last executing test programs: 3.699103887s ago: executing program 1 (id=1119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 16) 3.440284128s ago: executing program 1 (id=1121): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_setup(0xf9a1, &(0x7f0000000080)=0x0) r2 = eventfd2(0xfffffffa, 0x80800) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f00000000c0)="e0c61f14c9946fd95861161c49b7611cf06ba8cef88d7091fcc57f179a6c01113125deb233df3bae313997bd98b1247ee870db5894720aca8f7c91ea589330b409db5291031498648ac9042e2f56f3fa3c805c2b3d987d2eb62be58c52884c0305006621f1fa16c6e0673d8a5cc3388167724f23aa12", 0x76, 0x1000, 0x0, 0x0, r2}, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80822, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x10, 0x2d7, &(0x7f0000000f00)="$eJzs3T+LHGUYAPBndnd2Ry32CisRHNDCKuTS2uwhCYhXGbZQCz1NAnK7CDlY8A+uqWxtLCz8BFZ+EBvxCwi2gp0RAiMzO7P/MtmwMesp/n5Nnrzv88w879x7d3PFvff+i9PzW3ncuff5L5FlSXRGMYr7SRxFJxpfxppujL4OAOC/7H5RxO/Fwj51SURkh2sLADigvb///3DwlgCAA7v59jtvnpyeXn8rz7O4Mf1qNi5/si//Xcyf3ImPYhK342oM40FE9aKQRvW2UIY3im5E5KWjeGU6n43Lyul7P9bXP/ktoqo/jmEcVUPLt42q/o3T68f5wlr9vOzj2fr+o7L+Wgzj+WXxRv21lvoY9+PVl9f6vxLD+OnD+DgmcatqYlX/xXGev15888dn75btzcaRJPPZeFDlrVQLBQAAAAAAAAAAAAAAAAAAAACAp+JKfXbOIKrze8qh+vyd7oPyP2nkjaPN83kW9UlzofXzgYqimBfxXXO+ztU8z4s6cVXfixd60bucVQMAAAAAAAAAAAAAAAAAAMC/y8Unn56fTSa37z6VoDkNoBcRf96MeNLrjNZGXordyYP6nmeTSacON3N6g7WR6DY5ScTONspFtE8VyfotOk/8DLvN83nmoZ7r4PsP0j2vnD0+J22/13bQ+xt7o9ld52dJ+zMcRDOS1Q/h237EKqcfj7lF81HvPyqniH22X791arg9Uu7v3dd5rgrmO3Ii2dXYa78u1lWPJNur6FdPtbU8zRbJkUb7p0z2iP3cHjz8tSJxWgcAAAAAAAAAAAAAAAAAABxUsvyl35bJeztLO8XgYG0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD/qYvn3/5fBz2nEciTdmKqDeV3cMrUd9OPuxSUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//LBxPWQ==") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x204086, &(0x7f0000000880)={[{@noquota}, {@nouid32}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[], 0xc1) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='rpc_buf_alloc\x00'}, 0xd) gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x5, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18101, 0x6b4, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000340009000000000000000000030000001c005b800c0042000500000000000000080001"], 0x44}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) listen(0xffffffffffffffff, 0x200) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)) 2.568071489s ago: executing program 0 (id=1138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x200000100000011, 0xa, 0x0) bind$packet(r1, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r3}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d8008000300", @ANYRES32=0x0, @ANYBLOB="2e4a05d25da584beafd2965115d8663ad1f5234a1d157f216ea744da5413ec0ab629c89ef6f677b5c49e7044070c5d"], 0x24}], 0x1}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0x800) r9 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) fcntl$addseals(r9, 0x409, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) getresuid(&(0x7f00000003c0), &(0x7f0000000500), &(0x7f0000000380)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@broadcast, @in6=@private0, 0x4e24, 0x1cf, 0x4e21, 0x7, 0xa}, {0x6, 0x7, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x4, 0x2}, {0x1, 0x0, 0x0, 0x800}, 0xfffffffa, 0x6e6bbd, 0x2, 0x0, 0x4, 0x1}, {{@in=@dev, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x2, 0x1, 0x12, 0x0, 0x9}}, 0xe8) 2.480241747s ago: executing program 1 (id=1142): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0xa4, 0x24, 0xf0b, 0x18, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}]}]}}]}, 0xa4}}, 0x0) 2.158908303s ago: executing program 1 (id=1146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000840)={[{@norecovery}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@lazytime}, {@usrquota}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x405) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYRESOCT=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x104, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@o_path={&(0x7f0000001340)='./file0\x00', 0x0, 0x8, r2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001480)={&(0x7f0000003780)="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", &(0x7f00000013c0)=""/121, &(0x7f0000000180)="a7f81173f11e46cb7f54e68c628a", &(0x7f0000004c80)="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", 0x0, r3, 0x4}, 0x38) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4a}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x40000000}, 0x220a4, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8000000000000001}, 0x0, 0x400, 0x0, 0x0, 0x1000, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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"/280, 0x118}, {&(0x7f0000000f00)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf", 0x2c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa872", 0xab}, {&(0x7f0000000940)}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf18625abe82bdc6e47e081c06eb1d6ab55a68e53e8fb", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb", 0x33}, {&(0x7f0000001bc0)="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", 0x31f}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 2.158264523s ago: executing program 4 (id=1147): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x712722587c79b8f0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000140)={'L+', 0x9}, 0x16, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x77359400}, {r1, r2+60000000}}, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000980)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000880)=""/62, 0x3e}], 0x7, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}, 0x40) clock_getres(0x1, &(0x7f00000009c0)) (async) fcntl$getownex(r5, 0x10, &(0x7f0000000a00)={0x0, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r3) (async) r9 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000000a80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa0, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf15}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48854}, 0x48081) (async) getdents(r4, &(0x7f0000000c40)=""/193, 0xc1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r3) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000d80)={0x0, @aes128, 0x0, @desc3}) (async) timer_create(0x7, &(0x7f0000001e00)={0x0, 0x26, 0x4, @thr={&(0x7f0000000dc0)="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", &(0x7f0000001dc0)="f88b6e1dd6312092"}}, &(0x7f0000001e40)=0x0) timer_getoverrun(r10) (async) r11 = open$dir(&(0x7f0000001e80)='./file0\x00', 0x200000, 0x12) mknodat(r11, &(0x7f0000001ec0)='./file0\x00', 0x8, 0x101) (async) getsockopt$MRT6(r6, 0x29, 0xce, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000002540)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f0000001fc0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2b0, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1a0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'macsec0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf18a}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7bf5cfe9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x214, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffc0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x12}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x612}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_USERDATA={0xe1, 0xc, "88dbf462aba195cd94808d58dc772787821ba78f11637a2fd45f18dfe3953904d4ce3cd833c0df6bb479061ba39d05b470e44b3f4e3ac5426dc5bf99e3ef52b7fb7dc019c195e50128cc1c3f25dc38f05dd3db8c42c435eb55e02d367f0339cc606534bf3ff0df9444dc16e60e7f2a6939e1adfe539c98de43642e3b5722b92ca1a77e8eff0c90a4cfd3dd8ea22a832acfddf66daddd02ae8f3f0399b2d130550620e187eaa4795bdde1223bb7d2c6bbcfd543bc8b87efbd0a662327a5298988a0557333accea545dc2425fa50c9634e580306f8e072024a1e7a039317"}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x528}, 0x1, 0x0, 0x0, 0x801}, 0x24000104) timer_gettime(r10, &(0x7f0000002580)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ptrace$getregset(0x4204, r7, 0x3, &(0x7f00000035c0)={&(0x7f00000025c0)=""/4096, 0x1000}) (async) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', &(0x7f0000003640)={0x480442, 0x24, 0x36}, 0x18) kcmp(r8, r7, 0x4, r12, r9) 2.158110193s ago: executing program 3 (id=1148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 2.156884053s ago: executing program 0 (id=1149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$vcsn(&(0x7f0000000040), 0x7fffffff, 0x2c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x69) 2.116697967s ago: executing program 2 (id=1151): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000740)="34ff051962da72203695c632819f3e5c9d078056c2491816c3ef39cfd0f80c8ccb0c37cbc4d085ca9937b538f81e931f4c611d008c34ce308866a88a8264e6b6cba7353aceb7539e2ed16448874af1243dc8b4df91a6ae545436a4937d52b49bde66c034e15d87788ab01907f85d1579f033b3b09083b5bb220c351fbce355c69a5377dbe9bd1f8f6f8e620da181956b170a808d3a201599b10c4ea9536e88279e9dbaa656250d5cc82ecbf0da", 0xad}, {&(0x7f0000000840)="febb04c9930974d693dd07c3c0cc1478319bab17841c9388fcde165e67b524f015151a04c057d82f353c14eefbf3236195989144fac4814173dca64e2153059f0a797f4d523df3c5d70ad92e006aafb9ffd0607491168e79d139abf11035663d1c4704a494cad4a7c7b0cd28699835c81bf83e2166d0e276ab419d0c642f8882946c14743122a7575fac6524f39ab0d3fc8d268a18dc823106d1c965df81ba80e3f83ae1d90cf4d3d895bed6b97b5fb2b1c133f6effec33141c34eae65cdeabd976ad57648aa3b18ccb17229bf08424d475c8b03379f5500d595bed20fe8d3d0b794e5ca7aefb08c63fe3ff13043c1cf53ee37ecfd016d70c0", 0xf9}, {&(0x7f0000000ac0)="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", 0x1fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="7502a274523113a92884a0cfd4c6e9105842e313a297ae2c4170d26ecd81450a2f10b43118c5aad2967412bf2f403a04572087bcb006d372b12bb33d0759c8d62ddf797ccf686b8080bbd03ade457cb544bbf56d2fc47af89d862b8cda8ff58f84b243b01c911e2391153ed60b90dfd0f0a5cb9392f3b2f5bd4ac9cf305f43ab8e5109b4800a9a1d9774c6b97ce70339289bb615a5709eba8398e6978b52bc56e74651073039d52f45194dd87d8c", 0xae}, {&(0x7f0000000440)="5b07a4e585cdd84d2d0d195f125a320fa8a26474c572", 0x16}], 0x2}}], 0x2, 0x0) (fail_nth: 1) 1.928907932s ago: executing program 0 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x40}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.928248692s ago: executing program 3 (id=1153): r0 = socket$inet(0x2, 0x80000, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000740)="34ff051962da72203695c632819f3e5c9d078056c2491816c3ef39cfd0f80c8ccb0c37cbc4d085ca9937b538f81e931f4c611d008c34ce308866a88a8264e6b6cba7353aceb7539e2ed16448874af1243dc8b4df91a6ae545436a4937d52b49bde66c034e15d87788ab01907f85d1579f033b3b09083b5bb220c351fbce355c69a5377dbe9bd1f8f6f8e620da181956b170a808d3a201599b10c4ea9536e88279e9dbaa656250d5cc82ecbf0da", 0xad}, {&(0x7f0000000840)="febb04c9930974d693dd07c3c0cc1478319bab17841c9388fcde165e67b524f015151a04c057d82f353c14eefbf3236195989144fac4814173dca64e2153059f0a797f4d523df3c5d70ad92e006aafb9ffd0607491168e79d139abf11035663d1c4704a494cad4a7c7b0cd28699835c81bf83e2166d0e276ab419d0c642f8882946c14743122a7575fac6524f39ab0d3fc8d268a18dc823106d1c965df81ba80e3f83ae1d90cf4d3d895bed6b97b5fb2b1c133f6effec33141c34eae65cdeabd976ad57648aa3b18ccb17229bf08424d475c8b03379f5500d595bed20fe8d3d0b794e5ca7aefb08c63fe3ff13043c1cf53ee37ecfd016d70c0", 0xf9}, {&(0x7f0000000ac0)="137697c59d7fd984d63fa655707e8ec61e1a98128e66ee1195f65b51c2f6ce5b9b69018c876e8b381e985558a61df5b71fd2b8257b1c089fa465def108893c0f2cd0e5e6ade15c6d275446f40f1e286049e511f3079b08b19be3015d19d3dfc7ad030d9f20c40a1deab7457701b7d0565b7511fc8e8082fbf7848c7c344a3bb6d423977f9d11ebd5ccaf6f8b91e3fdef02fd7b80ab9841a3cd7ee7dc5765c5c7ff65bae669c2bfa82957391f3986278caff7977d701cc80bd9e699bfe0106183a63e45f8ea66f92b15831d0f935ec4dae333fd732440f558da2e6007bf02eb41e012a7701eaba5134d28c392c989744f79be3c27075b27631c2e8a8ff22433214fb8bc4c7f6df62f4a127a5da473a47247c931bad1d39f96682b0641a9e75978843daa07a0f07390932b61725b4383087cb103b299d617dea6a7c0f4f661c44bdd2d2f8054460ce353a7648d143032a3531546cbf10f1c760c9a89eb3cae366d7a96de0fae0c649cba10ba953a2096a094c27c3f3acbdb8f3a7e3f42561815370b80662711a8844252d0b4c1b8493836aaf7842d182e55e59a4df0e26738321f42079d85fa2be594e0c043bfe63093c632ae1fb9b7ca3650beb8d10a58e57838c11635b4c575c15dd5ae8d6070ae38ca1bdc0761f028875ffcf8f9c951306a280a6bb592e038b4267a8286c0b32526dedb90e5a3fe4536bdefcf5aca64", 0x1fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="7502a274523113a92884a0cfd4c6e9105842e313a297ae2c4170d26ecd81450a2f10b43118c5aad2967412bf2f403a04572087bcb006d372b12bb33d0759c8d62ddf797ccf686b8080bbd03ade457cb544bbf56d2fc47af89d862b8cda8ff58f84b243b01c911e2391153ed60b90dfd0f0a5cb9392f3b2f5bd4ac9cf305f43ab8e5109b4800a9a1d9774c6b97ce70339289bb615a5709eba8398e6978b52bc56e74651073039d52f45194dd87d8c", 0xae}, {&(0x7f0000000440)="5b07a4e585cdd84d2d0d195f125a320fa8a26474c572", 0x16}], 0x2}}], 0x2, 0x0) 1.926966362s ago: executing program 0 (id=1154): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 1.906221614s ago: executing program 4 (id=1155): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x0, 0x5, &(0x7f0000001200)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="1727ef68d1d4ca77c3d532518ccd0499fc63873108c90575ee551e0b31aa4c4fe3f118fb49cdf1b9ad7d003cc024b37d2c698d20b5ce7d1e6aa9bb6becdcc45a07c8d2ba1a3bb3f344680532a2b55eb0a7dacdb8051bed8b625450ab15d9fa809a2b03c3a84aa5301137f96d7660fde81a59d07d3ffcde3326cafd79cbf551aecaf5c39cceb4a787a41c6bf29d8d783d73c4091363825d54c2edd09a06c77942f1c11e848855fd341a5c1b97d5712e877e6111e438a8bdc43232e8ec0bcebda76ad49ec2a410a8f093a2fa1c1cb09c4dee804da751d100b7", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x80, &(0x7f0000000d80), 0x45, 0x7ce, &(0x7f0000000500)="$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") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xa6600, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000380), &(0x7f0000000f40)={0x0, 0xfb, 0x114, 0x2, 0x8, "c255d431b6e53f0fc247033e3c94f27b", "3cb33e2e8a3248a6d94ebc68c0ed5942983eaf174450eacc2b4443f6a44f3ee641fcd8735e75ad00e99f9c04d4cd575eba073ae25de90e5306c7e3377633459f43f6b6c5ad06c09ef5f87a2165c4b3b60b8307992ca73f2e8139fb1ce1d8521752d5a2ba859696658ea00d0e8b2588776b5cb8c6a56de3e7ff2b2713493edb5705bb96604e40ff157b79cac6ce5b6789c57e1820332002583b5bba4f6a4acd695fcef173dde3109d4e108920f94f8f26c8ec0006c6bc2d98dbac4313339f9263b96b19071349b3bbc303c6a36181ea271a393677c94dc2d048114a54a1b7769aed65aa48df6a22c94bcd3c273a9142668da273f94ad65c408ad3e15ca769dd"}, 0x114, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1c, 0x200000000000000, r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000580), &(0x7f0000000500)=r1}, 0x20) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 1.902126834s ago: executing program 2 (id=1156): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x300022, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a700000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) rt_sigpending(&(0x7f0000000340), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x110, r3, 0xa9b77000) socket$inet(0x2, 0x2, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r6 = dup(r5) write$cgroup_pid(r6, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) sendfile(r5, r6, &(0x7f0000000100), 0x6c03) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000200)=0xc) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x18}, 0x0) mq_open(&(0x7f0000000140)='\x00', 0x800, 0x0, &(0x7f00000002c0)={0xeb, 0x100000000, 0x3, 0x8001}) getdents64(r1, &(0x7f0000000240)=""/44, 0x2c) 1.842075449s ago: executing program 3 (id=1157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414bb000000000000000000000000000000006c00000000000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000002bffffff01000000ac1414bb0000000000000000000000000000000001"], 0x17c}}, 0x0) 1.841681519s ago: executing program 3 (id=1158): openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtclass={0x4f8, 0x28, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0xfff1, 0xb}, {0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x2}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x6}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x4}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xb9, 0x0, 0x5, 0x7f, 0x9, 0xffffff7f}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x0, 0x1, 0x17, 0x0, 0x0, 0x4, 0x0, 0x9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x0, 0xff, 0x0, 0x3, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xfff3}, 0x5}}]}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xfff1}, 0x4, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x5, 0x1, 0x7, 0xffffffc6, 0x2, 0x4, 0x8, 0x6, 0xd4, 0x40000, 0x7ff, 0x6, 0x6, 0x7fff, 0x3, 0x1, 0x0, 0x81, 0x2, 0xfff, 0x2, 0x4, 0xd8b, 0x9, 0x6, 0x3, 0x9, 0x2, 0x9, 0x1c0, 0x4, 0x0, 0xf, 0x7, 0xb, 0x0, 0xfff, 0x8, 0x5, 0x100, 0x1ff, 0x9, 0x3, 0x0, 0xffffffff, 0x0, 0x1ff, 0x0, 0x1ff, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xb, 0x1c7, 0xfffffd8c, 0xfffffffb, 0xe1e9, 0x6, 0x207, 0xfffffff9, 0x7, 0xffff059e, 0x5, 0x2, 0x4b15, 0x59925992, 0xb3d, 0x8, 0x0, 0x101, 0xfffff3bc, 0xfffffffa, 0x6, 0xd, 0x1, 0x94000000, 0xa, 0x3, 0x37, 0x5, 0x0, 0x1, 0x7, 0x1, 0x2, 0x5, 0x6, 0x4, 0xfffffff9, 0x3, 0x1, 0xb5d6, 0xcc8f, 0xda, 0x0, 0xc4f8, 0x101, 0x6, 0x8, 0x6, 0x0, 0x8000, 0x7ff, 0x2, 0x6, 0x9, 0x0, 0x9, 0x4, 0x401, 0x329f3f7d, 0xfffffff7, 0x6, 0x10000, 0x4, 0x81, 0x2, 0xffff, 0x1, 0xb, 0x7, 0x1, 0x1, 0xfffffffe, 0x9, 0x8, 0xf, 0x7, 0x8, 0x3, 0x3, 0x9, 0x9, 0xe00c, 0xff, 0x1, 0x8, 0x2, 0xe, 0x2, 0xbd, 0x7ff, 0x83ec, 0xb, 0x3, 0xa956, 0x8, 0xffffff65, 0x9, 0x2, 0x0, 0x0, 0x0, 0x8, 0xcae, 0x9, 0x0, 0x0, 0x6, 0x6, 0x0, 0xe, 0x401, 0x8, 0xb, 0x1, 0x7, 0x9, 0x8f28, 0x7, 0x4, 0x4bdefaef, 0x6, 0x80, 0x3, 0x6, 0x8, 0x9, 0xe0, 0x4, 0x2, 0xf, 0x6, 0x5, 0x7, 0x10, 0x8, 0x3, 0x3, 0x5, 0x7, 0x7fffffff, 0x80000902, 0x3, 0x0, 0x80000001, 0x75b, 0x3, 0x1, 0x4, 0x0, 0x3, 0x8, 0x8000, 0xffff, 0x0, 0x7, 0xfffffff8, 0x7ff, 0xfffffffd, 0xb8b, 0x9, 0x1, 0xfffff560, 0x9, 0x2d2c, 0x4, 0x10, 0x80000005, 0x3, 0x9, 0x280, 0x9, 0x2, 0x4, 0xf27, 0x10001, 0xe, 0x68e2, 0x2, 0xffff8000, 0x0, 0xd60, 0x5, 0x6, 0x8, 0xffffffff, 0x8, 0x10001, 0x6, 0x800, 0x5, 0x8, 0x7, 0x2, 0x9]}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x4004080}, 0x400c000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x99dd6626}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) llistxattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x2c0, 0x2c0, 0x390, 0x390, 0xd0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'bond0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @inet=@DSCP={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'bond_slave_0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xc0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 1.82440344s ago: executing program 0 (id=1159): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10000, &(0x7f0000000c00), 0x1, 0xb8e, &(0x7f00000017c0)="$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") r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@orlov}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000002380)=ANY=[], 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000002900000036000000000000000000000024"], 0x40}}], 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xe, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x10001}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) chdir(&(0x7f0000000200)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) syz_open_procfs$pagemap(r7, &(0x7f0000000580)) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@getchain={0x4c, 0x66, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0x6}, {0xfff2, 0xfff3}, {0x3, 0x2}}, [{0x8, 0xb, 0x67ca6d5d}, {0x8}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x10003}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0xc090) 1.786534274s ago: executing program 0 (id=1160): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) unshare(0x20000400) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x402) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x80, 0x8000, 0x2, 0x3, {{0x7, 0x4, 0x3, 0x10, 0x1c, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) mount$bpf(0x0, &(0x7f0000000280)='./file0/../file0/../file0\x00', &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000600)='./file0/../file0/../file0\x00', 0x0, 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="6769817d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000010400)={0x0, 0x0, 0x0, 0x0, 0x0, "972c701ab4d9fda8000200"}) (async) ioctl$TCXONC(r2, 0x540a, 0x3) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000dfff000000000006bb8d8d00"}) (async) r3 = syz_open_pts(r2, 0x48f00) readv(r3, &(0x7f0000001500)=[{&(0x7f0000001380)=""/97, 0x61}], 0x1) 1.741782197s ago: executing program 4 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x14400, 0x80000000, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) close(r3) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYRES64=r4], &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfffff000) tee(r7, 0xffffffffffffffff, 0x81, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xd45464d16834ef37}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x3, @remote, 0xfffffff8}}}, 0x30) write$evdev(r6, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x8000451a, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 1.740099917s ago: executing program 3 (id=1162): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="757365722e5d5d2e5b23252500f0f9585a64e21973077beca49058b1cd01ee72de80a9510a1bfecb3c61afa0facc9295b75ad950a281c3da27d349c8e3ff773e867da6bcca4c3ff0141e28f4c8a9adf5cd64bc8430e6369047070167f98780985338e9ede1c622f369576e47da4250703a5ee85676735892c06c8bac984f26a588128b982556c7faeec97eec228a1bf70a90ffbe7491e20d491c426dfd8610dc55107937134a87653ebcc31e7545103270b9c1a89246c1555fafe5ebebc9b1944663c13d683073b99a5a7b8186033bf29402d1bc5da0f303eebee396a3aeb473"], 0x0, 0x0, 0x0) fgetxattr(r2, &(0x7f0000000000)=@random={'user.', ']].[#%%\x00'}, 0x0, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = syz_mount_image$ext4(&(0x7f00000010c0)='ext2\x00', &(0x7f0000001500)='./bus\x00', 0x3810746, &(0x7f0000000440), 0x0, 0x464, &(0x7f0000001600)="$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") (async, rerun: 64) r4 = creat(&(0x7f0000000e00)='./file0\x00', 0x0) (async, rerun: 64) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB='lock io'], 0x8) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) r9 = fcntl$getown(r3, 0x9) perf_event_open(&(0x7f0000001100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x80100, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000001040), 0x2}, 0x8048, 0x1, 0x6, 0x9, 0x1, 0x101, 0x4, 0x0, 0x5, 0x0, 0x5}, r9, 0x1, r4, 0x1b) (async) r10 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 594.661301ms ago: executing program 1 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100070000000000000007000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x4000010, r0, 0x43667000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x24, r3, 0x101, 0x1000, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x4d055) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x401, 0x2}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x4004800) 574.107213ms ago: executing program 1 (id=1164): r0 = io_uring_setup(0x79af, &(0x7f0000001240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000300)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x2004000}}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000780)="$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") syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000540)='./file0\x00', 0xa084d2, &(0x7f0000000380)=ANY=[], 0x1, 0x576, &(0x7f00000012c0)="$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") r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0xb663}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0xef, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x43, 0x0, 0xfe, 0x0, 0x4, 0x8}, 0xe) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x2, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 471.735561ms ago: executing program 4 (id=1165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x3000000000000000}}}, 0xb8}}, 0x0) 471.166631ms ago: executing program 2 (id=1166): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000740)="34ff051962da72203695c632819f3e5c9d078056c2491816c3ef39cfd0f80c8ccb0c37cbc4d085ca9937b538f81e931f4c611d008c34ce308866a88a8264e6b6cba7353aceb7539e2ed16448874af1243dc8b4df91a6ae545436a4937d52b49bde66c034e15d87788ab01907f85d1579f033b3b09083b5bb220c351fbce355c69a5377dbe9bd1f8f6f8e620da181956b170a808d3a201599b10c4ea9536e88279e9dbaa656250d5cc82ecbf0da", 0xad}, {&(0x7f0000000840)="febb04c9930974d693dd07c3c0cc1478319bab17841c9388fcde165e67b524f015151a04c057d82f353c14eefbf3236195989144fac4814173dca64e2153059f0a797f4d523df3c5d70ad92e006aafb9ffd0607491168e79d139abf11035663d1c4704a494cad4a7c7b0cd28699835c81bf83e2166d0e276ab419d0c642f8882946c14743122a7575fac6524f39ab0d3fc8d268a18dc823106d1c965df81ba80e3f83ae1d90cf4d3d895bed6b97b5fb2b1c133f6effec33141c34eae65cdeabd976ad57648aa3b18ccb17229bf08424d475c8b03379f5500d595bed20fe8d3d0b794e5ca7aefb08c63fe3ff13043c1cf53ee37ecfd016d70c0", 0xf9}, {&(0x7f0000000ac0)="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", 0x1fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="7502a274523113a92884a0cfd4c6e9105842e313a297ae2c4170d26ecd81450a2f10b43118c5aad2967412bf2f403a04572087bcb006d372b12bb33d0759c8d62ddf797ccf686b8080bbd03ade457cb544bbf56d2fc47af89d862b8cda8ff58f84b243b01c911e2391153ed60b90dfd0f0a5cb9392f3b2f5bd4ac9cf305f43ab8e5109b4800a9a1d9774c6b97ce70339289bb615a5709eba8398e6978b52bc56e74651073039d52f45194dd87d8c", 0xae}, {&(0x7f0000000440)="5b07a4e585cdd84d2d0d195f125a320fa8a26474c572", 0x16}], 0x2}}], 0x2, 0x0) (fail_nth: 2) 387.122348ms ago: executing program 4 (id=1167): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400)={[{@dioread_lock}, {@errors_remount}, {@i_version}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 89.291473ms ago: executing program 4 (id=1168): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000780)=""/88, &(0x7f0000000800)=0x58) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x22) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000006c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e20, @remote}, 0x664, 0x0, 0x0, 0x0, 0x562e, &(0x7f0000000680)='vlan0\x00', 0x1979, 0x2, 0x1}) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000740)=0xd26, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r0, 0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xe4, 0x0, &(0x7f0000000580)=[@exit_looper, @acquire_done={0x40106309, 0x1}, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/245, 0xf5, 0x0, 0x14}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/241, 0xf1, 0x0, 0x9}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}, 0x1000}, @release={0x40046306, 0x2}, @request_death, @register_looper, @reply_sg={0x40486312, {0x40001, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x1000, 0x1}, @flat=@binder={0x73622a85, 0x1101, 0x2}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x133, 0x0, &(0x7f0000000900)="8487bbd1cc2dc49c6f2aa1f94c293852321cfeefab850466c6a2a40c79b13149b3aee51d046f62cf514dc767544a99d68a5a85e728a948dcfea61b0f93e4dab5bc5ea4060fac61a5c6d4b1b875b7693866f25c601d315a82b4d70f1e239a75b6a696af010f95a96661e6634fe226d372349e1c543fa680b00adaaa054b76ac2f8686f63ac1a03164ba6c523d558fa06ed429320da5d8e8a1a5ad84bf396d49c649154ab9f28aaca1d9cee363eef827183d384a30c4e5b13ef7e00552fb4bcf2752bd4f2d3416f8456923943130592d57be2c7525a70cdfcf81ea2128dc49bf872e74fffa4506d1e4fea4c5fe7499f61195a2eebff9a541d72810a7d18caa91194225c83ed85671bfff7b652f667b5133579e543950a788b70f0ae6295a594ed78d84b540a7b198081b04be710e1911ed8235d9"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a7f73d8c3a9e52e5ff771800128008000100677265000c00028008000700e0000002c907e7292622c88a498ba3fcf18a553d0b37e7827fca868d57821aca7cebe05057a08e855e4d867b15f0182d2486b41df4eba596ff307ee248e7580f69d5a8bc542723cafe2b0ed83850f44134544c7caa84f448bf18f71006bfe05f41dc21f18a1f288fed87bef5baca480c8bfbd0d2222504f14764f693cf96b34ea0e5"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001006e5b6e640000000004000280"], 0x34}}, 0x0) 88.950933ms ago: executing program 2 (id=1169): prlimit64(0x0, 0xe, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x29, 0x1a, 0x0, 0x0) (async) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x9, 0x0}) (async) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x401, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) (async) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)) (async) r4 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) (async) r5 = syz_open_pts(r3, 0x0) dup3(r5, r3, 0x0) socket$inet6(0xa, 0x0, 0x0) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) r6 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x1fc) 75.798384ms ago: executing program 2 (id=1170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x3000000000000000}}}, 0xb8}}, 0x0) 5.997709ms ago: executing program 2 (id=1171): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ed8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_dest={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="540100001000130700000000000000007f000001000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865815f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"/268], 0x154}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000080)='\xc9\x00', 0x2) 0s ago: executing program 3 (id=1172): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0x0, &(0x7f0000000740)) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmmsg$sock(r2, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) (async) sendmmsg$sock(r2, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0x0, @link_id}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0x0, @link_id}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0040ca07", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000050002000a00000014000700fe8000000000000000000000000000aa04000500"], 0x34}}, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x80000165}, &(0x7f0000000100), &(0x7f0000000000)) (async) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x80000165}, &(0x7f0000000100)=0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000c0000000000060a0b0400000000000000000200000208000940000000020000020073797a31000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xfffffffffffffd72}}, 0x0) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)) (async) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)=0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x6, 0x95, {{0x10, 0x4, 0x2, 0xa, 0x40, 0x66, 0x0, 0x80, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, {[@noop, @lsrr={0x83, 0x2b, 0x60, [@multicast2, @remote, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @local]}]}}}}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8927, &(0x7f0000001b40)={'team_slave_1\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@ifindex=r11, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@ifindex=r11, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) setsockopt$PNPIPE_ENCAP(r12, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018430000faffffff000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018260000", @ANYRES32=r1, @ANYBLOB="000000f71a0000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x2, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r13, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x66, 0x0, &(0x7f0000000580)=0xfffffffffffffcea) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x66, 0x0, &(0x7f0000000580)=0xfffffffffffffcea) syz_io_uring_setup(0x36b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) kernel console output (not intermixed with test programs): 0-000000000000. [ 73.159246][ T5975] syzkaller0: entered promiscuous mode [ 73.164804][ T5975] syzkaller0: entered allmulticast mode [ 73.176819][ T5977] loop2: detected capacity change from 0 to 512 [ 73.193868][ T29] audit: type=1400 audit(1723481497.488:833): avc: denied { unmount } for pid=4218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.212696][ T5977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.227342][ T5977] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.246386][ T5977] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.691: Directory hole found for htree leaf block 0 [ 73.313765][ T4855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.350218][ T5991] loop1: detected capacity change from 0 to 256 [ 73.358325][ T5991] vfat: Unknown parameter 'appraise_type' [ 73.371152][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 73.614746][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 73.729131][ T5988] FAULT_INJECTION: forcing a failure. [ 73.729131][ T5988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.742386][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.2.695 Not tainted 6.11.0-rc3-syzkaller #0 [ 73.751234][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.761434][ T5988] Call Trace: [ 73.764714][ T5988] [ 73.767636][ T5988] dump_stack_lvl+0xf2/0x150 [ 73.772251][ T5988] dump_stack+0x15/0x20 [ 73.776422][ T5988] should_fail_ex+0x229/0x230 [ 73.781096][ T5988] should_fail+0xb/0x10 [ 73.785297][ T5988] should_fail_usercopy+0x1a/0x20 [ 73.790400][ T5988] _copy_to_user+0x1e/0xa0 [ 73.794834][ T5988] simple_read_from_buffer+0xa0/0x110 [ 73.800209][ T5988] proc_fail_nth_read+0xfc/0x140 [ 73.805151][ T5988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.810814][ T5988] vfs_read+0x1a2/0x6e0 [ 73.815002][ T5988] ? __cond_resched+0x28/0x50 [ 73.819704][ T5988] ksys_read+0xeb/0x1b0 [ 73.823881][ T5988] __x64_sys_read+0x42/0x50 [ 73.828519][ T5988] x64_sys_call+0x27d3/0x2d60 [ 73.833190][ T5988] do_syscall_64+0xc9/0x1c0 [ 73.837729][ T5988] ? clear_bhb_loop+0x55/0xb0 [ 73.842404][ T5988] ? clear_bhb_loop+0x55/0xb0 [ 73.847084][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.852974][ T5988] RIP: 0033:0x7f5b4882843c [ 73.857509][ T5988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 73.877236][ T5988] RSP: 002b:00007f5b474a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.885842][ T5988] RAX: ffffffffffffffda RBX: 00007f5b489c5f80 RCX: 00007f5b4882843c [ 73.893812][ T5988] RDX: 000000000000000f RSI: 00007f5b474a70a0 RDI: 0000000000000004 [ 73.901875][ T5988] RBP: 00007f5b474a7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.909836][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.917864][ T5988] R13: 0000000000000000 R14: 00007f5b489c5f80 R15: 00007ffddc55fe58 [ 73.925837][ T5988] [ 73.969268][ T6007] IPv6: sit1: Disabled Multicast RS [ 73.985416][ T29] audit: type=1400 audit(1723481498.288:834): avc: denied { setattr } for pid=6006 comm="syz.4.701" name="stat" dev="proc" ino=15118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 74.004835][ T6010] loop1: detected capacity change from 0 to 4096 [ 74.029344][ T6010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.046203][ T6014] loop4: detected capacity change from 0 to 4096 [ 74.070477][ T6010] Process accounting resumed [ 74.098180][ T4606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.111656][ T29] audit: type=1400 audit(1723481498.408:835): avc: denied { create } for pid=6018 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 74.124288][ T6014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.164032][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 74.175089][ T6014] Process accounting resumed [ 74.178076][ T29] audit: type=1400 audit(1723481498.458:836): avc: denied { bind } for pid=6024 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.179748][ T6014] FAULT_INJECTION: forcing a failure. [ 74.179748][ T6014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.209621][ T6023] loop3: detected capacity change from 0 to 2048 [ 74.211741][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.4.703 Not tainted 6.11.0-rc3-syzkaller #0 [ 74.226954][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 74.237001][ T6014] Call Trace: [ 74.240318][ T6014] [ 74.243234][ T6014] dump_stack_lvl+0xf2/0x150 [ 74.247822][ T6014] dump_stack+0x15/0x20 [ 74.252085][ T6014] should_fail_ex+0x229/0x230 [ 74.256756][ T6014] should_fail+0xb/0x10 [ 74.260901][ T6014] should_fail_usercopy+0x1a/0x20 [ 74.265944][ T6014] _copy_to_user+0x1e/0xa0 [ 74.270351][ T6014] simple_read_from_buffer+0xa0/0x110 [ 74.275811][ T6014] proc_fail_nth_read+0xfc/0x140 [ 74.280787][ T6014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.286333][ T6014] vfs_read+0x1a2/0x6e0 [ 74.290549][ T6014] ? __rcu_read_unlock+0x4e/0x70 [ 74.295473][ T6014] ? __fget_files+0x1da/0x210 [ 74.300216][ T6014] ksys_read+0xeb/0x1b0 [ 74.304515][ T6014] __x64_sys_read+0x42/0x50 [ 74.309079][ T6014] x64_sys_call+0x27d3/0x2d60 [ 74.313746][ T6014] do_syscall_64+0xc9/0x1c0 [ 74.318362][ T6014] ? clear_bhb_loop+0x55/0xb0 [ 74.323087][ T6014] ? clear_bhb_loop+0x55/0xb0 [ 74.327754][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.333647][ T6014] RIP: 0033:0x7f49aca3843c [ 74.338046][ T6014] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 74.357644][ T6014] RSP: 002b:00007f49ab6b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.366227][ T6014] RAX: ffffffffffffffda RBX: 00007f49acbd5f80 RCX: 00007f49aca3843c [ 74.374242][ T6014] RDX: 000000000000000f RSI: 00007f49ab6b70a0 RDI: 0000000000000004 [ 74.382334][ T6014] RBP: 00007f49ab6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.390459][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.398440][ T6014] R13: 0000000000000000 R14: 00007f49acbd5f80 R15: 00007ffd62d06708 [ 74.406426][ T6014] [ 74.429566][ T3617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.439289][ T6023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.446240][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.493196][ T4218] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.506562][ T6042] FAULT_INJECTION: forcing a failure. [ 74.506562][ T6042] name failslab, interval 1, probability 0, space 0, times 0 [ 74.506687][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.1.710 Not tainted 6.11.0-rc3-syzkaller #0 [ 74.506712][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 74.506724][ T6042] Call Trace: [ 74.506777][ T6042] [ 74.506784][ T6042] dump_stack_lvl+0xf2/0x150 [ 74.506817][ T6042] dump_stack+0x15/0x20 [ 74.506844][ T6042] should_fail_ex+0x229/0x230 [ 74.506870][ T6042] ? sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 74.506922][ T6042] should_failslab+0x8f/0xb0 [ 74.506949][ T6042] __kmalloc_cache_noprof+0x4b/0x2a0 [ 74.507030][ T6042] sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 74.507125][ T6042] sctp_association_new+0xe75/0x1130 [ 74.507174][ T6042] sctp_connect_new_asoc+0x1b0/0x3b0 [ 74.507204][ T6042] sctp_sendmsg+0xf05/0x1920 [ 74.507241][ T6042] ? __pfx_sctp_sendmsg+0x10/0x10 [ 74.507403][ T6042] inet_sendmsg+0xc5/0xd0 [ 74.507426][ T6042] __sock_sendmsg+0x102/0x180 [ 74.507457][ T6042] __sys_sendto+0x1e5/0x260 [ 74.507483][ T6042] __x64_sys_sendto+0x78/0x90 [ 74.507505][ T6042] x64_sys_call+0x2959/0x2d60 [ 74.507593][ T6042] do_syscall_64+0xc9/0x1c0 [ 74.507623][ T6042] ? clear_bhb_loop+0x55/0xb0 [ 74.507648][ T6042] ? clear_bhb_loop+0x55/0xb0 [ 74.507748][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.507815][ T6042] RIP: 0033:0x7f4314a499f9 [ 74.507829][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.507849][ T6042] RSP: 002b:00007f43136c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 74.507870][ T6042] RAX: ffffffffffffffda RBX: 00007f4314be5f80 RCX: 00007f4314a499f9 [ 74.507892][ T6042] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 74.507906][ T6042] RBP: 00007f43136c7090 R08: 0000000020000000 R09: 000000000000001c [ 74.507926][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.507940][ T6042] R13: 0000000000000000 R14: 00007f4314be5f80 R15: 00007ffc4817ad98 [ 74.507954][ T6042] [ 74.555132][ T6048] loop3: detected capacity change from 0 to 512 [ 74.563688][ T6050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.714'. [ 74.657968][ T6034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6034 comm=syz.2.708 [ 74.661267][ T6037] pim6reg1: entered promiscuous mode [ 74.789231][ T6037] pim6reg1: entered allmulticast mode [ 74.808612][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 74.837068][ T6067] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.841267][ T6074] loop2: detected capacity change from 0 to 4096 [ 74.845826][ T6067] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.860884][ T6067] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.869683][ T6067] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.880551][ T6067] vxlan0: entered allmulticast mode [ 74.893311][ T6074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.923213][ T6074] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #12: block 80: comm syz.2.720: bad entry in directory: rec_len % 4 != 0 - offset=40, inode=14, rec_len=3445, size=4096 fake=0 [ 74.970740][ T6081] loop4: detected capacity change from 0 to 512 [ 74.986450][ T6074] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #12: block 80: comm syz.2.720: bad entry in directory: rec_len % 4 != 0 - offset=40, inode=14, rec_len=3445, size=4096 fake=0 [ 75.007139][ T6074] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #12: block 80: comm syz.2.720: bad entry in directory: rec_len % 4 != 0 - offset=40, inode=14, rec_len=3445, size=4096 fake=0 [ 75.040179][ T6081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.048818][ T6074] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #12: block 80: comm syz.2.720: bad entry in directory: rec_len % 4 != 0 - offset=40, inode=14, rec_len=3445, size=4096 fake=0 [ 75.064373][ T6081] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.091605][ T6081] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.722: Directory hole found for htree leaf block 0 [ 75.115694][ T6074] Process accounting resumed [ 75.126672][ T6074] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #12: block 80: comm syz.2.720: bad entry in directory: rec_len % 4 != 0 - offset=40, inode=14, rec_len=3445, size=4096 fake=0 [ 75.167196][ T6107] netlink: 'syz.0.729': attribute type 6 has an invalid length. [ 75.183748][ T6106] delete_channel: no stack [ 75.192556][ T3617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.207633][ T6105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59155 sclass=netlink_route_socket pid=6105 comm=syz.1.728 [ 75.221509][ T4855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.266245][ T6117] FAULT_INJECTION: forcing a failure. [ 75.266245][ T6117] name failslab, interval 1, probability 0, space 0, times 0 [ 75.278940][ T6117] CPU: 1 UID: 0 PID: 6117 Comm: syz.2.732 Not tainted 6.11.0-rc3-syzkaller #0 [ 75.287824][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 75.297884][ T6117] Call Trace: [ 75.301194][ T6117] [ 75.304124][ T6117] dump_stack_lvl+0xf2/0x150 [ 75.308726][ T6117] dump_stack+0x15/0x20 [ 75.312944][ T6117] should_fail_ex+0x229/0x230 [ 75.317700][ T6117] ? sctp_add_bind_addr+0x6f/0x1e0 [ 75.323014][ T6117] should_failslab+0x8f/0xb0 [ 75.327651][ T6117] __kmalloc_cache_noprof+0x4b/0x2a0 [ 75.333214][ T6117] sctp_add_bind_addr+0x6f/0x1e0 [ 75.338258][ T6117] sctp_copy_local_addr_list+0x19b/0x220 [ 75.343906][ T6117] sctp_copy_one_addr+0x83/0x410 [ 75.348924][ T6117] sctp_bind_addr_copy+0x81/0x2b0 [ 75.353984][ T6117] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 75.360092][ T6117] sctp_connect_new_asoc+0x1d0/0x3b0 [ 75.362930][ T6115] bond_slave_0: entered promiscuous mode [ 75.365407][ T6117] sctp_sendmsg+0xf05/0x1920 [ 75.365440][ T6117] ? __pfx_sctp_sendmsg+0x10/0x10 [ 75.371131][ T6115] bond_slave_1: entered promiscuous mode [ 75.375649][ T6117] inet_sendmsg+0xc5/0xd0 [ 75.390964][ T6117] __sock_sendmsg+0x102/0x180 [ 75.395678][ T6117] __sys_sendto+0x1e5/0x260 [ 75.400285][ T6117] __x64_sys_sendto+0x78/0x90 [ 75.404958][ T6117] x64_sys_call+0x2959/0x2d60 [ 75.409810][ T6117] do_syscall_64+0xc9/0x1c0 [ 75.414323][ T6117] ? clear_bhb_loop+0x55/0xb0 [ 75.418996][ T6117] ? clear_bhb_loop+0x55/0xb0 [ 75.423668][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.429691][ T6117] RIP: 0033:0x7f5b488299f9 [ 75.434166][ T6117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.453914][ T6117] RSP: 002b:00007f5b474a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 75.462421][ T6117] RAX: ffffffffffffffda RBX: 00007f5b489c5f80 RCX: 00007f5b488299f9 [ 75.470463][ T6117] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 75.478433][ T6117] RBP: 00007f5b474a7090 R08: 0000000020000000 R09: 000000000000001c [ 75.486492][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.494524][ T6117] R13: 0000000000000000 R14: 00007f5b489c5f80 R15: 00007ffddc55fe58 [ 75.502493][ T6117] [ 75.509947][ T6115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.523052][ T6115] team0: Port device macvlan2 added [ 75.531451][ T6128] netlink: 'syz.4.733': attribute type 4 has an invalid length. [ 75.546213][ T6136] loop3: detected capacity change from 0 to 512 [ 75.553868][ T6136] SELinux: Context system_u:object_r:var_t:s0 is not valid (left unmapped). [ 75.584537][ T6138] loop3: detected capacity change from 0 to 2048 [ 75.603137][ T6128] bond_slave_0: left promiscuous mode [ 75.608627][ T6128] bond_slave_1: left promiscuous mode [ 75.615587][ T6143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6143 comm=syz.0.743 [ 75.623220][ T6138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.628210][ T6143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6143 comm=syz.0.743 [ 75.662678][ T6141] netlink: 'syz.2.742': attribute type 7 has an invalid length. [ 75.679055][ T6140] delete_channel: no stack [ 75.691517][ T4218] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.727590][ T6156] loop3: detected capacity change from 0 to 512 [ 75.749561][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.768164][ T6156] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.780815][ T6156] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.744: Directory hole found for htree leaf block 0 [ 75.792870][ T6163] loop4: detected capacity change from 0 to 2048 [ 75.810397][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.826210][ T6163] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.834380][ T6166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59155 sclass=netlink_route_socket pid=6166 comm=syz.2.750 [ 75.853549][ T6163] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 75.865843][ T6163] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.865843][ T6163] [ 75.875640][ T6163] EXT4-fs (loop4): Total free blocks count 0 [ 75.881825][ T6163] EXT4-fs (loop4): Free/Dirty block details [ 75.887769][ T6163] EXT4-fs (loop4): free_blocks=2415919104 [ 75.893501][ T6163] EXT4-fs (loop4): dirty_blocks=32 [ 75.898662][ T6163] EXT4-fs (loop4): Block reservation details [ 75.904651][ T6163] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 75.911529][ T4218] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.032898][ T6191] loop3: detected capacity change from 0 to 2048 [ 76.056319][ T6191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.084047][ T4218] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.105503][ T6197] netlink: 'syz.3.758': attribute type 7 has an invalid length. [ 76.116992][ T6196] delete_channel: no stack [ 76.252827][ T6208] hub 9-0:1.0: USB hub found [ 76.258613][ T6208] hub 9-0:1.0: 8 ports detected [ 76.454671][ T3617] EXT4-fs error (device loop4): __ext4_iget:4985: inode #13: block 127754: comm syz-executor: invalid block [ 76.481235][ T3617] EXT4-fs error (device loop4): __ext4_iget:4985: inode #13: block 127754: comm syz-executor: invalid block [ 76.527239][ T3617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.538243][ T5849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.577854][ T5849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.668052][ T5849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.717988][ T5849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.762069][ T6226] netlink: 'syz.0.770': attribute type 7 has an invalid length. [ 76.784153][ T6225] delete_channel: no stack [ 76.804178][ T5849] bridge_slave_1: left allmulticast mode [ 76.810134][ T5849] bridge_slave_1: left promiscuous mode [ 76.815852][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.833155][ T5849] bridge_slave_0: left allmulticast mode [ 76.838886][ T5849] bridge_slave_0: left promiscuous mode [ 76.844712][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.969657][ T5849] team0: Port device macvlan2 removed [ 76.988724][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.008472][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.022983][ T5849] bond0 (unregistering): Released all slaves [ 77.032912][ T6237] syzkaller0: left allmulticast mode [ 77.042781][ T6219] lo speed is unknown, defaulting to 1000 [ 77.073139][ T6239] lo speed is unknown, defaulting to 1000 [ 77.086827][ T6242] __nla_validate_parse: 9 callbacks suppressed [ 77.086838][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 77.140722][ T5849] hsr_slave_0: left promiscuous mode [ 77.146561][ T5849] hsr_slave_1: left promiscuous mode [ 77.153460][ T5849] veth1_macvtap: left promiscuous mode [ 77.159253][ T5849] veth0_macvtap: left promiscuous mode [ 77.164767][ T5849] veth1_vlan: left promiscuous mode [ 77.242649][ T5849] team0 (unregistering): Port device team_slave_1 removed [ 77.253403][ T5849] team0 (unregistering): Port device team_slave_0 removed [ 77.348046][ T6246] loop2: detected capacity change from 0 to 512 [ 77.386223][ T6246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.398880][ T6246] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.431221][ T6246] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.778: Directory hole found for htree leaf block 0 [ 77.446607][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 77.481235][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 77.481248][ T29] audit: type=1400 audit(1723481501.778:856): avc: denied { read write } for pid=6264 comm="syz.3.782" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.511293][ T29] audit: type=1400 audit(1723481501.808:857): avc: denied { open } for pid=6264 comm="syz.3.782" path="/dev/raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.511472][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.550077][ T29] audit: type=1400 audit(1723481501.808:858): avc: denied { ioctl } for pid=6264 comm="syz.3.782" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.550706][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.582012][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.589312][ T6219] bridge_slave_0: entered allmulticast mode [ 77.596311][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.601909][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 77.604770][ T6219] bridge_slave_0: entered promiscuous mode [ 77.637342][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.644497][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.652107][ T6219] bridge_slave_1: entered allmulticast mode [ 77.658647][ T6219] bridge_slave_1: entered promiscuous mode [ 77.670683][ T6273] delete_channel: no stack [ 77.693216][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.703972][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.750719][ T6219] team0: Port device team_slave_0 added [ 77.760851][ T6219] team0: Port device team_slave_1 added [ 77.777914][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.785037][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.811363][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.823606][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.830669][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.856734][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.868096][ T6282] mmap: syz.0.788 (6282) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.888417][ T6282] can: request_module (can-proto-0) failed. [ 77.888398][ T6219] hsr_slave_0: entered promiscuous mode [ 77.901669][ T6219] hsr_slave_1: entered promiscuous mode [ 77.907986][ T6219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.916651][ T6219] Cannot create hsr debugfs directory [ 77.924289][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 78.138480][ T6290] 9pnet_fd: Insufficient options for proto=fd [ 78.194450][ T6219] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.204952][ T6219] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.214102][ T6219] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.226099][ T6219] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.269958][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.281976][ T29] audit: type=1400 audit(1723481502.578:859): avc: denied { create } for pid=6294 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.303999][ T29] audit: type=1400 audit(1723481502.578:860): avc: denied { ioctl } for pid=6294 comm="syz.3.791" path="socket:[16860]" dev="sockfs" ino=16860 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.307756][ T6219] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.328708][ T29] audit: type=1400 audit(1723481502.578:861): avc: denied { ioctl } for pid=6294 comm="syz.3.791" path="socket:[16373]" dev="sockfs" ino=16373 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.356439][ T6219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.370548][ T6219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.385201][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.392268][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.402237][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.409401][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.423197][ T6304] loop3: detected capacity change from 0 to 512 [ 78.442165][ T6304] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.456685][ T6304] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.793: Directory hole found for htree leaf block 0 [ 78.474412][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.508095][ T6315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6315 comm=syz.3.794 [ 78.590819][ T29] audit: type=1400 audit(1723481502.888:862): avc: denied { name_bind } for pid=6326 comm="syz.2.796" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.641169][ T6219] veth0_vlan: entered promiscuous mode [ 78.647626][ T29] audit: type=1326 audit(1723481502.948:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.3.795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5f1d299f9 code=0x0 [ 78.650749][ T6219] veth1_vlan: entered promiscuous mode [ 78.692405][ T6333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.798'. [ 78.702518][ T6333] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 78.720800][ T6219] veth0_macvtap: entered promiscuous mode [ 78.734045][ T6219] veth1_macvtap: entered promiscuous mode [ 78.747438][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.757968][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.767995][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.778465][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.788277][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.798945][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.808774][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.819208][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.829045][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.839470][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.851053][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.865721][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.876240][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.886116][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.896668][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.906666][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.917333][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.927180][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.937698][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.957836][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.969809][ T6339] lo speed is unknown, defaulting to 1000 [ 78.993527][ T6219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.002331][ T6219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.011117][ T6219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.020099][ T6219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.059755][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 79.111716][ T29] audit: type=1400 audit(1723481503.408:864): avc: denied { setattr } for pid=6334 comm="syz.2.799" name="/" dev="configfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.140472][ T6345] netlink: 596 bytes leftover after parsing attributes in process `syz.0.802'. [ 79.174750][ T29] audit: type=1400 audit(1723481503.468:865): avc: denied { getopt } for pid=6349 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.196294][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'. [ 79.218410][ T6354] loop4: detected capacity change from 0 to 512 [ 79.239634][ T6356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6356 comm=syz.0.805 [ 79.247374][ T6354] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.266531][ T6354] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.804: Directory hole found for htree leaf block 0 [ 79.306260][ T6361] loop4: detected capacity change from 0 to 2048 [ 79.452403][ T6372] loop3: detected capacity change from 0 to 512 [ 79.465410][ T6372] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.809: iget: bogus i_mode (0) [ 79.477332][ T6372] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.809: couldn't read orphan inode 17 (err -117) [ 79.690325][ T6389] loop3: detected capacity change from 0 to 164 [ 79.698986][ T6389] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 79.771560][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 79.805671][ T6406] loop2: detected capacity change from 0 to 1764 [ 80.001349][ T6407] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 80.413947][ T6414] macvlan0: entered promiscuous mode [ 80.579543][ T6420] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 80.592224][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.599619][ T6421] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 80.608413][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.649624][ T6424] netlink: 'syz.2.821': attribute type 6 has an invalid length. [ 80.657746][ T6423] delete_channel: no stack [ 81.080158][ T6413] macvlan0: left promiscuous mode [ 81.101832][ T6433] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.151012][ T6442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6442 comm=syz.0.828 [ 81.228790][ T6446] loop3: detected capacity change from 0 to 2048 [ 81.362772][ T3338] IPVS: starting estimator thread 0... [ 81.397794][ T6481] loop4: detected capacity change from 0 to 512 [ 81.434220][ T6486] loop3: detected capacity change from 0 to 128 [ 81.448223][ T6481] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 81.459132][ T6486] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.495812][ T6478] IPVS: using max 2928 ests per chain, 146400 per kthread [ 81.505346][ T6490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6490 comm=syz.0.841 [ 82.272882][ T6519] loop4: detected capacity change from 0 to 512 [ 82.280425][ T6519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.291368][ T6519] EXT4-fs (loop4): 1 truncate cleaned up [ 82.298126][ T6519] EXT4-fs error (device loop4): ext4_generic_delete_entry:2678: inode #2: block 13: comm syz.4.850: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 82.318530][ T6519] EXT4-fs (loop4): Remounting filesystem read-only [ 82.325154][ T6519] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.850: Deleting old file: nlink 4, error=-117 [ 82.379650][ T6535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6535 comm=syz.4.853 [ 82.417647][ T6539] loop4: detected capacity change from 0 to 4096 [ 82.476835][ T6542] loop2: detected capacity change from 0 to 2048 [ 82.556982][ T6552] loop2: detected capacity change from 0 to 1024 [ 82.576807][ T6552] ext4: Unknown parameter 'smackfshat' [ 82.577868][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 82.601640][ T6559] netlink: 'syz.4.859': attribute type 6 has an invalid length. [ 82.619754][ T6558] delete_channel: no stack [ 82.663142][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6571 comm=syz.4.864 [ 82.715228][ T6584] lo speed is unknown, defaulting to 1000 [ 82.737510][ T6581] loop4: detected capacity change from 0 to 128 [ 82.752187][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 82.752200][ T29] audit: type=1326 audit(1723481507.048:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 82.753356][ T6581] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 82.767618][ T29] audit: type=1326 audit(1723481507.048:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 82.787375][ T6581] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 82.790779][ T29] audit: type=1326 audit(1723481507.048:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 82.813946][ T6581] FAT-fs (loop4): Filesystem has been set read-only [ 82.822080][ T29] audit: type=1326 audit(1723481507.048:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 82.876214][ T29] audit: type=1326 audit(1723481507.048:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 82.896202][ T6587] loop2: detected capacity change from 0 to 4096 [ 82.899355][ T29] audit: type=1326 audit(1723481507.048:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 82.929151][ T29] audit: type=1326 audit(1723481507.048:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 82.958115][ T29] audit: type=1326 audit(1723481507.148:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 82.981349][ T29] audit: type=1326 audit(1723481507.148:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b488299f9 code=0x7ffc0000 [ 83.004764][ T29] audit: type=1326 audit(1723481507.148:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b48828390 code=0x7ffc0000 [ 83.107957][ T6615] lo speed is unknown, defaulting to 1000 [ 83.118031][ T6591] cgroup: fork rejected by pids controller in /syz4 [ 83.213659][ T6738] lo speed is unknown, defaulting to 1000 [ 83.231399][ T6740] netlink: 112 bytes leftover after parsing attributes in process `syz.3.874'. [ 83.243525][ T6738] netlink: 5 bytes leftover after parsing attributes in process `syz.4.873'. [ 83.253306][ T6738] 0ªX¹¦D: renamed from gretap0 [ 83.256927][ T6743] syz.0.872[6743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.258197][ T6743] syz.0.872[6743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.273462][ T6738] 0ªX¹¦D: entered allmulticast mode [ 83.290014][ T6738] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 83.309262][ T6740] team0: Device ipvlan2 is already an upper device of the team interface [ 83.323718][ T6745] loop3: detected capacity change from 0 to 128 [ 83.334110][ T6745] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.336714][ T6747] netlink: 'syz.4.875': attribute type 6 has an invalid length. [ 83.376056][ T6746] delete_channel: no stack [ 83.403548][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 83.483605][ T6763] loop4: detected capacity change from 0 to 1024 [ 83.551791][ T6767] loop4: detected capacity change from 0 to 2048 [ 83.579864][ T6773] loop3: detected capacity change from 0 to 512 [ 83.596799][ T6773] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.646601][ T6781] netlink: 'syz.3.886': attribute type 6 has an invalid length. [ 83.654593][ T6780] delete_channel: no stack [ 83.732892][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 83.748115][ T6790] usb usb5: usbfs: process 6790 (syz.2.890) did not claim interface 0 before use [ 83.795870][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 83.810251][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.891'. [ 83.822296][ T6802] loop2: detected capacity change from 0 to 512 [ 83.829589][ T6802] ext4: Unknown parameter 'fsuuid' [ 83.880084][ T6809] loop3: detected capacity change from 0 to 512 [ 83.936825][ T6823] netlink: 'syz.3.898': attribute type 7 has an invalid length. [ 83.951482][ T6822] delete_channel: no stack [ 83.998740][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 84.025313][ T6832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6832 comm=syz.3.901 [ 84.042553][ T6832] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.090340][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.907'. [ 84.099282][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 84.122283][ T6854] program syz.2.910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.144276][ T6861] netlink: 'syz.3.912': attribute type 7 has an invalid length. [ 84.152258][ T6858] delete_channel: no stack [ 84.169701][ T6859] lo speed is unknown, defaulting to 1000 [ 84.514077][ T6901] macsec1: entered promiscuous mode [ 84.519431][ T6901] vlan0: entered promiscuous mode [ 84.524649][ T6901] macsec1: entered allmulticast mode [ 84.529956][ T6901] vlan0: entered allmulticast mode [ 84.535218][ T6901] veth0_vlan: entered allmulticast mode [ 84.542390][ T6901] vlan0: left allmulticast mode [ 84.547390][ T6901] veth0_vlan: left allmulticast mode [ 84.552849][ T6901] vlan0: left promiscuous mode [ 84.600197][ T6904] netlink: 'syz.3.926': attribute type 7 has an invalid length. [ 84.608221][ T6903] delete_channel: no stack [ 84.799551][ T6914] loop3: detected capacity change from 0 to 1024 [ 84.828443][ T4218] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 84.840248][ T4218] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 84.862396][ T5828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.918253][ T5828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.968329][ T5828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.985088][ T6918] lo speed is unknown, defaulting to 1000 [ 85.019262][ T6935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6935 comm=syz.0.938 [ 85.036505][ T5828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.063508][ T6940] netlink: 'syz.0.939': attribute type 7 has an invalid length. [ 85.071611][ T6939] delete_channel: no stack [ 85.089175][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 85.131669][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.138848][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.146510][ T6918] bridge_slave_0: entered allmulticast mode [ 85.152893][ T6918] bridge_slave_0: entered promiscuous mode [ 85.167130][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.174212][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.181711][ T6918] bridge_slave_1: entered allmulticast mode [ 85.188159][ T6918] bridge_slave_1: entered promiscuous mode [ 85.219345][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.229674][ T5828] bridge_slave_1: left allmulticast mode [ 85.235438][ T5828] bridge_slave_1: left promiscuous mode [ 85.241096][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.251767][ T5828] bridge_slave_0: left allmulticast mode [ 85.257603][ T5828] bridge_slave_0: left promiscuous mode [ 85.263313][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.396869][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.407421][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.418378][ T5828] bond0 (unregistering): Released all slaves [ 85.428284][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.457430][ T6918] team0: Port device team_slave_0 added [ 85.468758][ T6918] team0: Port device team_slave_1 added [ 85.486984][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.494126][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.520231][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.531739][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.538709][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.564662][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.596072][ T5828] hsr_slave_0: left promiscuous mode [ 85.601828][ T5828] hsr_slave_1: left promiscuous mode [ 85.607582][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.615125][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.617101][ T6963] loop4: detected capacity change from 0 to 1024 [ 85.629172][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.634385][ T6963] EXT4-fs: Ignoring removed oldalloc option [ 85.636768][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.642620][ T6963] journal_path: Lookup failure for './file0' [ 85.655702][ T6963] EXT4-fs: error: could not find journal device path [ 85.665933][ T5828] veth1_macvtap: left promiscuous mode [ 85.671435][ T5828] veth0_macvtap: left promiscuous mode [ 85.677163][ T5828] veth1_vlan: left promiscuous mode [ 85.682478][ T5828] veth0_vlan: left promiscuous mode [ 85.798027][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 85.808004][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 85.864662][ T6918] hsr_slave_0: entered promiscuous mode [ 85.871514][ T6918] hsr_slave_1: entered promiscuous mode [ 85.878032][ T6918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.890281][ T6918] Cannot create hsr debugfs directory [ 85.902600][ T6982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6982 comm=syz.4.949 [ 85.967995][ T6990] netlink: 'syz.4.950': attribute type 7 has an invalid length. [ 85.980230][ T6989] delete_channel: no stack [ 85.983666][ T6975] lo speed is unknown, defaulting to 1000 [ 86.113179][ T6975] chnl_net:caif_netlink_parms(): no params data found [ 86.181452][ T7014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7014 comm=syz.4.958 [ 86.187871][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.200928][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.224818][ T6975] bridge_slave_0: entered allmulticast mode [ 86.242337][ T6975] bridge_slave_0: entered promiscuous mode [ 86.259226][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.266368][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.273870][ T6975] bridge_slave_1: entered allmulticast mode [ 86.281038][ T6975] bridge_slave_1: entered promiscuous mode [ 86.295106][ T5828] IPVS: stop unused estimator thread 0... [ 86.299957][ T7026] netlink: 'syz.4.961': attribute type 7 has an invalid length. [ 86.315377][ T7025] delete_channel: no stack [ 86.322041][ T6975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.335459][ T6975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.375225][ T6975] team0: Port device team_slave_0 added [ 86.389136][ T6975] team0: Port device team_slave_1 added [ 86.411943][ T6918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.432994][ T5828] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.455142][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.458534][ T7063] loop4: detected capacity change from 0 to 1024 [ 86.462179][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.475672][ T7063] EXT4-fs: Ignoring removed orlov option [ 86.495275][ T6975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.496488][ T6918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.500950][ T7063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.528516][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.535617][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.561661][ T6975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.572874][ T6918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.587225][ T5828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.604932][ T6918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.639662][ T5828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.679718][ T6975] hsr_slave_0: entered promiscuous mode [ 86.686368][ T6975] hsr_slave_1: entered promiscuous mode [ 86.692519][ T6975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.702207][ T6975] Cannot create hsr debugfs directory [ 86.715368][ T5828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.780743][ T7070] loop4: detected capacity change from 0 to 256 [ 86.821934][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.836131][ T7072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7072 comm=syz.4.970 [ 86.882070][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.897205][ T5828] bridge_slave_1: left allmulticast mode [ 86.902890][ T5828] bridge_slave_1: left promiscuous mode [ 86.908673][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.926556][ T5828] bridge_slave_0: left allmulticast mode [ 86.932400][ T5828] bridge_slave_0: left promiscuous mode [ 86.938250][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.097770][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.117204][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.127868][ T5828] bond0 (unregistering): Released all slaves [ 87.156693][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.163881][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.178047][ T7078] loop4: detected capacity change from 0 to 2048 [ 87.187904][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.195065][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.262825][ T7084] lo speed is unknown, defaulting to 1000 [ 87.288946][ T5828] hsr_slave_0: left promiscuous mode [ 87.294566][ T5828] hsr_slave_1: left promiscuous mode [ 87.304240][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.311793][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.319426][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.328682][ T5828] veth1_macvtap: left promiscuous mode [ 87.334157][ T5828] veth0_macvtap: left promiscuous mode [ 87.339816][ T5828] veth1_vlan: left promiscuous mode [ 87.345156][ T5828] veth0_vlan: left promiscuous mode [ 87.433260][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 87.444078][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 87.495597][ T3333] lo speed is unknown, defaulting to 1000 [ 87.546350][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.559379][ T7097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7097 comm=syz.0.979 [ 87.572765][ T7102] FAULT_INJECTION: forcing a failure. [ 87.572765][ T7102] name failslab, interval 1, probability 0, space 0, times 0 [ 87.585459][ T7102] CPU: 1 UID: 0 PID: 7102 Comm: syz.2.980 Not tainted 6.11.0-rc3-syzkaller #0 [ 87.594411][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 87.604740][ T7102] Call Trace: [ 87.608010][ T7102] [ 87.611012][ T7102] dump_stack_lvl+0xf2/0x150 [ 87.615589][ T7102] dump_stack+0x15/0x20 [ 87.619792][ T7102] should_fail_ex+0x229/0x230 [ 87.624541][ T7102] ? sctp_add_bind_addr+0x6f/0x1e0 [ 87.629635][ T7102] should_failslab+0x8f/0xb0 [ 87.634208][ T7102] __kmalloc_cache_noprof+0x4b/0x2a0 [ 87.639483][ T7102] sctp_add_bind_addr+0x6f/0x1e0 [ 87.644473][ T7102] sctp_copy_local_addr_list+0x19b/0x220 [ 87.650120][ T7102] sctp_copy_one_addr+0x83/0x410 [ 87.655158][ T7102] sctp_bind_addr_copy+0x81/0x2b0 [ 87.660249][ T7102] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 87.666429][ T7102] sctp_connect_new_asoc+0x1d0/0x3b0 [ 87.671754][ T7102] sctp_sendmsg+0xf05/0x1920 [ 87.676357][ T7102] ? __pfx_sctp_sendmsg+0x10/0x10 [ 87.681459][ T7102] inet_sendmsg+0xc5/0xd0 [ 87.685789][ T7102] __sock_sendmsg+0x102/0x180 [ 87.690554][ T7102] __sys_sendto+0x1e5/0x260 [ 87.695142][ T7102] __x64_sys_sendto+0x78/0x90 [ 87.699825][ T7102] x64_sys_call+0x2959/0x2d60 [ 87.704568][ T7102] do_syscall_64+0xc9/0x1c0 [ 87.709111][ T7102] ? clear_bhb_loop+0x55/0xb0 [ 87.713846][ T7102] ? clear_bhb_loop+0x55/0xb0 [ 87.718570][ T7102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.724464][ T7102] RIP: 0033:0x7f5b488299f9 [ 87.728896][ T7102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.748494][ T7102] RSP: 002b:00007f5b474a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.756963][ T7102] RAX: ffffffffffffffda RBX: 00007f5b489c5f80 RCX: 00007f5b488299f9 [ 87.764959][ T7102] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 87.772936][ T7102] RBP: 00007f5b474a7090 R08: 0000000020000000 R09: 000000000000001c [ 87.781070][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.789021][ T7102] R13: 0000000000000000 R14: 00007f5b489c5f80 R15: 00007ffddc55fe58 [ 87.797015][ T7102] [ 87.863431][ T6918] veth0_vlan: entered promiscuous mode [ 87.878330][ T7116] loop2: detected capacity change from 0 to 512 [ 87.879151][ T6918] veth1_vlan: entered promiscuous mode [ 87.908658][ T7116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.911224][ T6918] veth0_macvtap: entered promiscuous mode [ 87.930003][ T7116] EXT4-fs (loop2): 1 truncate cleaned up [ 87.934031][ T6918] veth1_macvtap: entered promiscuous mode [ 87.959085][ T6975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.007679][ T6975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.016750][ T6975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.033591][ T6975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.057110][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.067610][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.077440][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.088133][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.098026][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.108582][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.118406][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.128821][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.143384][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.171598][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.182249][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.192098][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.202620][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.212478][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.223025][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.232911][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.243420][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.254259][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.262678][ T7125] delete_channel: no stack [ 88.267157][ T6918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.275997][ T6918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.284850][ T6918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.293546][ T6918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.311016][ T7092] chnl_net:caif_netlink_parms(): no params data found [ 88.326394][ T7129] sctp: [Deprecated]: syz.2.986 (pid 7129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.326394][ T7129] Use struct sctp_sack_info instead [ 88.404236][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.411396][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.427103][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 88.427116][ T29] audit: type=1400 audit(1723481512.728:1048): avc: denied { getopt } for pid=7136 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.427537][ T7092] bridge_slave_0: entered allmulticast mode [ 88.459896][ T7092] bridge_slave_0: entered promiscuous mode [ 88.474234][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.481453][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.489062][ T7092] bridge_slave_1: entered allmulticast mode [ 88.496071][ T7092] bridge_slave_1: entered promiscuous mode [ 88.521736][ T7143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7143 comm=syz.3.988 [ 88.551066][ T7092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.563399][ T7092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.603667][ T7092] team0: Port device team_slave_0 added [ 88.620657][ T7092] team0: Port device team_slave_1 added [ 88.636598][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.648064][ T7151] loop2: detected capacity change from 0 to 128 [ 88.655373][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.662317][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.688255][ T7092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.702219][ T7151] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.722036][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.729095][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.740148][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 88.755283][ T7092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.797787][ T7155] delete_channel: no stack [ 88.813392][ T6975] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.824242][ T7092] hsr_slave_0: entered promiscuous mode [ 88.832271][ T7092] hsr_slave_1: entered promiscuous mode [ 88.839455][ T7092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.847166][ T7092] Cannot create hsr debugfs directory [ 88.859474][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.866633][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.874401][ T7158] __nla_validate_parse: 10 callbacks suppressed [ 88.874412][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 88.898357][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.905440][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.962979][ T7166] netlink: 52 bytes leftover after parsing attributes in process `syz.3.996'. [ 88.965105][ T7167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7167 comm=syz.2.997 [ 89.023647][ T7092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.024366][ T7172] loop3: detected capacity change from 0 to 1024 [ 89.042286][ T7172] EXT4-fs: dax option not supported [ 89.051994][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 89.082721][ T29] audit: type=1400 audit(1723481513.378:1049): avc: denied { ioctl } for pid=7176 comm="syz.2.1000" path="socket:[20293]" dev="sockfs" ino=20293 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.108807][ T7177] netlink: 'syz.2.1000': attribute type 4 has an invalid length. [ 89.125299][ T7092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.140625][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.186411][ T7092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.199643][ T29] audit: type=1400 audit(1723481513.498:1050): avc: denied { bind } for pid=7170 comm="syz.3.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.223226][ T7172] loop3: detected capacity change from 0 to 512 [ 89.226496][ T7185] delete_channel: no stack [ 89.241379][ T7172] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 89.268469][ T7172] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 89.301781][ T6975] veth0_vlan: entered promiscuous mode [ 89.310821][ T6975] veth1_vlan: entered promiscuous mode [ 89.332326][ T7092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.342817][ T7206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7206 comm=syz.3.1006 [ 89.359970][ T7210] loop2: detected capacity change from 0 to 512 [ 89.366494][ T6975] veth0_macvtap: entered promiscuous mode [ 89.373741][ T7210] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.381091][ T7210] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 89.389514][ T7092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.395046][ T7210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 89.404183][ T7210] System zones: 1-12 [ 89.408750][ T7210] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1007: corrupted in-inode xattr: e_value size too large [ 89.410858][ T6975] veth1_macvtap: entered promiscuous mode [ 89.430021][ T7210] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1007: couldn't read orphan inode 15 (err -117) [ 89.442410][ T7092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.455794][ T7212] loop3: detected capacity change from 0 to 512 [ 89.459227][ T7092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.476663][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.487318][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.493805][ T29] audit: type=1400 audit(1723481513.788:1051): avc: denied { accept } for pid=7222 comm="syz.2.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 89.497229][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.528114][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.538107][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.548752][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.558624][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.569177][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.579077][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.589500][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.602474][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.605658][ T7212] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.611134][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.630867][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.640680][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.651151][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.651726][ T29] audit: type=1400 audit(1723481513.948:1052): avc: denied { setattr } for pid=7211 comm="syz.3.1008" path="/8/bus/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.661153][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.696570][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.706508][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.717019][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.726917][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.737373][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.750308][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.770852][ T6975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.779764][ T6975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.788691][ T6975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.793754][ T7228] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1008: corrupted inode contents [ 89.797488][ T6975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.823317][ T7229] delete_channel: no stack [ 89.860464][ T7228] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #19: comm syz.3.1008: mark_inode_dirty error [ 89.877888][ T7228] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1008: corrupted inode contents [ 89.891486][ T3337] IPVS: starting estimator thread 0... [ 89.894535][ T7228] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3007: inode #19: comm syz.3.1008: mark_inode_dirty error [ 89.917415][ T7228] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3010: inode #19: comm syz.3.1008: mark inode dirty (error -117) [ 89.933820][ T7228] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 89.951057][ T7092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.991197][ T7092] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.997912][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.2.1016 [ 90.005355][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.014735][ T7237] IPVS: using max 2592 ests per chain, 129600 per kthread [ 90.017309][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.049272][ T7092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.059840][ T7092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.074386][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.081529][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.106522][ T7258] sch_fq: defrate 0 ignored. [ 90.147091][ T7256] loop3: detected capacity change from 0 to 8192 [ 90.166121][ T7260] delete_channel: no stack [ 90.166856][ T7256] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.192692][ T29] audit: type=1400 audit(1723481514.488:1053): avc: denied { write } for pid=7255 comm="syz.3.1018" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 90.208978][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.216066][ T29] audit: type=1400 audit(1723481514.488:1054): avc: denied { watch } for pid=7255 comm="syz.3.1018" path="/10/file2" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 90.255870][ T7269] FAULT_INJECTION: forcing a failure. [ 90.255870][ T7269] name failslab, interval 1, probability 0, space 0, times 0 [ 90.268551][ T7269] CPU: 1 UID: 0 PID: 7269 Comm: syz.2.1021 Not tainted 6.11.0-rc3-syzkaller #0 [ 90.277493][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 90.287595][ T7269] Call Trace: [ 90.290879][ T7269] [ 90.293810][ T7269] dump_stack_lvl+0xf2/0x150 [ 90.298509][ T7269] dump_stack+0x15/0x20 [ 90.302671][ T7269] should_fail_ex+0x229/0x230 [ 90.307364][ T7269] ? sctp_add_bind_addr+0x6f/0x1e0 [ 90.312668][ T7269] should_failslab+0x8f/0xb0 [ 90.317477][ T7269] __kmalloc_cache_noprof+0x4b/0x2a0 [ 90.322835][ T7269] sctp_add_bind_addr+0x6f/0x1e0 [ 90.327770][ T7269] sctp_copy_local_addr_list+0x19b/0x220 [ 90.333395][ T7269] sctp_copy_one_addr+0x83/0x410 [ 90.338324][ T7269] sctp_bind_addr_copy+0x81/0x2b0 [ 90.343347][ T7269] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 90.349417][ T7269] sctp_connect_new_asoc+0x1d0/0x3b0 [ 90.354786][ T7269] sctp_sendmsg+0xf05/0x1920 [ 90.359494][ T7269] ? __pfx_sctp_sendmsg+0x10/0x10 [ 90.364594][ T7269] inet_sendmsg+0xc5/0xd0 [ 90.369095][ T7269] __sock_sendmsg+0x102/0x180 [ 90.373933][ T7269] __sys_sendto+0x1e5/0x260 [ 90.378500][ T7269] __x64_sys_sendto+0x78/0x90 [ 90.383264][ T7269] x64_sys_call+0x2959/0x2d60 [ 90.387966][ T7269] do_syscall_64+0xc9/0x1c0 [ 90.392464][ T7269] ? clear_bhb_loop+0x55/0xb0 [ 90.397209][ T7269] ? clear_bhb_loop+0x55/0xb0 [ 90.401888][ T7269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.407778][ T7269] RIP: 0033:0x7f5b488299f9 [ 90.412184][ T7269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.431803][ T7269] RSP: 002b:00007f5b47486038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 90.440208][ T7269] RAX: ffffffffffffffda RBX: 00007f5b489c6058 RCX: 00007f5b488299f9 [ 90.448250][ T7269] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 90.456483][ T7269] RBP: 00007f5b47486090 R08: 0000000020000000 R09: 000000000000001c [ 90.464496][ T7269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.472595][ T7269] R13: 0000000000000000 R14: 00007f5b489c6058 R15: 00007ffddc55fe58 [ 90.480809][ T7269] [ 90.516486][ T29] audit: type=1400 audit(1723481514.818:1055): avc: denied { create } for pid=7280 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.577183][ T7292] loop3: detected capacity change from 0 to 512 [ 90.588639][ T29] audit: type=1326 audit(1723481514.888:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6843d99f9 code=0x7ffc0000 [ 90.614796][ T7292] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 90.624651][ T29] audit: type=1326 audit(1723481514.888:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6843d99f9 code=0x7ffc0000 [ 90.691207][ T7092] veth0_vlan: entered promiscuous mode [ 90.698068][ T7307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7307 comm=syz.2.1029 [ 90.700508][ T7092] veth1_vlan: entered promiscuous mode [ 90.732480][ T7092] veth0_macvtap: entered promiscuous mode [ 90.733228][ T7310] loop2: detected capacity change from 0 to 128 [ 90.741949][ T7092] veth1_macvtap: entered promiscuous mode [ 90.770110][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.780697][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.790615][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.801061][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.810878][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.821352][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.831425][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.841871][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.851854][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.862384][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.872316][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.882793][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.895017][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.926086][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.936650][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.946565][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.957003][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.966876][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.977351][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.987168][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.997619][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.007180][ T7317] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 91.007423][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.025592][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.035469][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.045978][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.060825][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.075841][ T7092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.084573][ T7092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.093453][ T7092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.102285][ T7092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.161871][ T5854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.220134][ T7330] netlink: 172 bytes leftover after parsing attributes in process `syz.4.978'. [ 91.239747][ T5854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.288728][ T7337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7337 comm=syz.4.1040 [ 91.309074][ T5854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.379128][ T5854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.417933][ T7343] FAULT_INJECTION: forcing a failure. [ 91.417933][ T7343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.431156][ T7343] CPU: 1 UID: 0 PID: 7343 Comm: syz.4.1041 Not tainted 6.11.0-rc3-syzkaller #0 [ 91.440096][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 91.450231][ T7343] Call Trace: [ 91.453557][ T7343] [ 91.456483][ T7343] dump_stack_lvl+0xf2/0x150 [ 91.461158][ T7343] dump_stack+0x15/0x20 [ 91.465351][ T7343] should_fail_ex+0x229/0x230 [ 91.470092][ T7343] should_fail+0xb/0x10 [ 91.474317][ T7343] should_fail_usercopy+0x1a/0x20 [ 91.479365][ T7343] _copy_from_user+0x1e/0xd0 [ 91.484011][ T7343] copy_msghdr_from_user+0x54/0x2a0 [ 91.489225][ T7343] __sys_sendmsg+0x17d/0x280 [ 91.493914][ T7343] __x64_sys_sendmsg+0x46/0x50 [ 91.498777][ T7343] x64_sys_call+0x2689/0x2d60 [ 91.503480][ T7343] do_syscall_64+0xc9/0x1c0 [ 91.508073][ T7343] ? clear_bhb_loop+0x55/0xb0 [ 91.512784][ T7343] ? clear_bhb_loop+0x55/0xb0 [ 91.517625][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.523587][ T7343] RIP: 0033:0x7f35610e99f9 [ 91.528083][ T7343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.547881][ T7343] RSP: 002b:00007f355fd67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.556393][ T7343] RAX: ffffffffffffffda RBX: 00007f3561285f80 RCX: 00007f35610e99f9 [ 91.564455][ T7343] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 91.572457][ T7343] RBP: 00007f355fd67090 R08: 0000000000000000 R09: 0000000000000000 [ 91.580695][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.588672][ T7343] R13: 0000000000000000 R14: 00007f3561285f80 R15: 00007fff9b79f618 [ 91.596726][ T7343] [ 91.669602][ T5854] bridge_slave_1: left allmulticast mode [ 91.675390][ T5854] bridge_slave_1: left promiscuous mode [ 91.681184][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.712056][ T7348] delete_channel: no stack [ 91.731972][ T5854] bridge_slave_0: left allmulticast mode [ 91.737878][ T5854] bridge_slave_0: left promiscuous mode [ 91.743643][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.916254][ T7356] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1045' sets config #6 [ 91.927287][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.937816][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.949540][ T5854] bond0 (unregistering): Released all slaves [ 91.958464][ T5854] bond1 (unregistering): Released all slaves [ 91.967443][ T7346] netlink: 'syz.4.1042': attribute type 10 has an invalid length. [ 91.989614][ T7346] team0: Port device netdevsim1 added [ 92.001720][ T7350] netlink: 'syz.4.1042': attribute type 10 has an invalid length. [ 92.011475][ T7354] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 92.032116][ T7357] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 92.065202][ T7324] chnl_net:caif_netlink_parms(): no params data found [ 92.088787][ T5854] hsr_slave_0: left promiscuous mode [ 92.100190][ T5854] hsr_slave_1: left promiscuous mode [ 92.111351][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.118958][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.128781][ T7367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7367 comm=syz.1.1050 [ 92.141933][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.149412][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.160790][ T5854] veth1_macvtap: left promiscuous mode [ 92.166344][ T5854] veth0_macvtap: left promiscuous mode [ 92.171906][ T5854] veth1_vlan: left promiscuous mode [ 92.177234][ T5854] veth0_vlan: left promiscuous mode [ 92.187686][ T7371] hub 9-0:1.0: USB hub found [ 92.192495][ T7371] hub 9-0:1.0: 8 ports detected [ 92.268566][ T5854] team0 (unregistering): Port device team_slave_1 removed [ 92.279283][ T5854] team0 (unregistering): Port device team_slave_0 removed [ 92.346360][ T7382] delete_channel: no stack [ 92.372412][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'. [ 92.372660][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.388646][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.396702][ T7324] bridge_slave_0: entered allmulticast mode [ 92.407566][ T7324] bridge_slave_0: entered promiscuous mode [ 92.417305][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.424380][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.432122][ T7324] bridge_slave_1: entered allmulticast mode [ 92.438593][ T7324] bridge_slave_1: entered promiscuous mode [ 92.467565][ T7324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.478983][ T7324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.520678][ T7324] team0: Port device team_slave_0 added [ 92.532665][ T7324] team0: Port device team_slave_1 added [ 92.542431][ T7402] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 92.550911][ T7402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 92.568628][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.575620][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.576605][ T7401] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 92.601670][ T7324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.626486][ T5854] IPVS: stop unused estimator thread 0... [ 92.640774][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.641166][ T7404] loop4: detected capacity change from 0 to 4096 [ 92.648039][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.654703][ T7404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.680679][ T7324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.722428][ T7404] loop4: detected capacity change from 0 to 1024 [ 92.723439][ T7324] hsr_slave_0: entered promiscuous mode [ 92.735319][ T7324] hsr_slave_1: entered promiscuous mode [ 92.736504][ T7408] loop3: detected capacity change from 0 to 1024 [ 92.741324][ T7404] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 92.747820][ T7408] EXT4-fs: Ignoring removed i_version option [ 92.773420][ T7408] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 92.789297][ T7408] EXT4-fs (loop3): Remounting filesystem read-only [ 92.852221][ T7420] delete_channel: no stack [ 92.878540][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'. [ 92.903003][ T7427] loop3: detected capacity change from 0 to 2048 [ 92.909622][ T7427] EXT4-fs: dax option not supported [ 92.921017][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 92.930217][ T7427] bridge_slave_1: left allmulticast mode [ 92.935941][ T7427] bridge_slave_1: left promiscuous mode [ 92.941580][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.949706][ T7427] bridge_slave_0: left allmulticast mode [ 92.955611][ T7427] bridge_slave_0: left promiscuous mode [ 92.961277][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.974428][ T7428] tmpfs: Bad value for 'size' [ 93.102493][ T7324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.111561][ T7324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.120717][ T7324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.130281][ T7324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.163613][ T7324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.177755][ T7324] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.187426][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.194552][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.205696][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.212891][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.281460][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.317757][ T7437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7437 comm=syz.0.1070 [ 93.382553][ T7448] loop4: detected capacity change from 0 to 1024 [ 93.391739][ T7324] veth0_vlan: entered promiscuous mode [ 93.403298][ T7324] veth1_vlan: entered promiscuous mode [ 93.409081][ T7448] EXT4-fs: Ignoring removed i_version option [ 93.425945][ T7324] veth0_macvtap: entered promiscuous mode [ 93.433596][ T7324] veth1_macvtap: entered promiscuous mode [ 93.445577][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.452497][ T7448] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 93.456078][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.456093][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.491526][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.501597][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.504646][ T7448] EXT4-fs (loop4): Remounting filesystem read-only [ 93.512022][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.512041][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.512055][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.512069][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.512080][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.512094][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.512156][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.593037][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.602967][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.613604][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.623584][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.634089][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.644084][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.654548][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.664741][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.675180][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.685012][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.695443][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.705519][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.715994][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.729884][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.746317][ T7324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.755252][ T7324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.764447][ T7324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.773245][ T7324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.808702][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 93.808717][ T29] audit: type=1400 audit(1723481518.108:1099): avc: denied { watch } for pid=7471 comm="syz.4.1078" path="/proc/30/task" dev="proc" ino=22191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 93.879410][ T7478] loop4: detected capacity change from 0 to 8192 [ 93.889937][ T7481] FAULT_INJECTION: forcing a failure. [ 93.889937][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 93.902726][ T7481] CPU: 0 UID: 0 PID: 7481 Comm: syz.2.1035 Not tainted 6.11.0-rc3-syzkaller #0 [ 93.911740][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 93.921835][ T7481] Call Trace: [ 93.925115][ T7481] [ 93.928081][ T7481] dump_stack_lvl+0xf2/0x150 [ 93.932713][ T7481] dump_stack+0x15/0x20 [ 93.936879][ T7481] should_fail_ex+0x229/0x230 [ 93.941812][ T7481] ? sctp_add_bind_addr+0x6f/0x1e0 [ 93.946934][ T7481] should_failslab+0x8f/0xb0 [ 93.951545][ T7481] __kmalloc_cache_noprof+0x4b/0x2a0 [ 93.956866][ T7481] sctp_add_bind_addr+0x6f/0x1e0 [ 93.961435][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 93.961795][ T7481] sctp_copy_local_addr_list+0x19b/0x220 [ 93.976404][ T7481] sctp_copy_one_addr+0x83/0x410 [ 93.981368][ T7481] sctp_bind_addr_copy+0x81/0x2b0 [ 93.986443][ T7481] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 93.992556][ T7481] sctp_connect_new_asoc+0x1d0/0x3b0 [ 93.997981][ T7481] sctp_sendmsg+0xf05/0x1920 [ 94.002564][ T7481] ? __pfx_sctp_sendmsg+0x10/0x10 [ 94.007670][ T7481] inet_sendmsg+0xc5/0xd0 [ 94.012024][ T7481] __sock_sendmsg+0x102/0x180 [ 94.016717][ T7481] __sys_sendto+0x1e5/0x260 [ 94.021263][ T7481] __x64_sys_sendto+0x78/0x90 [ 94.025926][ T7481] x64_sys_call+0x2959/0x2d60 [ 94.030620][ T7481] do_syscall_64+0xc9/0x1c0 [ 94.035132][ T7481] ? clear_bhb_loop+0x55/0xb0 [ 94.035160][ T7481] ? clear_bhb_loop+0x55/0xb0 [ 94.035183][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.035229][ T7481] RIP: 0033:0x7fe9727199f9 [ 94.035243][ T7481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.035262][ T7481] RSP: 002b:00007fe971391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.035282][ T7481] RAX: ffffffffffffffda RBX: 00007fe9728b5f80 RCX: 00007fe9727199f9 [ 94.035294][ T7481] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 94.035304][ T7481] RBP: 00007fe971391090 R08: 0000000020000000 R09: 000000000000001c [ 94.035320][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.035331][ T7481] R13: 0000000000000000 R14: 00007fe9728b5f80 R15: 00007ffe9b295d48 [ 94.035344][ T7481] [ 94.088651][ T7488] loop4: detected capacity change from 0 to 4096 [ 94.102412][ T7491] loop2: detected capacity change from 0 to 1024 [ 94.107380][ T29] audit: type=1400 audit(1723481518.408:1100): avc: denied { append } for pid=7489 comm="syz.3.1084" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.118639][ T7491] EXT4-fs: Ignoring removed i_version option [ 94.127161][ T7494] loop3: detected capacity change from 0 to 512 [ 94.151032][ T7491] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 94.180013][ T7494] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 94.183758][ T7491] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 94.184088][ T7491] EXT4-fs (loop2): Remounting filesystem read-only [ 94.190465][ T7494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.229863][ T7494] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 94.240258][ T7494] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.255126][ T7494] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 94.262019][ T7494] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.1084: casefold flag without casefold feature [ 94.274998][ T7494] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1084: couldn't read orphan inode 16 (err -117) [ 94.310005][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 94.417972][ T7519] FAULT_INJECTION: forcing a failure. [ 94.417972][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 94.430697][ T7519] CPU: 1 UID: 0 PID: 7519 Comm: syz.3.1093 Not tainted 6.11.0-rc3-syzkaller #0 [ 94.439713][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 94.449798][ T7519] Call Trace: [ 94.453197][ T7519] [ 94.456136][ T7519] dump_stack_lvl+0xf2/0x150 [ 94.460733][ T7519] dump_stack+0x15/0x20 [ 94.464948][ T7519] should_fail_ex+0x229/0x230 [ 94.469636][ T7519] ? sctp_add_bind_addr+0x6f/0x1e0 [ 94.474743][ T7519] should_failslab+0x8f/0xb0 [ 94.479420][ T7519] __kmalloc_cache_noprof+0x4b/0x2a0 [ 94.484816][ T7519] sctp_add_bind_addr+0x6f/0x1e0 [ 94.489748][ T7519] sctp_copy_local_addr_list+0x19b/0x220 [ 94.495374][ T7519] sctp_copy_one_addr+0x83/0x410 [ 94.500343][ T7519] sctp_bind_addr_copy+0x81/0x2b0 [ 94.505357][ T7519] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 94.511501][ T7519] sctp_connect_new_asoc+0x1d0/0x3b0 [ 94.516823][ T7519] sctp_sendmsg+0xf05/0x1920 [ 94.521416][ T7519] ? __pfx_sctp_sendmsg+0x10/0x10 [ 94.526436][ T7519] inet_sendmsg+0xc5/0xd0 [ 94.530755][ T7519] __sock_sendmsg+0x102/0x180 [ 94.535442][ T7519] __sys_sendto+0x1e5/0x260 [ 94.539937][ T7519] __x64_sys_sendto+0x78/0x90 [ 94.544665][ T7519] x64_sys_call+0x2959/0x2d60 [ 94.549409][ T7519] do_syscall_64+0xc9/0x1c0 [ 94.553914][ T7519] ? clear_bhb_loop+0x55/0xb0 [ 94.558704][ T7519] ? clear_bhb_loop+0x55/0xb0 [ 94.563505][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.569399][ T7519] RIP: 0033:0x7fdde98899f9 [ 94.573863][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.593522][ T7519] RSP: 002b:00007fdde8507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.601928][ T7519] RAX: ffffffffffffffda RBX: 00007fdde9a25f80 RCX: 00007fdde98899f9 [ 94.609885][ T7519] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 94.617865][ T7519] RBP: 00007fdde8507090 R08: 0000000020000000 R09: 000000000000001c [ 94.625903][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.633986][ T7519] R13: 0000000000000000 R14: 00007fdde9a25f80 R15: 00007ffc7338ea58 [ 94.641966][ T7519] [ 94.691823][ T7522] loop2: detected capacity change from 0 to 2048 [ 94.703056][ T7524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7524 comm=syz.3.1095 [ 94.717929][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'. [ 94.740307][ T29] audit: type=1326 audit(1723481519.038:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.1.1097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6843d99f9 code=0x0 [ 94.766134][ T29] audit: type=1400 audit(1723481519.068:1102): avc: denied { bind } for pid=7521 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.818538][ T7531] 9pnet: Could not find request transport: 01777777777777777777777 [ 94.837310][ T29] audit: type=1400 audit(1723481519.128:1103): avc: denied { map } for pid=7535 comm="syz.0.1100" path="/proc/633/attr/sockcreate" dev="proc" ino=22325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 94.844447][ T7531] loop3: detected capacity change from 0 to 4096 [ 94.860859][ T29] audit: type=1400 audit(1723481519.128:1104): avc: denied { execute } for pid=7535 comm="syz.0.1100" path="/proc/633/attr/sockcreate" dev="proc" ino=22325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 94.899084][ T7539] delete_channel: no stack [ 94.958381][ T7548] netlink: 'syz.0.1105': attribute type 1 has an invalid length. [ 94.966361][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 94.976111][ T7554] FAULT_INJECTION: forcing a failure. [ 94.976111][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 94.988883][ T7554] CPU: 0 UID: 0 PID: 7554 Comm: syz.3.1106 Not tainted 6.11.0-rc3-syzkaller #0 [ 94.989548][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1105'. [ 94.997892][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 94.997907][ T7554] Call Trace: [ 94.997913][ T7554] [ 94.997920][ T7554] dump_stack_lvl+0xf2/0x150 [ 95.009913][ T7548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1105'. [ 95.016869][ T7554] dump_stack+0x15/0x20 [ 95.022539][ T7548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1105'. [ 95.023105][ T7554] should_fail_ex+0x229/0x230 [ 95.028199][ T7548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1105'. [ 95.036585][ T7554] ? sctp_add_bind_addr+0x6f/0x1e0 [ 95.036612][ T7554] should_failslab+0x8f/0xb0 [ 95.060669][ T7556] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1107'. [ 95.063478][ T7554] __kmalloc_cache_noprof+0x4b/0x2a0 [ 95.068710][ T7556] 0·: renamed from hsr_slave_1 (while UP) [ 95.073195][ T7554] sctp_add_bind_addr+0x6f/0x1e0 [ 95.098094][ T7554] sctp_copy_local_addr_list+0x19b/0x220 [ 95.103717][ T7554] sctp_copy_one_addr+0x83/0x410 [ 95.108635][ T7554] sctp_bind_addr_copy+0x81/0x2b0 [ 95.113762][ T7554] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 95.119831][ T7554] sctp_connect_new_asoc+0x1d0/0x3b0 [ 95.125171][ T7554] sctp_sendmsg+0xf05/0x1920 [ 95.129791][ T7554] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.134797][ T7554] inet_sendmsg+0xc5/0xd0 [ 95.139199][ T7554] __sock_sendmsg+0x102/0x180 [ 95.143894][ T7554] __sys_sendto+0x1e5/0x260 [ 95.148488][ T7554] __x64_sys_sendto+0x78/0x90 [ 95.153239][ T7554] x64_sys_call+0x2959/0x2d60 [ 95.157897][ T7554] do_syscall_64+0xc9/0x1c0 [ 95.162396][ T7554] ? clear_bhb_loop+0x55/0xb0 [ 95.167239][ T7554] ? clear_bhb_loop+0x55/0xb0 [ 95.171984][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.177928][ T7554] RIP: 0033:0x7fdde98899f9 [ 95.182347][ T7554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.202020][ T7554] RSP: 002b:00007fdde8507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.210412][ T7554] RAX: ffffffffffffffda RBX: 00007fdde9a25f80 RCX: 00007fdde98899f9 [ 95.218455][ T7554] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 95.226434][ T7554] RBP: 00007fdde8507090 R08: 0000000020000000 R09: 000000000000001c [ 95.229883][ T7559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7559 comm=syz.4.1107 [ 95.234394][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.234409][ T7554] R13: 0000000000000000 R14: 00007fdde9a25f80 R15: 00007ffc7338ea58 [ 95.234427][ T7554] [ 95.270630][ T7556] 0·: entered allmulticast mode [ 95.278133][ T7556] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 95.295394][ T7557] netlink: 'syz.4.1107': attribute type 10 has an invalid length. [ 95.303209][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1107'. [ 95.308587][ T7564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7564 comm=syz.0.1108 [ 95.312660][ T7557] hsr0: entered promiscuous mode [ 95.329794][ T7557] hsr0: entered allmulticast mode [ 95.335013][ T7557] hsr_slave_0: entered allmulticast mode [ 95.343355][ T7557] bridge0: port 3(hsr0) entered blocking state [ 95.349600][ T7557] bridge0: port 3(hsr0) entered disabled state [ 95.353509][ T7567] loop3: detected capacity change from 0 to 512 [ 95.358527][ T7557] bridge0: port 3(hsr0) entered blocking state [ 95.363402][ T7567] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.368284][ T7557] bridge0: port 3(hsr0) entered forwarding state [ 95.374921][ T7567] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1109: corrupted in-inode xattr: bad e_name length [ 95.401152][ T7567] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1109: couldn't read orphan inode 15 (err -117) [ 95.433322][ T7572] veth1_macvtap: left promiscuous mode [ 95.453386][ T7572] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 95.488199][ T7581] loop4: detected capacity change from 0 to 1024 [ 95.495524][ T7581] EXT4-fs: Ignoring removed i_version option [ 95.507423][ T7581] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 95.523750][ T7581] EXT4-fs (loop4): Remounting filesystem read-only [ 95.545814][ T7092] EXT4-fs unmount: 57 callbacks suppressed [ 95.545829][ T7092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.552370][ T7587] loop2: detected capacity change from 0 to 1024 [ 95.569254][ T7587] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.580582][ T7587] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 95.600124][ T7587] EXT4-fs (loop2): invalid journal inode [ 95.613482][ T7587] EXT4-fs (loop2): can't get journal size [ 95.620878][ T7591] loop4: detected capacity change from 0 to 2048 [ 95.629884][ T7593] FAULT_INJECTION: forcing a failure. [ 95.629884][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 95.640379][ T7596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7596 comm=syz.0.1120 [ 95.642623][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.1.1119 Not tainted 6.11.0-rc3-syzkaller #0 [ 95.663759][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 95.673808][ T7593] Call Trace: [ 95.677076][ T7593] [ 95.679994][ T7593] dump_stack_lvl+0xf2/0x150 [ 95.684605][ T7593] dump_stack+0x15/0x20 [ 95.688823][ T7593] should_fail_ex+0x229/0x230 [ 95.693561][ T7593] ? sctp_add_bind_addr+0x6f/0x1e0 [ 95.698664][ T7593] should_failslab+0x8f/0xb0 [ 95.703250][ T7593] __kmalloc_cache_noprof+0x4b/0x2a0 [ 95.708663][ T7593] sctp_add_bind_addr+0x6f/0x1e0 [ 95.713719][ T7593] sctp_copy_local_addr_list+0x19b/0x220 [ 95.719343][ T7593] sctp_copy_one_addr+0x83/0x410 [ 95.724304][ T7593] sctp_bind_addr_copy+0x81/0x2b0 [ 95.729379][ T7593] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 95.735491][ T7593] sctp_connect_new_asoc+0x1d0/0x3b0 [ 95.740801][ T7593] sctp_sendmsg+0xf05/0x1920 [ 95.745463][ T7593] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.750502][ T7593] inet_sendmsg+0xc5/0xd0 [ 95.754832][ T7593] __sock_sendmsg+0x102/0x180 [ 95.759508][ T7593] __sys_sendto+0x1e5/0x260 [ 95.764002][ T7593] __x64_sys_sendto+0x78/0x90 [ 95.768735][ T7593] x64_sys_call+0x2959/0x2d60 [ 95.773405][ T7593] do_syscall_64+0xc9/0x1c0 [ 95.777903][ T7593] ? clear_bhb_loop+0x55/0xb0 [ 95.782629][ T7593] ? clear_bhb_loop+0x55/0xb0 [ 95.787295][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.793188][ T7593] RIP: 0033:0x7fa6843d99f9 [ 95.797601][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.817370][ T7593] RSP: 002b:00007fa683051038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.825769][ T7593] RAX: ffffffffffffffda RBX: 00007fa684575f80 RCX: 00007fa6843d99f9 [ 95.833724][ T7593] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 95.841688][ T7593] RBP: 00007fa683051090 R08: 0000000020000000 R09: 000000000000001c [ 95.849648][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.857695][ T7593] R13: 0000000000000000 R14: 00007fa684575f80 R15: 00007ffe4a250a38 [ 95.865680][ T7593] [ 95.870013][ T7587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.896698][ T7591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.012860][ T7092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.037092][ T7608] loop4: detected capacity change from 0 to 1024 [ 96.058080][ T7608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.101336][ T7612] 9pnet_fd: Insufficient options for proto=fd [ 96.142467][ T7092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.194771][ T29] audit: type=1400 audit(1723481520.478:1105): avc: denied { recv } for pid=7584 comm="syz.2.1115" saddr=10.128.0.163 src=30030 daddr=10.128.1.135 dest=54988 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 96.256865][ T6918] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.300830][ T29] audit: type=1400 audit(1723481520.578:1106): avc: denied { accept } for pid=7630 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.320795][ T29] audit: type=1400 audit(1723481520.598:1107): avc: denied { egress } for pid=981 comm="kworker/0:2" saddr=fe80::1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 96.350803][ T7638] FAULT_INJECTION: forcing a failure. [ 96.350803][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 96.363529][ T7638] CPU: 1 UID: 0 PID: 7638 Comm: syz.0.1131 Not tainted 6.11.0-rc3-syzkaller #0 [ 96.370021][ T7641] loop4: detected capacity change from 0 to 512 [ 96.372450][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 96.372464][ T7638] Call Trace: [ 96.372472][ T7638] [ 96.395017][ T7638] dump_stack_lvl+0xf2/0x150 [ 96.399693][ T7638] dump_stack+0x15/0x20 [ 96.403869][ T7638] should_fail_ex+0x229/0x230 [ 96.408570][ T7638] ? sctp_add_bind_addr+0x6f/0x1e0 [ 96.413673][ T7638] should_failslab+0x8f/0xb0 [ 96.418317][ T7638] __kmalloc_cache_noprof+0x4b/0x2a0 [ 96.423602][ T7638] sctp_add_bind_addr+0x6f/0x1e0 [ 96.428532][ T7638] sctp_copy_local_addr_list+0x19b/0x220 [ 96.434356][ T7638] sctp_copy_one_addr+0x83/0x410 [ 96.439287][ T7638] sctp_bind_addr_copy+0x81/0x2b0 [ 96.444313][ T7638] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 96.450475][ T7638] sctp_connect_new_asoc+0x1d0/0x3b0 [ 96.455845][ T7638] sctp_sendmsg+0xf05/0x1920 [ 96.460434][ T7638] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.465514][ T7638] inet_sendmsg+0xc5/0xd0 [ 96.469857][ T7638] __sock_sendmsg+0x102/0x180 [ 96.474532][ T7638] __sys_sendto+0x1e5/0x260 [ 96.479029][ T7638] __x64_sys_sendto+0x78/0x90 [ 96.483747][ T7638] x64_sys_call+0x2959/0x2d60 [ 96.488479][ T7638] do_syscall_64+0xc9/0x1c0 [ 96.492975][ T7638] ? clear_bhb_loop+0x55/0xb0 [ 96.497648][ T7638] ? clear_bhb_loop+0x55/0xb0 [ 96.502317][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.508258][ T7638] RIP: 0033:0x7f54c27299f9 [ 96.512852][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.532559][ T7638] RSP: 002b:00007f54c13a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.540963][ T7638] RAX: ffffffffffffffda RBX: 00007f54c28c5f80 RCX: 00007f54c27299f9 [ 96.549028][ T7638] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 96.557132][ T7638] RBP: 00007f54c13a1090 R08: 0000000020000000 R09: 000000000000001c [ 96.565095][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.573059][ T7638] R13: 0000000000000000 R14: 00007f54c28c5f80 R15: 00007fff82f2ab78 [ 96.581027][ T7638] [ 96.586583][ T7641] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.589280][ T7644] loop3: detected capacity change from 0 to 1024 [ 96.608407][ T7644] loop3: detected capacity change from 0 to 1024 [ 96.611971][ T7641] EXT4-fs (loop4): 1 orphan inode deleted [ 96.620576][ T7641] EXT4-fs (loop4): 1 truncate cleaned up [ 96.629015][ T7644] loop3: detected capacity change from 0 to 1024 [ 96.636811][ T7641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.641346][ T7644] loop3: detected capacity change from 0 to 1024 [ 96.651673][ T7641] EXT4-fs error (device loop4): ext4_lookup:1811: inode #15: comm syz.4.1133: iget: bad extra_isize 46 (inode size 256) [ 96.669584][ T7641] EXT4-fs (loop4): Remounting filesystem read-only [ 96.682290][ T7641] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 96.691530][ T7324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.693506][ T7641] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 96.718374][ T7641] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 96.729288][ T7641] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 96.739028][ T7641] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 96.754726][ T7656] delete_channel: no stack [ 96.765174][ T7092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.810677][ T7670] loop3: detected capacity change from 0 to 764 [ 96.812708][ T7661] netlink: 'syz.0.1138': attribute type 9 has an invalid length. [ 96.832243][ T7670] rock: directory entry would overflow storage [ 96.840588][ T7670] rock: sig=0x4654, size=5, remaining=4 [ 96.863605][ T7678] FAULT_INJECTION: forcing a failure. [ 96.863605][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 96.871077][ T7676] loop4: detected capacity change from 0 to 4096 [ 96.876326][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.2.1145 Not tainted 6.11.0-rc3-syzkaller #0 [ 96.891546][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 96.901616][ T7678] Call Trace: [ 96.904938][ T7678] [ 96.907852][ T7678] dump_stack_lvl+0xf2/0x150 [ 96.912449][ T7678] dump_stack+0x15/0x20 [ 96.916655][ T7678] should_fail_ex+0x229/0x230 [ 96.921327][ T7678] ? sctp_add_bind_addr+0x6f/0x1e0 [ 96.926460][ T7678] should_failslab+0x8f/0xb0 [ 96.931071][ T7678] __kmalloc_cache_noprof+0x4b/0x2a0 [ 96.936348][ T7678] sctp_add_bind_addr+0x6f/0x1e0 [ 96.941370][ T7678] sctp_copy_local_addr_list+0x19b/0x220 [ 96.947135][ T7678] sctp_copy_one_addr+0x83/0x410 [ 96.952068][ T7678] sctp_bind_addr_copy+0x81/0x2b0 [ 96.957153][ T7678] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 96.963307][ T7678] sctp_connect_new_asoc+0x1d0/0x3b0 [ 96.968705][ T7678] sctp_sendmsg+0xf05/0x1920 [ 96.973310][ T7678] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.978327][ T7678] inet_sendmsg+0xc5/0xd0 [ 96.982647][ T7678] __sock_sendmsg+0x102/0x180 [ 96.987328][ T7678] __sys_sendto+0x1e5/0x260 [ 96.991930][ T7678] __x64_sys_sendto+0x78/0x90 [ 96.996778][ T7678] x64_sys_call+0x2959/0x2d60 [ 97.001768][ T7678] do_syscall_64+0xc9/0x1c0 [ 97.006268][ T7678] ? clear_bhb_loop+0x55/0xb0 [ 97.010938][ T7678] ? clear_bhb_loop+0x55/0xb0 [ 97.015608][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.021535][ T7678] RIP: 0033:0x7fe9727199f9 [ 97.025938][ T7678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.045624][ T7678] RSP: 002b:00007fe971391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 97.054037][ T7678] RAX: ffffffffffffffda RBX: 00007fe9728b5f80 RCX: 00007fe9727199f9 [ 97.062011][ T7678] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 97.070056][ T7678] RBP: 00007fe971391090 R08: 0000000020000000 R09: 000000000000001c [ 97.078249][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.086215][ T7678] R13: 0000000000000000 R14: 00007fe9728b5f80 R15: 00007ffe9b295d48 [ 97.094186][ T7678] [ 97.101561][ T7680] rock: directory entry would overflow storage [ 97.107877][ T7680] rock: sig=0x4f50, size=4, remaining=3 [ 97.113472][ T7680] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.122115][ T7676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.144433][ T7676] Process accounting resumed [ 97.181732][ T7092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.194226][ T7686] delete_channel: no stack [ 97.216057][ T7691] FAULT_INJECTION: forcing a failure. [ 97.216057][ T7691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.229168][ T7691] CPU: 0 UID: 0 PID: 7691 Comm: syz.2.1151 Not tainted 6.11.0-rc3-syzkaller #0 [ 97.238128][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.248268][ T7691] Call Trace: [ 97.251542][ T7691] [ 97.254530][ T7691] dump_stack_lvl+0xf2/0x150 [ 97.259135][ T7691] dump_stack+0x15/0x20 [ 97.263305][ T7691] should_fail_ex+0x229/0x230 [ 97.268031][ T7691] should_fail+0xb/0x10 [ 97.272227][ T7691] should_fail_usercopy+0x1a/0x20 [ 97.277271][ T7691] _copy_from_user+0x1e/0xd0 [ 97.281857][ T7691] copy_msghdr_from_user+0x54/0x2a0 [ 97.287111][ T7691] __sys_sendmmsg+0x22a/0x500 [ 97.291817][ T7691] __x64_sys_sendmmsg+0x57/0x70 [ 97.296711][ T7691] x64_sys_call+0xa49/0x2d60 [ 97.301304][ T7691] do_syscall_64+0xc9/0x1c0 [ 97.305816][ T7691] ? clear_bhb_loop+0x55/0xb0 [ 97.310496][ T7691] ? clear_bhb_loop+0x55/0xb0 [ 97.315166][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.321084][ T7691] RIP: 0033:0x7fe9727199f9 [ 97.325503][ T7691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.345109][ T7691] RSP: 002b:00007fe971391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.353653][ T7691] RAX: ffffffffffffffda RBX: 00007fe9728b5f80 RCX: 00007fe9727199f9 [ 97.361742][ T7691] RDX: 0000000000000002 RSI: 0000000020000e80 RDI: 0000000000000003 [ 97.369709][ T7691] RBP: 00007fe971391090 R08: 0000000000000000 R09: 0000000000000000 [ 97.377805][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.385769][ T7691] R13: 0000000000000000 R14: 00007fe9728b5f80 R15: 00007ffe9b295d48 [ 97.393830][ T7691] [ 97.439477][ T7712] loop4: detected capacity change from 0 to 2048 [ 97.457394][ T7712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.462998][ T7720] loop3: detected capacity change from 0 to 512 [ 97.476902][ T7714] loop2: detected capacity change from 0 to 4096 [ 97.487348][ T7712] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1155: bg 0: block 234: padding at end of block bitmap is not set [ 97.504260][ T7720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.523228][ T7720] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.543031][ T7092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.586050][ T6918] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.620603][ T7734] loop3: detected capacity change from 0 to 1024 [ 97.642914][ T7734] loop3: detected capacity change from 0 to 1024 [ 97.661424][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.729080][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.760100][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.777575][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.792337][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.806169][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.829270][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.841904][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.856702][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.864199][ T7750] FAULT_INJECTION: forcing a failure. [ 98.864199][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 98.877036][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.2.1166 Not tainted 6.11.0-rc3-syzkaller #0 [ 98.880608][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.885954][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 98.885967][ T7750] Call Trace: [ 98.885973][ T7750] [ 98.885979][ T7750] dump_stack_lvl+0xf2/0x150 [ 98.886011][ T7750] dump_stack+0x15/0x20 [ 98.902104][ T7753] loop4: detected capacity change from 0 to 1024 [ 98.902331][ T7750] should_fail_ex+0x229/0x230 [ 98.911510][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.913101][ T7750] ? __alloc_skb+0x10b/0x310 [ 98.917683][ T7753] EXT4-fs: Ignoring removed i_version option [ 98.923522][ T7750] should_failslab+0x8f/0xb0 [ 98.935818][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.939129][ T7750] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 98.939158][ T7750] ? xas_load+0x3ae/0x3d0 [ 98.939184][ T7750] __alloc_skb+0x10b/0x310 [ 98.939203][ T7750] tcp_stream_alloc_skb+0x2f/0x1e0 [ 98.939222][ T7750] tcp_sendmsg_locked+0x977/0x2640 [ 98.952703][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.956164][ T7750] ? avc_has_perm_noaudit+0x1cc/0x210 [ 98.956191][ T7750] ? __pfx_tcp_sendmsg+0x10/0x10 [ 98.956210][ T7750] tcp_sendmsg+0x30/0x50 [ 98.969927][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.970961][ T7750] inet_sendmsg+0x77/0xd0 [ 98.981881][ T7734] loop3: detected capacity change from 0 to 1024 [ 98.987505][ T7750] __sock_sendmsg+0x102/0x180 [ 98.987554][ T7750] ____sys_sendmsg+0x312/0x410 [ 99.000164][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.002033][ T7750] __sys_sendmmsg+0x269/0x500 [ 99.015754][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.018944][ T7750] __x64_sys_sendmmsg+0x57/0x70 [ 99.030839][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.034840][ T7750] x64_sys_call+0xa49/0x2d60 [ 99.046189][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.050659][ T7750] do_syscall_64+0xc9/0x1c0 [ 99.062672][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.067831][ T7750] ? clear_bhb_loop+0x55/0xb0 [ 99.067861][ T7750] ? clear_bhb_loop+0x55/0xb0 [ 99.079059][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.083539][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.095011][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.100360][ T7750] RIP: 0033:0x7fe9727199f9 [ 99.100378][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.113937][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.130711][ T7750] RSP: 002b:00007fe971391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.130736][ T7750] RAX: ffffffffffffffda RBX: 00007fe9728b5f80 RCX: 00007fe9727199f9 [ 99.130748][ T7750] RDX: 0000000000000002 RSI: 0000000020000e80 RDI: 0000000000000003 [ 99.130760][ T7750] RBP: 00007fe971391090 R08: 0000000000000000 R09: 0000000000000000 [ 99.130772][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.130784][ T7750] R13: 0000000000000000 R14: 00007fe9728b5f80 R15: 00007ffe9b295d48 [ 99.130800][ T7750] [ 99.144562][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.149199][ T7753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.160220][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.167547][ T7753] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 99.176095][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.177427][ T7753] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 99.190994][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.196482][ T7753] EXT4-fs (loop4): Remounting filesystem read-only [ 99.212566][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.259557][ T7092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.263897][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.285387][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.300619][ T7734] loop3: detected capacity change from 0 to 1024 [ 99.313210][ T7735] loop3: detected capacity change from 0 to 512 [ 99.333723][ T7775] ================================================================== [ 99.341897][ T7775] BUG: KCSAN: data-race in d_alloc_parallel / d_set_d_op [ 99.349002][ T7775] [ 99.351308][ T7775] read-write to 0xffff88810692c6c0 of 4 bytes by task 7776 on cpu 1: [ 99.359439][ T7775] d_set_d_op+0xfb/0x1f0 [ 99.363708][ T7775] proc_ns_dir_lookup+0x180/0x220 [ 99.368710][ T7775] path_openat+0xc5f/0x1f10 [ 99.373192][ T7775] do_filp_open+0xf7/0x200 [ 99.377585][ T7775] do_sys_openat2+0xab/0x120 [ 99.382151][ T7775] __x64_sys_openat+0xf3/0x120 [ 99.386892][ T7775] x64_sys_call+0x1025/0x2d60 [ 99.391546][ T7775] do_syscall_64+0xc9/0x1c0 [ 99.396034][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.401920][ T7775] [ 99.404221][ T7775] read to 0xffff88810692c6c0 of 4 bytes by task 7775 on cpu 0: [ 99.411739][ T7775] d_alloc_parallel+0x60b/0xc80 [ 99.416571][ T7775] path_openat+0x674/0x1f10 [ 99.421048][ T7775] do_filp_open+0xf7/0x200 [ 99.425443][ T7775] do_sys_openat2+0xab/0x120 [ 99.430040][ T7775] __x64_sys_openat+0xf3/0x120 [ 99.434792][ T7775] x64_sys_call+0x1025/0x2d60 [ 99.439466][ T7775] do_syscall_64+0xc9/0x1c0 [ 99.444045][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.449917][ T7775] [ 99.452221][ T7775] value changed: 0x10000000 -> 0x1000000c [ 99.457908][ T7775] [ 99.460204][ T7775] Reported by Kernel Concurrency Sanitizer on: [ 99.466327][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.3.1172 Not tainted 6.11.0-rc3-syzkaller #0 [ 99.475258][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 99.485310][ T7775] ================================================================== [ 99.503949][ T7777] __nla_validate_parse: 8 callbacks suppressed [ 99.503966][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1168'.