ 97.369219][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.549'. [ 97.388764][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'. [ 97.433660][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 97.499384][ T5971] loop4: detected capacity change from 0 to 512 [ 97.518913][ T5971] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.555: invalid indirect mapped block 256 (level 2) [ 97.542779][ T5971] EXT4-fs (loop4): 2 truncates cleaned up [ 97.550316][ T5971] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.555: bg 0: block 5: invalid block bitmap [ 97.571858][ T5973] loop3: detected capacity change from 0 to 8192 [ 97.577790][ T5971] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3355443200 > max in inode 15 [ 97.583341][ T5973] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.597509][ T5971] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3355443201 > max in inode 15 [ 97.871354][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 97.880457][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 98.487899][ T5998] loop4: detected capacity change from 0 to 512 [ 98.507580][ T5998] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.657368][ T6023] loop4: detected capacity change from 0 to 128 [ 98.684778][ T1699] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 98.693247][ T1699] FAT-fs (loop4): Filesystem has been set read-only [ 98.702282][ T1699] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 98.791098][ T6034] raw_sendmsg: syz.4.572 forgot to set AF_INET. Fix it! [ 98.978484][ T6060] loop3: detected capacity change from 0 to 512 [ 99.016830][ T6060] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.160502][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 99.160587][ T29] audit: type=1400 audit(1724883687.933:896): avc: denied { override_creds } for pid=6075 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.216160][ T4055] EXT4-fs unmount: 13 callbacks suppressed [ 99.216182][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.257558][ T29] audit: type=1326 audit(1724883688.033:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.4.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fb2e9d09ef9 code=0x0 [ 99.525386][ T6103] loop4: detected capacity change from 0 to 128 [ 99.647224][ T29] audit: type=1400 audit(1724883688.413:898): avc: denied { create } for pid=6106 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.666643][ T29] audit: type=1400 audit(1724883688.413:899): avc: denied { write } for pid=6106 comm="syz.3.583" path="socket:[16654]" dev="sockfs" ino=16654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.696490][ T3283] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 99.704723][ T3283] FAT-fs (loop4): Filesystem has been set read-only [ 99.718096][ T3283] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 99.751860][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.762627][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.772735][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.783247][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.793340][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.803962][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.814230][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.825048][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.834947][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.845668][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.855720][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.866271][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.876310][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.886964][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.013022][ T6132] loop0: detected capacity change from 0 to 1024 [ 100.061406][ T6132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.061663][ T6131] syzkaller0: entered promiscuous mode [ 100.080824][ T6131] syzkaller0: entered allmulticast mode [ 100.188477][ T6132] EXT4-fs (loop0): shut down requested (0) [ 100.332087][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 100.758614][ T29] audit: type=1400 audit(1724883689.533:900): avc: denied { mounton } for pid=6191 comm="syz.3.597" path="/proc/441/cgroup" dev="proc" ino=16736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 100.775901][ T6194] FAULT_INJECTION: forcing a failure. [ 100.775901][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 100.792693][ T29] audit: type=1400 audit(1724883689.553:901): avc: denied { remount } for pid=6191 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 100.796395][ T6194] CPU: 1 UID: 0 PID: 6194 Comm: syz.2.598 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 100.825681][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 100.835836][ T6194] Call Trace: [ 100.839156][ T6194] [ 100.842089][ T6194] dump_stack_lvl+0xf2/0x150 [ 100.848194][ T6194] dump_stack+0x15/0x20 [ 100.852393][ T6194] should_fail_ex+0x229/0x230 [ 100.857121][ T6194] ? iter_file_splice_write+0x108/0x970 [ 100.862847][ T6194] should_failslab+0x8f/0xb0 [ 100.867998][ T6194] __kmalloc_noprof+0xa5/0x370 [ 100.872982][ T6194] iter_file_splice_write+0x108/0x970 [ 100.878462][ T6194] ? path_openat+0x19bc/0x1f10 [ 100.883364][ T6194] ? _parse_integer_limit+0x167/0x180 [ 100.888817][ T6194] ? avc_policy_seqno+0x15/0x20 [ 100.893681][ T6194] ? selinux_file_permission+0x22c/0x360 [ 100.899365][ T6194] ? __pfx_iter_file_splice_write+0x10/0x10 [ 100.905316][ T6194] do_splice+0x99b/0x1150 [ 100.909719][ T6194] ? get_pid_task+0x8e/0xc0 [ 100.914225][ T6194] ? proc_fail_nth_write+0x130/0x160 [ 100.919524][ T6194] ? __fget_files+0x1da/0x210 [ 100.924206][ T6194] __se_sys_splice+0x24c/0x390 [ 100.929057][ T6194] __x64_sys_splice+0x78/0x90 [ 100.933809][ T6194] x64_sys_call+0x2945/0x2d60 [ 100.938502][ T6194] do_syscall_64+0xc9/0x1c0 [ 100.943046][ T6194] ? clear_bhb_loop+0x55/0xb0 [ 100.947781][ T6194] ? clear_bhb_loop+0x55/0xb0 [ 100.952488][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.958503][ T6194] RIP: 0033:0x7f8dbc039ef9 [ 100.963045][ T6194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.983308][ T6194] RSP: 002b:00007f8dbacb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 100.991978][ T6194] RAX: ffffffffffffffda RBX: 00007f8dbc1d5f80 RCX: 00007f8dbc039ef9 [ 100.999967][ T6194] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 101.007949][ T6194] RBP: 00007f8dbacb1090 R08: 0000000000000016 R09: 0000000000000000 [ 101.016058][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.024084][ T6194] R13: 0000000000000000 R14: 00007f8dbc1d5f80 R15: 00007ffed86c3198 [ 101.032083][ T6194] [ 101.050834][ T4838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.087289][ T6204] loop0: detected capacity change from 0 to 512 [ 101.092690][ T6203] loop2: detected capacity change from 0 to 128 [ 101.099598][ T6206] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 101.113166][ T29] audit: type=1400 audit(1724883689.883:902): avc: denied { create } for pid=6201 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 101.153529][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.160849][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.169151][ T11] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 101.177366][ T11] FAT-fs (loop2): Filesystem has been set read-only [ 101.184131][ T11] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 101.192261][ T6206] bridge0: entered allmulticast mode [ 101.364141][ T6221] loop0: detected capacity change from 0 to 512 [ 101.377957][ T6221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.390626][ T6221] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.530818][ T4838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.796932][ T6231] loop0: detected capacity change from 0 to 2048 [ 101.807837][ T6231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.833142][ T4838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.865031][ T6235] FAULT_INJECTION: forcing a failure. [ 101.865031][ T6235] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 101.872526][ T6238] loop0: detected capacity change from 0 to 512 [ 101.879151][ T6235] CPU: 0 UID: 0 PID: 6235 Comm: syz.4.611 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 101.896106][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 101.906191][ T6235] Call Trace: [ 101.909474][ T6235] [ 101.912406][ T6235] dump_stack_lvl+0xf2/0x150 [ 101.917030][ T6235] dump_stack+0x15/0x20 [ 101.921209][ T6235] should_fail_ex+0x229/0x230 [ 101.925903][ T6235] should_fail_alloc_page+0xfd/0x110 [ 101.931299][ T6235] __alloc_pages_noprof+0x109/0x360 [ 101.936522][ T6235] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 101.942056][ T6235] folio_alloc_mpol_noprof+0x36/0x70 [ 101.947395][ T6235] shmem_get_folio_gfp+0x3eb/0xd80 [ 101.952540][ T6235] shmem_write_begin+0xa0/0x1c0 [ 101.957473][ T6235] generic_perform_write+0x1b4/0x580 [ 101.962793][ T6235] ? current_time+0xfa/0x1a0 [ 101.967436][ T6235] shmem_file_write_iter+0xc8/0xf0 [ 101.972736][ T6235] iter_file_splice_write+0x5e6/0x970 [ 101.978142][ T6235] ? __pfx_iter_file_splice_write+0x10/0x10 [ 101.984061][ T6235] do_splice+0x99b/0x1150 [ 101.988407][ T6235] ? get_pid_task+0x8e/0xc0 [ 101.993067][ T6235] ? proc_fail_nth_write+0x130/0x160 [ 101.998369][ T6235] ? __fget_files+0x1da/0x210 [ 102.003116][ T6235] __se_sys_splice+0x24c/0x390 [ 102.007900][ T6235] __x64_sys_splice+0x78/0x90 [ 102.012643][ T6235] x64_sys_call+0x2945/0x2d60 [ 102.017332][ T6235] do_syscall_64+0xc9/0x1c0 [ 102.021906][ T6235] ? clear_bhb_loop+0x55/0xb0 [ 102.026641][ T6235] ? clear_bhb_loop+0x55/0xb0 [ 102.031333][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.037306][ T6235] RIP: 0033:0x7fb2e9d09ef9 [ 102.041727][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.061692][ T6235] RSP: 002b:00007fb2e8981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 102.070280][ T6235] RAX: ffffffffffffffda RBX: 00007fb2e9ea5f80 RCX: 00007fb2e9d09ef9 [ 102.078257][ T6235] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 102.086239][ T6235] RBP: 00007fb2e8981090 R08: 0000000000000016 R09: 0000000000000000 [ 102.094307][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.102336][ T6235] R13: 0000000000000000 R14: 00007fb2e9ea5f80 R15: 00007ffd14595438 [ 102.110319][ T6235] [ 102.120376][ T6238] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 102.174567][ T6241] loop0: detected capacity change from 0 to 128 [ 102.184227][ T6241] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 102.198445][ T6246] loop2: detected capacity change from 0 to 128 [ 102.247809][ T6252] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 102.255069][ T6250] loop0: detected capacity change from 0 to 2048 [ 102.282431][ T29] audit: type=1400 audit(1724883691.053:903): avc: denied { ioctl } for pid=6249 comm="syz.4.616" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.309917][ T365] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 102.318111][ T365] FAT-fs (loop2): Filesystem has been set read-only [ 102.334826][ T365] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 102.336413][ T6250] loop0: p1 < > p2 p3 < p5 > p4 [ 102.347446][ T6250] loop0: partition table partially beyond EOD, truncated [ 102.357410][ T6255] loop3: detected capacity change from 0 to 512 [ 102.366345][ T6250] loop0: p1 start 4278190080 is beyond EOD, truncated [ 102.373144][ T6250] loop0: p2 start 16908800 is beyond EOD, truncated [ 102.402882][ T6250] loop0: p4 start 11326 is beyond EOD, truncated [ 102.409305][ T6250] loop0: p5 start 16908800 is beyond EOD, truncated [ 102.442540][ T6255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.448766][ T6262] TCP: out of memory -- consider tuning tcp_mem [ 102.474168][ T6255] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.495871][ T6265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.622'. [ 102.549098][ T6274] loop4: detected capacity change from 0 to 1024 [ 102.556321][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.567997][ T6274] EXT4-fs: Ignoring removed nobh option [ 102.576105][ T6274] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.602305][ T6274] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.625: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 102.621777][ T6274] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.625: couldn't read orphan inode 11 (err -117) [ 102.634167][ T6274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.719629][ T6283] loop2: detected capacity change from 0 to 128 [ 102.741494][ T6284] FAULT_INJECTION: forcing a failure. [ 102.741494][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 102.754293][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.3.627 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 102.764914][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 102.767809][ T6283] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 102.774984][ T6284] Call Trace: [ 102.774996][ T6284] [ 102.775005][ T6284] dump_stack_lvl+0xf2/0x150 [ 102.795017][ T6284] dump_stack+0x15/0x20 [ 102.799281][ T6284] should_fail_ex+0x229/0x230 [ 102.804075][ T6284] ? inotify_handle_inode_event+0x127/0x310 [ 102.810186][ T6284] should_failslab+0x8f/0xb0 [ 102.815004][ T6284] __kmalloc_noprof+0xa5/0x370 [ 102.819862][ T6284] inotify_handle_inode_event+0x127/0x310 [ 102.825649][ T6284] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 102.831927][ T6284] fsnotify_handle_inode_event+0x18e/0x1f0 [ 102.837836][ T6284] fsnotify+0x10ba/0x11a0 [ 102.842200][ T6284] __fsnotify_parent+0x285/0x380 [ 102.847239][ T6284] do_splice+0xfa3/0x1150 [ 102.851805][ T6284] ? get_pid_task+0x8e/0xc0 [ 102.856508][ T6284] ? proc_fail_nth_write+0x130/0x160 [ 102.861912][ T6284] ? __fget_files+0x1da/0x210 [ 102.866630][ T6284] __se_sys_splice+0x24c/0x390 [ 102.871419][ T6284] __x64_sys_splice+0x78/0x90 [ 102.876269][ T6284] x64_sys_call+0x2945/0x2d60 [ 102.880988][ T6284] do_syscall_64+0xc9/0x1c0 [ 102.885609][ T6284] ? clear_bhb_loop+0x55/0xb0 [ 102.890336][ T6284] ? clear_bhb_loop+0x55/0xb0 [ 102.895074][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.901072][ T6284] RIP: 0033:0x7fea36919ef9 [ 102.905496][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.925133][ T6284] RSP: 002b:00007fea35597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 102.933589][ T6284] RAX: ffffffffffffffda RBX: 00007fea36ab5f80 RCX: 00007fea36919ef9 [ 102.941568][ T6284] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 102.949544][ T6284] RBP: 00007fea35597090 R08: 0000000000000016 R09: 0000000000000000 [ 102.957661][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.965773][ T6284] R13: 0000000000000000 R14: 00007fea36ab5f80 R15: 00007fffef9400e8 [ 102.973772][ T6284] [ 103.017645][ T5643] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.036971][ T6292] loop4: detected capacity change from 0 to 128 [ 103.062424][ T36] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 103.070610][ T36] FAT-fs (loop4): Filesystem has been set read-only [ 103.075157][ T6296] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 103.081034][ T6294] loop2: detected capacity change from 0 to 164 [ 103.088460][ T36] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 103.103931][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 103.155282][ T6302] loop3: detected capacity change from 0 to 512 [ 103.158096][ T6294] netlink: 'syz.2.631': attribute type 21 has an invalid length. [ 103.172159][ T6302] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.176996][ T6294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.631'. [ 103.181328][ T6302] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 103.204611][ T6302] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 103.210731][ T6303] TCP: out of memory -- consider tuning tcp_mem [ 103.212785][ T6302] System zones: 0-2, 18-18, 34-34 [ 103.224461][ T6302] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 103.243931][ T6302] EXT4-fs (loop3): 1 truncate cleaned up [ 103.249378][ T6307] loop2: detected capacity change from 0 to 512 [ 103.256400][ T6302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.271490][ T6309] x_tables: unsorted entry at hook 2 [ 103.275404][ T29] audit: type=1400 audit(1724883692.043:904): avc: denied { mount } for pid=6301 comm="syz.3.635" name="/" dev="rpc_pipefs" ino=16986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 103.303432][ T6307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.304296][ T6302] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #2: block 3: comm syz.3.635: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 103.318312][ T6307] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.364320][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.382917][ T29] audit: type=1400 audit(1724883692.153:905): avc: denied { setopt } for pid=6313 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.402604][ T6314] loop2: detected capacity change from 0 to 512 [ 103.421015][ T6314] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 103.429934][ T6314] System zones: 0-2, 18-18, 34-34 [ 103.435863][ T6314] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.639: bg 0: block 248: padding at end of block bitmap is not set [ 103.451697][ T6314] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.639: Failed to acquire dquot type 1 [ 103.464253][ T6314] EXT4-fs (loop2): 1 truncate cleaned up [ 103.471896][ T6314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.484623][ T6314] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.485496][ T4055] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.501517][ T6314] syz.2.639 (6314) used greatest stack depth: 9416 bytes left [ 103.539184][ T6326] loop0: detected capacity change from 0 to 512 [ 103.547719][ T6329] FAULT_INJECTION: forcing a failure. [ 103.547719][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 103.560379][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.1.643 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 103.571074][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 103.572875][ T6326] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.581139][ T6329] Call Trace: [ 103.581153][ T6329] [ 103.581162][ T6329] dump_stack_lvl+0xf2/0x150 [ 103.601846][ T6329] dump_stack+0x15/0x20 [ 103.606106][ T6329] should_fail_ex+0x229/0x230 [ 103.610993][ T6329] ? inotify_handle_inode_event+0x127/0x310 [ 103.617110][ T6329] should_failslab+0x8f/0xb0 [ 103.621839][ T6329] __kmalloc_noprof+0xa5/0x370 [ 103.626747][ T6329] inotify_handle_inode_event+0x127/0x310 [ 103.632488][ T6329] inotify_ignored_and_remove_idr+0x29/0x60 [ 103.638499][ T6329] inotify_freeing_mark+0x1d/0x30 [ 103.643543][ T6329] ? __pfx_inotify_freeing_mark+0x10/0x10 [ 103.649352][ T6329] fsnotify_destroy_mark+0x17e/0x1a0 [ 103.654673][ T6329] ? inotify_handle_inode_event+0x2e5/0x310 [ 103.660610][ T6329] inotify_handle_inode_event+0x2f0/0x310 [ 103.666347][ T6329] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 103.672685][ T6329] fsnotify_handle_inode_event+0x18e/0x1f0 [ 103.678499][ T6329] fsnotify+0x10ba/0x11a0 [ 103.682838][ T6329] __fsnotify_parent+0x285/0x380 [ 103.687786][ T6329] do_splice+0xfa3/0x1150 [ 103.692149][ T6329] ? get_pid_task+0x8e/0xc0 [ 103.696664][ T6329] ? proc_fail_nth_write+0x130/0x160 [ 103.702044][ T6329] ? __fget_files+0x1da/0x210 [ 103.706901][ T6329] __se_sys_splice+0x24c/0x390 [ 103.711728][ T6329] __x64_sys_splice+0x78/0x90 [ 103.716422][ T6329] x64_sys_call+0x2945/0x2d60 [ 103.721162][ T6329] do_syscall_64+0xc9/0x1c0 [ 103.725760][ T6329] ? clear_bhb_loop+0x55/0xb0 [ 103.730470][ T6329] ? clear_bhb_loop+0x55/0xb0 [ 103.735160][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.741249][ T6329] RIP: 0033:0x7ff4a7589ef9 [ 103.746187][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.765801][ T6329] RSP: 002b:00007ff4a6207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 103.774274][ T6329] RAX: ffffffffffffffda RBX: 00007ff4a7725f80 RCX: 00007ff4a7589ef9 [ 103.782285][ T6329] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 103.790408][ T6329] RBP: 00007ff4a6207090 R08: 0000000000000016 R09: 0000000000000000 [ 103.798380][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.806373][ T6329] R13: 0000000000000000 R14: 00007ff4a7725f80 R15: 00007ffd8558a0c8 [ 103.814481][ T6329] [ 103.821072][ T6333] netlink: 216 bytes leftover after parsing attributes in process `syz.4.645'. [ 103.830171][ T6333] netlink: 32 bytes leftover after parsing attributes in process `syz.4.645'. [ 103.834878][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.849350][ T6326] EXT4-fs (loop0): 1 truncate cleaned up [ 103.855938][ T6326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.877754][ T6337] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 103.945073][ T6349] loop2: detected capacity change from 0 to 128 [ 103.990894][ T36] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 103.999946][ T36] FAT-fs (loop2): Filesystem has been set read-only [ 104.007668][ T36] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 104.017210][ T4838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.485296][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 104.485313][ T29] audit: type=1400 audit(1724883693.253:908): avc: denied { write } for pid=6374 comm="syz.1.655" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.515525][ T29] audit: type=1400 audit(1724883693.253:909): avc: denied { open } for pid=6374 comm="syz.1.655" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.578490][ T6379] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.606857][ T6381] FAULT_INJECTION: forcing a failure. [ 104.606857][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.619969][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.0.659 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 104.630578][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 104.640655][ T6381] Call Trace: [ 104.643944][ T6381] [ 104.647026][ T6381] dump_stack_lvl+0xf2/0x150 [ 104.651657][ T6381] dump_stack+0x15/0x20 [ 104.655930][ T6381] should_fail_ex+0x229/0x230 [ 104.660759][ T6381] should_fail+0xb/0x10 [ 104.664949][ T6381] should_fail_usercopy+0x1a/0x20 [ 104.669999][ T6381] _copy_to_user+0x1e/0xa0 [ 104.674456][ T6381] simple_read_from_buffer+0xa0/0x110 [ 104.679917][ T6381] proc_fail_nth_read+0xff/0x140 [ 104.685009][ T6381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.690576][ T6381] vfs_read+0x1a2/0x6e0 [ 104.694878][ T6381] ? __rcu_read_unlock+0x4e/0x70 [ 104.699914][ T6381] ? __fget_files+0x1da/0x210 [ 104.704624][ T6381] ksys_read+0xeb/0x1b0 [ 104.708825][ T6381] __x64_sys_read+0x42/0x50 [ 104.713421][ T6381] x64_sys_call+0x27d3/0x2d60 [ 104.718112][ T6381] do_syscall_64+0xc9/0x1c0 [ 104.722693][ T6381] ? clear_bhb_loop+0x55/0xb0 [ 104.727458][ T6381] ? clear_bhb_loop+0x55/0xb0 [ 104.732150][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.738105][ T6381] RIP: 0033:0x7fa22549893c [ 104.742525][ T6381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 104.762205][ T6381] RSP: 002b:00007fa224111030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.770663][ T6381] RAX: ffffffffffffffda RBX: 00007fa225635f80 RCX: 00007fa22549893c [ 104.778647][ T6381] RDX: 000000000000000f RSI: 00007fa2241110a0 RDI: 0000000000000007 [ 104.786709][ T6381] RBP: 00007fa224111090 R08: 0000000000000000 R09: 0000000000000000 [ 104.794683][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.802661][ T6381] R13: 0000000000000000 R14: 00007fa225635f80 R15: 00007ffe89336828 [ 104.810685][ T6381] [ 104.827593][ T6383] macvtap0: entered promiscuous mode [ 104.833700][ T6383] macvtap0: left promiscuous mode [ 104.871739][ T29] audit: type=1326 audit(1724883693.643:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 104.884711][ T6389] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 104.895195][ T29] audit: type=1326 audit(1724883693.643:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 104.921896][ T6387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26756 sclass=netlink_tcpdiag_socket pid=6387 comm=syz.3.661 [ 104.945323][ T29] audit: type=1326 audit(1724883693.673:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 104.956840][ T6394] loop2: detected capacity change from 0 to 512 [ 104.968966][ T29] audit: type=1326 audit(1724883693.673:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 104.998560][ T29] audit: type=1326 audit(1724883693.673:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 105.022042][ T29] audit: type=1326 audit(1724883693.673:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 105.045363][ T29] audit: type=1326 audit(1724883693.673:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 105.068845][ T29] audit: type=1326 audit(1724883693.673:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.3.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36919ef9 code=0x7ffc0000 [ 105.092945][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.100293][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.101376][ T6394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.119933][ T6389] bridge0: entered allmulticast mode [ 105.122394][ T6394] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.157563][ T6400] loop4: detected capacity change from 0 to 128 [ 105.201844][ T365] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 105.210147][ T365] FAT-fs (loop4): Filesystem has been set read-only [ 105.226140][ T365] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 105.235470][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.271190][ T6414] loop4: detected capacity change from 0 to 2048 [ 105.310522][ T6414] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.324158][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 105.337217][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.674'. [ 105.365117][ T6414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.365170][ T6420] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 105.367499][ T6423] can0: slcan on ptm1. [ 105.431476][ T6414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.667'. [ 105.478742][ T6415] can0 (unregistered): slcan off ptm1. [ 105.494333][ T5643] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.678650][ T6429] syzkaller0: entered promiscuous mode [ 105.684169][ T6429] syzkaller0: entered allmulticast mode [ 105.774258][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 105.787643][ T6432] usb usb9: usbfs: process 6432 (syz.4.675) did not claim interface 0 before use [ 105.841777][ T6432] pimreg: entered allmulticast mode [ 105.849768][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 105.864590][ T6443] loop2: detected capacity change from 0 to 512 [ 105.867294][ T6432] pimreg: left allmulticast mode [ 105.885789][ T365] ================================================================== [ 105.893907][ T365] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 105.901215][ T365] [ 105.903551][ T365] read to 0xffff8881181aef70 of 4 bytes by task 36 on cpu 1: [ 105.910932][ T365] atime_needs_update+0x261/0x3e0 [ 105.915973][ T365] touch_atime+0x4a/0x350 [ 105.920312][ T365] shmem_file_read_iter+0x4b3/0x550 [ 105.925534][ T365] do_iter_readv_writev+0x3b0/0x470 [ 105.930740][ T365] vfs_iter_read+0x16e/0x3b0 [ 105.935332][ T365] loop_process_work+0x7a6/0x1230 [ 105.940490][ T365] loop_workfn+0x31/0x40 [ 105.944746][ T365] process_scheduled_works+0x483/0x9a0 [ 105.950239][ T365] worker_thread+0x526/0x6e0 [ 105.954850][ T365] kthread+0x1d1/0x210 [ 105.958937][ T365] ret_from_fork+0x4b/0x60 [ 105.963363][ T365] ret_from_fork_asm+0x1a/0x30 [ 105.968166][ T365] [ 105.970498][ T365] write to 0xffff8881181aef70 of 4 bytes by task 365 on cpu 0: [ 105.978058][ T365] touch_atime+0x1f3/0x350 [ 105.982482][ T365] shmem_file_read_iter+0x4b3/0x550 [ 105.987707][ T365] do_iter_readv_writev+0x3b0/0x470 [ 105.992933][ T365] vfs_iter_read+0x16e/0x3b0 [ 105.997637][ T365] loop_process_work+0x7a6/0x1230 [ 106.002678][ T365] loop_rootcg_workfn+0x22/0x30 [ 106.007545][ T365] process_scheduled_works+0x483/0x9a0 [ 106.013018][ T365] worker_thread+0x526/0x6e0 [ 106.017620][ T365] kthread+0x1d1/0x210 [ 106.021713][ T365] ret_from_fork+0x4b/0x60 [ 106.026140][ T365] ret_from_fork_asm+0x1a/0x30 [ 106.030914][ T365] [ 106.033232][ T365] value changed: 0x26f57cf4 -> 0x278e1375 [ 106.038945][ T365] [ 106.041262][ T365] Reported by Kernel Concurrency Sanitizer on: [ 106.047406][ T365] CPU: 0 UID: 0 PID: 365 Comm: kworker/u8:4 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 106.058449][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 106.068594][ T365] Workqueue: loop2 loop_rootcg_workfn [ 106.074073][ T365] ================================================================== [ 106.087122][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.101389][ T6443] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.134834][ T4043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.