last executing test programs: 3.061964425s ago: executing program 1 (id=1095): write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) 3.061474705s ago: executing program 1 (id=1096): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') shutdown(0xffffffffffffffff, 0x1) sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @remote, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)='p', 0x1}, {&(0x7f0000000180)="57fa114cab7d20c5da8b8a1e558ae8aec1e2cd009de0ea0edad30c105ae71211d029dbe80e6634d53a8546912e9f244765fec93731d6d3719a0673980d4efeeb1441b15d2efb2cfc6aedd7f89ab70d97b7c375b0b4b23f41890b750f64d9c9bdd5543211ddcf509a223f93e8c017807e849fbd5cac5c408fc56414bbbc82e69af911cc965c5796c44eabcba8bb51f43f9ecddef8ef7dccfceab3772203ecff9b76a05e1dd576a0db420e899f31c5716402a72c713161192a51e095bdc0", 0xbd}, {&(0x7f0000000300)}, {&(0x7f0000000340)="70951f9b457a87562274d7e21741d433984d1b0a4e9096a0da2fb6f0ced806e1e2b2e3b1197a00a2b4a4a325c730c38820cbfe7fc8463e57695271383b456ebf06abff3e6e7742704d293bed2bb94e0489e446c42cb0afa4b3f09c07d59e7dad09163890a91e50e2d9db02da0c22cd87d36bd8817ec631b7304bc6bfbdccd44b5b94555e9de4d4c6689e4741863310e061a768c49fd92ab9e4edf3f354c939dc5f30881a35a98ec1b70282de19f27b6ba70fce78ab6b604a36110e", 0xbb}, {&(0x7f0000000400)="768981f3af86bfaeedb0fdc0528fa581781ad120a747dc28bde252ae70ce7054dd7b35b8d5b7a45617b5eaf6d26328", 0x2f}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x300}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0x5, @private2, 0x5}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000800)="9c038408efa94f72e3837a227479fcf54d4dd2e641ba8a9f152555bf01053dd7d10e0891a2713d67b9cccac3b9000925c5b710527346df2f18e12593527913b24768fa8c69da4ef837766e8c223e2f511b50186239cba08dce4a76797a225b9aa0c85f4b9866fcb9b0b434d6da8dab2bf6333de2959ffdabeacdfcf47fd3fcad29463b62eaf4f2dbc666c59574943be4eba5a1b7fe32cd5fd0709a85aed82fab31561e78b34bef6fbee9c4072ac556992275055e01", 0xb5}, {&(0x7f00000008c0)="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", 0xff}, {&(0x7f00000009c0)="779374b3d55601bc3e57b7fa3a354501a00d6b1682153a8b6abb4b7ec43a0ad3854abd35297a81eedae32c1061791b312822d7e0bf359046132a84699f08464bc4c54aefbb394f0784f7a56a674e944ef882fbcc41db15530d8919e35281940a62d55c3b7eade278074ed99f399a42f15cda5bf5adc4ddf70af8c72e2f469e6f5028814a5d457c882964cbc45fe3e060fdc95c9c707681b8fec805448576eef448b451967ec1596934f7f58fab8186b9447a63a791ad33a0ca33a33f69a330c7762eb9f6e8e68c2bd0bd1398b783cf7701f75ae48d98", 0xd6}, {&(0x7f0000000ac0)="3b017355a55cad010519792f2b3667c7", 0x10}, {&(0x7f0000000b00)="e659291ac40b2d6169880db1360bf455669fb15a4a90a8e530c7c8bc0c30245105e73652ac51201fdfcc8a3f9ed3f6b5a5250342f51fe068c4ac5c76ee55af3e598ba0d068fadff819152023a6d816fa7032e9b5b6d6fb078cf08bafbec77674d95ef10b53ee8aa188", 0x69}, {&(0x7f0000000b80)="6686110d6af17889c5e70f935a9a43d6c3f137b94faa550a1ceb91b692e3eb8504db9750fcdcad853bcc70f913a836e671c54177be8dd909e295403cc5b9799e6a1dd512ceba4658eb0b699d345b81cf77fb8978", 0x54}], 0x6, &(0x7f0000000d00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffb}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @dstopts={{0x60, 0x29, 0x37, {0x3c, 0x8, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x0, [0x3, 0x1, 0x719, 0x3, 0x3]}}, @enc_lim={0x4, 0x1, 0x36}, @hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0xd5c}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xc9df}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x1, 0xe, 0x0, [@loopback, @mcast1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x1c8}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000f00)="31fe92a99526ae920f6ffbf35a7edb55d921bb3114d1c56831ecf9ca170ed5a813ad2f2ea3ee4a10f62fe17f04d99dce2d84fb7615c1fd9510883c6062093fdae6d7ab784aaf8f5891dedcf9d563f925202b837856f13850cce320ac38b283686636a7678fbcbb315bfac258e6c6b4a262c9e406f3f97ef12c194c045c72027a9dd43ed72d52e222477ad7b320c7d6095ed74c00287f", 0x96}, {&(0x7f0000000fc0)="96bdf4f3dfc1aa6717393b7ad738333c2a3e25919fcd0dc9f989a3ef7dd6a171003772242a256d066c478c12ae9a8dfca74f278cdb96bafbd4ccef6c99afa345722a2b1a1f8895edfc7bd5c3631ffd41b0178612ae4e8fe4269ce8cfa6bf53926418932d49e0bbbfe6812c82c939c0a1d3267145f1e8387799c23f050c1404424dc986942ae7d534d23bd05137789d7e2c5c2bb4ccc4aba31a3920ba53ad11866a093f70102c8c59", 0xa8}, {&(0x7f0000001080)="26692784a61df22ed9ebcf26ea7a3245bb2072808f4b2e874fdf7fe4b6d6be6764dbf613e81ce0fd59bdee4fd85f494f9e762e8172d2b95031efa949e29f8f9d7f91649cc63ee7074bb55d0de43a089a59fccadeacbfba2f4a6f8cc70f294bc4302a72cf1db98c7e1a81ea01a30ac9feecb36b04c64d7195890a804d948a70faf97bdd2a8e937c4976d56b5e3b6718e06f6cf1d0de39d823b5e2e7d68839a3e147ab4cb7b5b8df4fa74923f83d7a43b342c3fd0ad2c311efddf1be5230a189efeeb20427d380b8cbb8a2f56774b3233fb6d4c36cba24035406", 0xd9}, {&(0x7f0000001180)="d53ccff427d07d1d47133fce4a1ee981e78188edb94383d34e668db02fb3080518c52123d2ddc0c02433610073d9aef32eb9c6977313154505f260a221f18200247d23", 0x43}, {&(0x7f0000001200)="b281f08b3e88052a3459067108d239294427ffe1e7f70b2f6601fd078eed3de88725b15451be29cfbed6cedd16a45e7d267525039f49108a8f44e48fb25249e8555bbc89b88f924395adf293a2a1b6697b3eb33e66c4309ee951384b7258bba8e4c6ff89a5585c3dade316789164f4776c0a43da98d9bc784f08327a3f4533528e384ab6edf8ea8cec46add43acb60d2e1f44d72acd22e68f38a0f77b6be8a7af6393410e9a38eabfe874cb945786cc55476280af3ddf6de0ffcd3bb3f35ee5161bf130a4c902f9cb5cf18a22c3c8dd674c390723f59edd2b4d67e62564c51d941c48465eda05f7e42ec2bb4aef0c9923152253dc78f4a54946edaafe64861acd4b7182c64a5940929f99ae6bd29d4806ef4cfba12d3b3ecff692b4142590ab1c6c3535c0d9bc4d0db091b36284941ebf90e90ba94c2ce565b18a4dbb73c0e8502cd9218317834e0b07abe17d56e73bc69e5a6eb10086f12284b83b1fa067dac7c635b933bc0821eedc1b0829a10cfea2a5799b8d9d74805868f82a61511f5591433492ae1e38e1a8533423b149841fd303bf804e537687753fb70f9996af5d2a2feaedaf1c753196a9795d875a371f67fbd87a6a572ae0ef89211bcb43ef44aefe209a4546ab2613c4b63eb9cafa2df2140f9ec2d027217723e09bb8473e7da8d297b6fc1e6a311caf251c21699104ee413889654ca911dd0728eb4a39ca3ceb904d3dd097f3140bb0921fdef9d1d25198fdc1c806aa0684dfe356adbe4fa519eb6080e885cf19d6ee6eab42ffb9d8d841529e10d3c4eccd5f3ce3d5afa2701ac1e42f1ba089c7c498ad16a732a4f23cb07c0f3ba5269b6e1d5f8e2e041d8263d5970e5741632a46b2ebd8c843330c2d47c44428b47efe820eac93f70d8f9560fdbabea7603a606db546d984b748e1cce3a36e873f26d1d5e6ac3f48e5e809659edc4b094787bfd24468f139b50d47011553c159e21653d6aa2e30731314b55bd7e462dfe01af5bf10f0ba321a9b6615533bda27d10e201696ec5a231cf0130186bf6e6e4188e5f5d20134386e546c8cfdb9c2841f04f979bd9690880a114078819237139e37690a41c2cd32d1061f744e10fc6baff5d413c8fc56133deee7ee42d9a28adaf06563865a161a668bb6f142e284767762ea674ec49400080d5de52097a16816cba90b900a77d2e238c5854d15b0980045c30eb233ab7b3d4d724dbe43424994f5c93b07bbcb50cb4c2471a0c1383b82703310d9770ffe68ee4f68528d951dd5017caf23c21f188b1c4f2659f9540ac4459021e803024d559fa91e960526861a8d21e981c829963011aea7c00d8d4b9038aa448a8f7891918fd51d46ce978d5204053fe1b247d17001b75ad56362005470636eb74b620b41602ca949e5d9f850c2a6835aca9da3b72cd316b1070dc1e4d90e15ace1aadae7cb8e8c77db58df09509ba2e31b2dfabf29793c410bfc9e4e7f16f23b6d9e012215b51da4e8663306d619a8ca07b6210d5be0fbfde19c82a20c77995422025d58d434898909dea2e0b87f998c6af5fda10cfb9f2db9fcfe112898a0348b54b1ad1f1465d28ae6589b244183a0d212a54d0f9f1b3b700b48f3ab8a992e6e59799060660fe231b9cdfaac57118f74b9ffb831c690caf09e68e2b1dedbdc1797cecafb37011a791504949c1a38cf0eba34f247dc599a9540dbaca5fb3f390fe62db3c275843ede54cebeba8f6d306347cbd4adbd1ce18ae75bfc409613ec85a955611572a515940ad24ab4de28b590d01944333d004cb86d191f22a88d3f8a13738bc09261e30c105559a4ab427eae1b5fe82edc93e039354af56d2745c1238e311f64854120b3dbecb9343e37f2e59fa89c883b08498f00474136ecb085243ac311106d67bb6c4fee0b97f259aa985a70a1b55122435b9dfdb7ea223d202ce3001ee1758d2164dd8b257a22ea72f1ce35c7bc936276cef6964e6f380a8006e5508434fde1e4de0ae649690f00e33488c0054751a8e276a83130e50395e62384b20d0626f7287c58a5348bcd6ed653ea89f790707416db01254a579acc7c7a89e77274958a9cdceed5c165e0f2faf450b169d83426557709e74ee1db58e44051a0aa24060f9a76a8cc5d68ffb9d60bae2461a03bccae799edf17eae6c62bb7de25a8ed41c315633e77a6410c2a55592043953a68526f7047a09e03e935d1f74facefbd4c135277b6874f0a9d18f818f50e42c6cf5aa492b4205d2ca2e58354e0d118b93184ee23775109e7ca477b22c7e1fff4372e7ec92e34b719adaf3b4573424c2031d90dac2a974e538d15584e279229881dc6892df31c0a4c7c6e580102e04b7cda484aed020d6c680802023627e2bc6530fbc37150bce2c1026322f581d19439d0eab2b12998e9b07e9ff0dc2125cf08a544a1156a79cddd3c01fa3b1587a91bf652ff0d239c499beb4b9e9f1fc6f7118fc10aa815e2714c0f0f51547df111cfd826580f34f49396035add9e3019e270b4d10028ef8b8e2c34dbc17dca691f98b15645b37e236b3213a5d4d5ecd07d7536dc68564eeb2d9170453a4b76d4060abe9730c44ef66b1d61299919c3145a9cca2dae49d3b2d7d51e899e916e6613b57be4febf64fee53b555876536e350445b97e3d5b4c8683a274f9c18e9653b282562a2a8f1e87d9525c2c4d46955b7128b4220232e72ff465994e38d68f3706bed93e7a651abc4038846f43e7a99f78768523c75b24433459189d264d09490329dcec58136f6c44e51aad0b8d762386f56c144640bed1730bedaebcd3dc30174495d6a97ea09ff3f0b7aef3c860dd444c8e7d21e5a3720b81a66b4283ff940be4f364af158e6f4b805ce243da1473387378caad003065d9a73be98e62504d200967ed4d58ce14075b9b1b2fabf7c209901cc82146d8c88b060e90205ecd6f45030fd3a9572c00511e846b499afcd0ac4a21041e3abb8de836664569faca7d48609c64944716211bd79ee4853cc5d0165f821a5e8d9e8cd9cc017100548917125618cee17bd2e2d79fdcda42f1d23b8e1ae4c5aa723fac8bc2982e238cf37508bd3c1699c8ba362a918e81673de4c20dd6198dd13e9577e8f32e07c434c8c258aa0b73474ebc2e3b0e9093bffe2ef93d4a584ba586481675f28445f27ecfb253c8ce69b070e7fd24f01135ece47605b8250b1ef4ac8abaec606f0fa006a8bc5a1e84d96a33f31fda1393b8a16a66bc093ce0c6e60fc271205df38fe7c5bba8bd096e3b8bc6991a1658372cc5af982f55c54e1902a7d29bf1435d8556352390ee0ff30bc544e3225476519d3f3025b470d4d41a7bcf499d5c501de5bfb78c1ea084707903433f4f23eb9143e3aa04acee0d31ac8d83d2944d50a350525fa5e568c7a5c7ddccb109befd71d656fd34f69c592281252067007447e50715b9c5e8364cb21589e9789ab9fcec2147e6a14e11d2daea606d7b920b392b1d22d593f87789bb083d363d8ab33e4ba46b2269dd08122838de93d53fd0bff862225641d18b836482cac40e2178d21ed18c97da40db07ead09ca790ec62be4e5a1c7c1b7cc4816385841f68daf370dfa2f759962132ef425c248e772768f2b0b9f5baa379d5d62938ea556c17564b0aff0d5df942ae192da47c3a981c2603f6f400a1efaf63eb9bf787b347c69cb8e2514dc71277dd6c8d14f178c6eea3fae1a4212ec421a9744973200a2e852db94261cfd43ab492294f1d8943b918f65fd51fa633e724b645ea7ef55ba7e9efd87bc30c4a11af75759fd70ea6854c1fbd9d9225145c8a099c2ccbd84130b81f08b32e92129a62226740c050456760c12042562c0253e9aeae377f31769e9769aa2db059e8a5ba57f9a41995dbb30746b4bf4bf8e4497c2310e109b4a176acdfad8a4b53f481dffc60591f04fa6089e40100426e801cd2fe172e84a956ddbb7de14fb587f13e2952de1f34b4298741de218893d7c01bfecb3e5299aad0bcb236098670a814a3e0b43e11debf226be209da80fd7ddd104d0b7c82ee255427cd1c4749e3e876b7a7d47f0a9094127e3426fbc88257f6737c866235e748e488910237b3930e87dadd5e8a4b3f82e27b5ee311393a377b8ce7cdf064cad4225ddf613d8caacf4e534cf9f46efd26d7f7992d3d6dc2083feaffbf6881651bf1d8e9b2615accd25ad8dd5eddb6a88b11ee9d183cfe72d61e214af6a2e054138f949b4c526425f020bf31e6d04ac4f3040adbf80cfa80000fce1e71fdc171d656e57204c89b06492ddad5d545a2063a2ba1fae4b4b4900529dcc81cae85e2f87d852a86d03258290fce2ea5c8f18ef224f8e8f4a90e628b2bf9b5a30de64c7ae1a43a8019c5e3c6319d2400e377312d70108d622e7bb8c6f9f62f7428b0ec92cd53e4c428bc1d85482dfb54e65d1f85b6409a8b5a91665ff3f37c3937f49eb00cfd61a4f6aebfebfe17b65bd8be6a65c01bf193b2f1a94db201b0a377b32584ff09c199ee00468830be2b00fba4d0f57c3e83e358318d4caeedc73895fbe6a06e9e94420f9eab892aa7b86c3c8d82dde2e07ce4a4157beba67c7251a850d6a2b9a70c566a9ebe4710d2b37435b06997dc988aeb11721a69e7556587d14f4020aaedeab463dff6ca21bf438401c4d0286b92f52f926ac02aa5a7e47202117a577ad3b0f3a7e346a2af9c0f2f6d7ed6286fde564ac9265e6a7cf96cdced4822f580bc52832259685b30d641af47178c283df8faff3f65cec80fbdc044f1fd3bd2941cf03aec79cfad58c9e29fcd37b5e7035747f5d46b1a9da21b1c02737af6766371be8bcb1019578e1d465a487cb8b8374ecb832d9a767007fce2e4be62693b227251fb2a23a9cde1a2b5eec5567257f0d113ac2adb8e23a88dc9a783e9ca352d394acb2d3c1a040446b246332690091ea2c5900a91f6a20c973e1aa213d6775683e2b498371403b673db0cacd7d3c91e188a2d9f94c639c3f8a0b3d900948bf5ac09c867cc3158cd244f69e6ce661818340b281235e836b5216ebc1576e0c1f15555668a5f3d1af38306c228aa9c9c3617fbedf21ac964c3ea82b21fc18265bcfb2ab8beef268f19aee04d27a24b37006ca46f7da26968194f484f70b8fdd30da00db38a45aeeca2d58305e6f83757849f01a4ef7c7ef98a20e69125a020337c2dde18282c941a6bc0c0e504026d1b6f4c66678a3dab354133b0544084e7aa5c71ced5591150b81d2bfdd66bef8fd95bbfd47066d2fa93b41116eeafb1e94fabd5a54c583860c64193d2bff4a37f8075b7b4a55c939c1df7807ffa4ac1e69d068057cc3eca7de4c9b2f306d90c8996934817a5b63174d605772742cfc25cc2c2dfa2783de62cf6f7ff099c58ba0600ca798f61f9f508e046845cd565dd7ed4b6ac861ac6cdcf02de6d8d9b39a844d3a27e39f97bf64ad38775d4af12ff4d5643426e568cb051da37876ec86279595f0e47e64c2ad9590dd48f36b18c77c2e614fb11183f747c8b175cd35a1440d1696602dfa02e4a60449487479517614fb23b3592b998362f1e859950440ffbd89011d268974e86870113d89dbe2d36f7edd7c1cf88b0e288dc1b92e3076bccbd15935760fe4b17d95065dd70ffc397c223f64beab0fa3680536da6a0d41655a8ec96e3cb79b762d602e16da6562aeb29d2f234338fc575eb1a2b3ddab866f38a1ddbc2038556a54a85d1aca7b1693247bc08e54331c9500f6688bb55eca9321a5da3d67bdd43bc19c574c1968d7622ff233a1534bcae03f91d26f8ca900bf5d68d777c3c80acbd7fdbaa0c882fbf001", 0x1000}, {&(0x7f0000002200)="522c2309ffa015752728176f6b86b6edd700deb52ea25d2d83b47c8f7055f0b08004e086c32163223e91d8ff29feb1a2013335e17bb21bc7608f8d10502d2becb6959ff6b5563c7ab59703fb40d85da272384c4519af309084b60059261958b3c8b2786650590bff415c550686df85a8c214d2b2a5aa22b6", 0x78}], 0x6}}, {{&(0x7f0000002300)={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000002340), 0x0, &(0x7f0000002440)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x89}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x8d7021800948cf27, 0x50, 0x0, [@empty]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x0, 0x0, 0x0, [@mcast1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0xe8}}, {{&(0x7f00000025c0)={0xa, 0x4e21, 0x68, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5f65}, 0x1c, &(0x7f00000027c0)=[{0x0}, {&(0x7f00000026c0)}], 0x2, &(0x7f0000002800)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit_2292={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002900)}}], 0x6, 0x20000800) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0) 2.989446961s ago: executing program 1 (id=1097): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) 2.845666793s ago: executing program 1 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000000406010100000000000000030000020500010007000000090002edd81476c9c2a500"], 0x28}, 0x1, 0x0, 0x0, 0xbf18d2c8481f731c}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14140008000200000000000c0002800500010000000000240002801400018008000100ac14140008000200e00000020c0002800500010000000000080007400000000018000e8014000180080001"], 0x7c}}, 0x0) socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, &(0x7f0000000480), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000b40)="4a73d8c800", &(0x7f0000000180)=@tcp=r4, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, 0x0, &(0x7f0000000340)=""/152}, 0x20) r5 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) close(r5) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x4f79, &(0x7f0000000400)={0x0, 0x0, 0x10100, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f0000000140)=0x0) ftruncate(0xffffffffffffffff, 0x5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x27}, &(0x7f0000000180)='./file0\x00', 0x18}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() 1.9962441s ago: executing program 1 (id=1107): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000900)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x5, 0x3}]}}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x1, [0x100000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa007}, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000001700)=0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1.842137753s ago: executing program 2 (id=1110): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000700)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@nombcache}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)="7f", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 1.558276175s ago: executing program 2 (id=1115): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) 1.491629321s ago: executing program 2 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) 1.483145121s ago: executing program 2 (id=1121): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x2, {}, 0xfe}, 0x18) io_uring_setup(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f00000001c0)=0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x1, 0x7fffffff, 0x7}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast1, @empty, [], [], 'vlan1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3a69199fb8f4af703fe193000f3e34e1c27647d8cd16b804edb9654cf89d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r6) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0xa0880, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff}, './file0\x00'}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0xd) read$qrtrtun(r8, &(0x7f0000000280)=""/160, 0xa0) ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000400)={'#! ', '', [], 0xa, "c442c8ccddbcb07452bfd285abc65acd876289ea41e911dd4038660d08d4f889f7876c7d371a07a132e789c0fde58d7e53ecf90e64822604d8c9f2b0028ea307f1501806c38b7928a70509d661ae973dd38e04c1849aca8a6bb7eb1039b644292e9e67f52c6542781b112962823ce92bbcf0dd04005e3e716eb76f5a5cd0d9aad50477c69a4bce485e89ef2f9f1e1d6d11d7c9eef8b80d2bc3ecc8614a702303a9ac58c186291c02bd8c4211d4bae8cd2e34170ca25c866c8261de00000000"}, 0xc3) socket(0x10, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) 1.455903323s ago: executing program 0 (id=1122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0xd8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xbc, 0x6, [@m_connmark={0x8c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x21, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x16c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.422627046s ago: executing program 0 (id=1125): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000700)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@nombcache}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)="7f", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 1.290552057s ago: executing program 3 (id=1129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000000406010100000000000000030000020500010007000000090002edd81476c9c2a500"], 0x28}, 0x1, 0x0, 0x0, 0xbf18d2c8481f731c}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14140008000200000000000c0002800500010000000000240002801400018008000100ac14140008000200e00000020c0002800500010000000000080007400000000018000e8014000180080001"], 0x7c}}, 0x0) socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, &(0x7f0000000480), &(0x7f0000000540)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000b40)="4a73d8c800", &(0x7f0000000180)=@tcp=r4, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, 0x0, &(0x7f0000000340)=""/152}, 0x20) r5 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) close(r5) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x4f79, &(0x7f0000000400)={0x0, 0x0, 0x10100, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f0000000140)=0x0) ftruncate(0xffffffffffffffff, 0x5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x27}, &(0x7f0000000180)='./file0\x00', 0x18}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() 1.280888557s ago: executing program 0 (id=1130): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) 1.175945636s ago: executing program 0 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) 1.175647786s ago: executing program 4 (id=1134): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') shutdown(0xffffffffffffffff, 0x1) sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @remote, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)='p', 0x1}, {&(0x7f0000000180)="57fa114cab7d20c5da8b8a1e558ae8aec1e2cd009de0ea0edad30c105ae71211d029dbe80e6634d53a8546912e9f244765fec93731d6d3719a0673980d4efeeb1441b15d2efb2cfc6aedd7f89ab70d97b7c375b0b4b23f41890b750f64d9c9bdd5543211ddcf509a223f93e8c017807e849fbd5cac5c408fc56414bbbc82e69af911cc965c5796c44eabcba8bb51f43f9ecddef8ef7dccfceab3772203ecff9b76a05e1dd576a0db420e899f31c5716402a72c713161192a51e095bdc0", 0xbd}, {&(0x7f0000000300)}, {&(0x7f0000000340)="70951f9b457a87562274d7e21741d433984d1b0a4e9096a0da2fb6f0ced806e1e2b2e3b1197a00a2b4a4a325c730c38820cbfe7fc8463e57695271383b456ebf06abff3e6e7742704d293bed2bb94e0489e446c42cb0afa4b3f09c07d59e7dad09163890a91e50e2d9db02da0c22cd87d36bd8817ec631b7304bc6bfbdccd44b5b94555e9de4d4c6689e4741863310e061a768c49fd92ab9e4edf3f354c939dc5f30881a35a98ec1b70282de19f27b6ba70fce78ab6b604a36110e", 0xbb}, {&(0x7f0000000400)="768981f3af86bfaeedb0fdc0528fa581781ad120a747dc28bde252ae70ce7054dd7b35b8d5b7a45617b5eaf6d26328", 0x2f}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x300}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0x5, @private2, 0x5}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000800)="9c038408efa94f72e3837a227479fcf54d4dd2e641ba8a9f152555bf01053dd7d10e0891a2713d67b9cccac3b9000925c5b710527346df2f18e12593527913b24768fa8c69da4ef837766e8c223e2f511b50186239cba08dce4a76797a225b9aa0c85f4b9866fcb9b0b434d6da8dab2bf6333de2959ffdabeacdfcf47fd3fcad29463b62eaf4f2dbc666c59574943be4eba5a1b7fe32cd5fd0709a85aed82fab31561e78b34bef6fbee9c4072ac556992275055e01", 0xb5}, {&(0x7f00000008c0)="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", 0xff}, {&(0x7f00000009c0)="779374b3d55601bc3e57b7fa3a354501a00d6b1682153a8b6abb4b7ec43a0ad3854abd35297a81eedae32c1061791b312822d7e0bf359046132a84699f08464bc4c54aefbb394f0784f7a56a674e944ef882fbcc41db15530d8919e35281940a62d55c3b7eade278074ed99f399a42f15cda5bf5adc4ddf70af8c72e2f469e6f5028814a5d457c882964cbc45fe3e060fdc95c9c707681b8fec805448576eef448b451967ec1596934f7f58fab8186b9447a63a791ad33a0ca33a33f69a330c7762eb9f6e8e68c2bd0bd1398b783cf7701f75ae48d98", 0xd6}, {&(0x7f0000000ac0)="3b017355a55cad010519792f2b3667c7", 0x10}, {&(0x7f0000000b00)="e659291ac40b2d6169880db1360bf455669fb15a4a90a8e530c7c8bc0c30245105e73652ac51201fdfcc8a3f9ed3f6b5a5250342f51fe068c4ac5c76ee55af3e598ba0d068fadff819152023a6d816fa7032e9b5b6d6fb078cf08bafbec77674d95ef10b53ee8aa188", 0x69}, {&(0x7f0000000b80)="6686110d6af17889c5e70f935a9a43d6c3f137b94faa550a1ceb91b692e3eb8504db9750fcdcad853bcc70f913a836e671c54177be8dd909e295403cc5b9799e6a1dd512ceba4658eb0b699d345b81cf77fb8978", 0x54}], 0x6, &(0x7f0000000d00)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffb}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @dstopts={{0x60, 0x29, 0x37, {0x3c, 0x8, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x0, [0x3, 0x1, 0x719, 0x3, 0x3]}}, @enc_lim={0x4, 0x1, 0x36}, @hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0xd5c}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xc9df}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x1, 0xe, 0x0, [@loopback, @mcast1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x1c8}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000f00)="31fe92a99526ae920f6ffbf35a7edb55d921bb3114d1c56831ecf9ca170ed5a813ad2f2ea3ee4a10f62fe17f04d99dce2d84fb7615c1fd9510883c6062093fdae6d7ab784aaf8f5891dedcf9d563f925202b837856f13850cce320ac38b283686636a7678fbcbb315bfac258e6c6b4a262c9e406f3f97ef12c194c045c72027a9dd43ed72d52e222477ad7b320c7d6095ed74c00287f", 0x96}, {&(0x7f0000000fc0)="96bdf4f3dfc1aa6717393b7ad738333c2a3e25919fcd0dc9f989a3ef7dd6a171003772242a256d066c478c12ae9a8dfca74f278cdb96bafbd4ccef6c99afa345722a2b1a1f8895edfc7bd5c3631ffd41b0178612ae4e8fe4269ce8cfa6bf53926418932d49e0bbbfe6812c82c939c0a1d3267145f1e8387799c23f050c1404424dc986942ae7d534d23bd05137789d7e2c5c2bb4ccc4aba31a3920ba53ad11866a093f70102c8c59", 0xa8}, {&(0x7f0000001080)="26692784a61df22ed9ebcf26ea7a3245bb2072808f4b2e874fdf7fe4b6d6be6764dbf613e81ce0fd59bdee4fd85f494f9e762e8172d2b95031efa949e29f8f9d7f91649cc63ee7074bb55d0de43a089a59fccadeacbfba2f4a6f8cc70f294bc4302a72cf1db98c7e1a81ea01a30ac9feecb36b04c64d7195890a804d948a70faf97bdd2a8e937c4976d56b5e3b6718e06f6cf1d0de39d823b5e2e7d68839a3e147ab4cb7b5b8df4fa74923f83d7a43b342c3fd0ad2c311efddf1be5230a189efeeb20427d380b8cbb8a2f56774b3233fb6d4c36cba24035406", 0xd9}, {&(0x7f0000001180)="d53ccff427d07d1d47133fce4a1ee981e78188edb94383d34e668db02fb3080518c52123d2ddc0c02433610073d9aef32eb9c6977313154505f260a221f18200247d23", 0x43}, {&(0x7f0000001200)="b281f08b3e88052a3459067108d239294427ffe1e7f70b2f6601fd078eed3de88725b15451be29cfbed6cedd16a45e7d267525039f49108a8f44e48fb25249e8555bbc89b88f924395adf293a2a1b6697b3eb33e66c4309ee951384b7258bba8e4c6ff89a5585c3dade316789164f4776c0a43da98d9bc784f08327a3f4533528e384ab6edf8ea8cec46add43acb60d2e1f44d72acd22e68f38a0f77b6be8a7af6393410e9a38eabfe874cb945786cc55476280af3ddf6de0ffcd3bb3f35ee5161bf130a4c902f9cb5cf18a22c3c8dd674c390723f59edd2b4d67e62564c51d941c48465eda05f7e42ec2bb4aef0c9923152253dc78f4a54946edaafe64861acd4b7182c64a5940929f99ae6bd29d4806ef4cfba12d3b3ecff692b4142590ab1c6c3535c0d9bc4d0db091b36284941ebf90e90ba94c2ce565b18a4dbb73c0e8502cd9218317834e0b07abe17d56e73bc69e5a6eb10086f12284b83b1fa067dac7c635b933bc0821eedc1b0829a10cfea2a5799b8d9d74805868f82a61511f5591433492ae1e38e1a8533423b149841fd303bf804e537687753fb70f9996af5d2a2feaedaf1c753196a9795d875a371f67fbd87a6a572ae0ef89211bcb43ef44aefe209a4546ab2613c4b63eb9cafa2df2140f9ec2d027217723e09bb8473e7da8d297b6fc1e6a311caf251c21699104ee413889654ca911dd0728eb4a39ca3ceb904d3dd097f3140bb0921fdef9d1d25198fdc1c806aa0684dfe356adbe4fa519eb6080e885cf19d6ee6eab42ffb9d8d841529e10d3c4eccd5f3ce3d5afa2701ac1e42f1ba089c7c498ad16a732a4f23cb07c0f3ba5269b6e1d5f8e2e041d8263d5970e5741632a46b2ebd8c843330c2d47c44428b47efe820eac93f70d8f9560fdbabea7603a606db546d984b748e1cce3a36e873f26d1d5e6ac3f48e5e809659edc4b094787bfd24468f139b50d47011553c159e21653d6aa2e30731314b55bd7e462dfe01af5bf10f0ba321a9b6615533bda27d10e201696ec5a231cf0130186bf6e6e4188e5f5d20134386e546c8cfdb9c2841f04f979bd9690880a114078819237139e37690a41c2cd32d1061f744e10fc6baff5d413c8fc56133deee7ee42d9a28adaf06563865a161a668bb6f142e284767762ea674ec49400080d5de52097a16816cba90b900a77d2e238c5854d15b0980045c30eb233ab7b3d4d724dbe43424994f5c93b07bbcb50cb4c2471a0c1383b82703310d9770ffe68ee4f68528d951dd5017caf23c21f188b1c4f2659f9540ac4459021e803024d559fa91e960526861a8d21e981c829963011aea7c00d8d4b9038aa448a8f7891918fd51d46ce978d5204053fe1b247d17001b75ad56362005470636eb74b620b41602ca949e5d9f850c2a6835aca9da3b72cd316b1070dc1e4d90e15ace1aadae7cb8e8c77db58df09509ba2e31b2dfabf29793c410bfc9e4e7f16f23b6d9e012215b51da4e8663306d619a8ca07b6210d5be0fbfde19c82a20c77995422025d58d434898909dea2e0b87f998c6af5fda10cfb9f2db9fcfe112898a0348b54b1ad1f1465d28ae6589b244183a0d212a54d0f9f1b3b700b48f3ab8a992e6e59799060660fe231b9cdfaac57118f74b9ffb831c690caf09e68e2b1dedbdc1797cecafb37011a791504949c1a38cf0eba34f247dc599a9540dbaca5fb3f390fe62db3c275843ede54cebeba8f6d306347cbd4adbd1ce18ae75bfc409613ec85a955611572a515940ad24ab4de28b590d01944333d004cb86d191f22a88d3f8a13738bc09261e30c105559a4ab427eae1b5fe82edc93e039354af56d2745c1238e311f64854120b3dbecb9343e37f2e59fa89c883b08498f00474136ecb085243ac311106d67bb6c4fee0b97f259aa985a70a1b55122435b9dfdb7ea223d202ce3001ee1758d2164dd8b257a22ea72f1ce35c7bc936276cef6964e6f380a8006e5508434fde1e4de0ae649690f00e33488c0054751a8e276a83130e50395e62384b20d0626f7287c58a5348bcd6ed653ea89f790707416db01254a579acc7c7a89e77274958a9cdceed5c165e0f2faf450b169d83426557709e74ee1db58e44051a0aa24060f9a76a8cc5d68ffb9d60bae2461a03bccae799edf17eae6c62bb7de25a8ed41c315633e77a6410c2a55592043953a68526f7047a09e03e935d1f74facefbd4c135277b6874f0a9d18f818f50e42c6cf5aa492b4205d2ca2e58354e0d118b93184ee23775109e7ca477b22c7e1fff4372e7ec92e34b719adaf3b4573424c2031d90dac2a974e538d15584e279229881dc6892df31c0a4c7c6e580102e04b7cda484aed020d6c680802023627e2bc6530fbc37150bce2c1026322f581d19439d0eab2b12998e9b07e9ff0dc2125cf08a544a1156a79cddd3c01fa3b1587a91bf652ff0d239c499beb4b9e9f1fc6f7118fc10aa815e2714c0f0f51547df111cfd826580f34f49396035add9e3019e270b4d10028ef8b8e2c34dbc17dca691f98b15645b37e236b3213a5d4d5ecd07d7536dc68564eeb2d9170453a4b76d4060abe9730c44ef66b1d61299919c3145a9cca2dae49d3b2d7d51e899e916e6613b57be4febf64fee53b555876536e350445b97e3d5b4c8683a274f9c18e9653b282562a2a8f1e87d9525c2c4d46955b7128b4220232e72ff465994e38d68f3706bed93e7a651abc4038846f43e7a99f78768523c75b24433459189d264d09490329dcec58136f6c44e51aad0b8d762386f56c144640bed1730bedaebcd3dc30174495d6a97ea09ff3f0b7aef3c860dd444c8e7d21e5a3720b81a66b4283ff940be4f364af158e6f4b805ce243da1473387378caad003065d9a73be98e62504d200967ed4d58ce14075b9b1b2fabf7c209901cc82146d8c88b060e90205ecd6f45030fd3a9572c00511e846b499afcd0ac4a21041e3abb8de836664569faca7d48609c64944716211bd79ee4853cc5d0165f821a5e8d9e8cd9cc017100548917125618cee17bd2e2d79fdcda42f1d23b8e1ae4c5aa723fac8bc2982e238cf37508bd3c1699c8ba362a918e81673de4c20dd6198dd13e9577e8f32e07c434c8c258aa0b73474ebc2e3b0e9093bffe2ef93d4a584ba586481675f28445f27ecfb253c8ce69b070e7fd24f01135ece47605b8250b1ef4ac8abaec606f0fa006a8bc5a1e84d96a33f31fda1393b8a16a66bc093ce0c6e60fc271205df38fe7c5bba8bd096e3b8bc6991a1658372cc5af982f55c54e1902a7d29bf1435d8556352390ee0ff30bc544e3225476519d3f3025b470d4d41a7bcf499d5c501de5bfb78c1ea084707903433f4f23eb9143e3aa04acee0d31ac8d83d2944d50a350525fa5e568c7a5c7ddccb109befd71d656fd34f69c592281252067007447e50715b9c5e8364cb21589e9789ab9fcec2147e6a14e11d2daea606d7b920b392b1d22d593f87789bb083d363d8ab33e4ba46b2269dd08122838de93d53fd0bff862225641d18b836482cac40e2178d21ed18c97da40db07ead09ca790ec62be4e5a1c7c1b7cc4816385841f68daf370dfa2f759962132ef425c248e772768f2b0b9f5baa379d5d62938ea556c17564b0aff0d5df942ae192da47c3a981c2603f6f400a1efaf63eb9bf787b347c69cb8e2514dc71277dd6c8d14f178c6eea3fae1a4212ec421a9744973200a2e852db94261cfd43ab492294f1d8943b918f65fd51fa633e724b645ea7ef55ba7e9efd87bc30c4a11af75759fd70ea6854c1fbd9d9225145c8a099c2ccbd84130b81f08b32e92129a62226740c050456760c12042562c0253e9aeae377f31769e9769aa2db059e8a5ba57f9a41995dbb30746b4bf4bf8e4497c2310e109b4a176acdfad8a4b53f481dffc60591f04fa6089e40100426e801cd2fe172e84a956ddbb7de14fb587f13e2952de1f34b4298741de218893d7c01bfecb3e5299aad0bcb236098670a814a3e0b43e11debf226be209da80fd7ddd104d0b7c82ee255427cd1c4749e3e876b7a7d47f0a9094127e3426fbc88257f6737c866235e748e488910237b3930e87dadd5e8a4b3f82e27b5ee311393a377b8ce7cdf064cad4225ddf613d8caacf4e534cf9f46efd26d7f7992d3d6dc2083feaffbf6881651bf1d8e9b2615accd25ad8dd5eddb6a88b11ee9d183cfe72d61e214af6a2e054138f949b4c526425f020bf31e6d04ac4f3040adbf80cfa80000fce1e71fdc171d656e57204c89b06492ddad5d545a2063a2ba1fae4b4b4900529dcc81cae85e2f87d852a86d03258290fce2ea5c8f18ef224f8e8f4a90e628b2bf9b5a30de64c7ae1a43a8019c5e3c6319d2400e377312d70108d622e7bb8c6f9f62f7428b0ec92cd53e4c428bc1d85482dfb54e65d1f85b6409a8b5a91665ff3f37c3937f49eb00cfd61a4f6aebfebfe17b65bd8be6a65c01bf193b2f1a94db201b0a377b32584ff09c199ee00468830be2b00fba4d0f57c3e83e358318d4caeedc73895fbe6a06e9e94420f9eab892aa7b86c3c8d82dde2e07ce4a4157beba67c7251a850d6a2b9a70c566a9ebe4710d2b37435b06997dc988aeb11721a69e7556587d14f4020aaedeab463dff6ca21bf438401c4d0286b92f52f926ac02aa5a7e47202117a577ad3b0f3a7e346a2af9c0f2f6d7ed6286fde564ac9265e6a7cf96cdced4822f580bc52832259685b30d641af47178c283df8faff3f65cec80fbdc044f1fd3bd2941cf03aec79cfad58c9e29fcd37b5e7035747f5d46b1a9da21b1c02737af6766371be8bcb1019578e1d465a487cb8b8374ecb832d9a767007fce2e4be62693b227251fb2a23a9cde1a2b5eec5567257f0d113ac2adb8e23a88dc9a783e9ca352d394acb2d3c1a040446b246332690091ea2c5900a91f6a20c973e1aa213d6775683e2b498371403b673db0cacd7d3c91e188a2d9f94c639c3f8a0b3d900948bf5ac09c867cc3158cd244f69e6ce661818340b281235e836b5216ebc1576e0c1f15555668a5f3d1af38306c228aa9c9c3617fbedf21ac964c3ea82b21fc18265bcfb2ab8beef268f19aee04d27a24b37006ca46f7da26968194f484f70b8fdd30da00db38a45aeeca2d58305e6f83757849f01a4ef7c7ef98a20e69125a020337c2dde18282c941a6bc0c0e504026d1b6f4c66678a3dab354133b0544084e7aa5c71ced5591150b81d2bfdd66bef8fd95bbfd47066d2fa93b41116eeafb1e94fabd5a54c583860c64193d2bff4a37f8075b7b4a55c939c1df7807ffa4ac1e69d068057cc3eca7de4c9b2f306d90c8996934817a5b63174d605772742cfc25cc2c2dfa2783de62cf6f7ff099c58ba0600ca798f61f9f508e046845cd565dd7ed4b6ac861ac6cdcf02de6d8d9b39a844d3a27e39f97bf64ad38775d4af12ff4d5643426e568cb051da37876ec86279595f0e47e64c2ad9590dd48f36b18c77c2e614fb11183f747c8b175cd35a1440d1696602dfa02e4a60449487479517614fb23b3592b998362f1e859950440ffbd89011d268974e86870113d89dbe2d36f7edd7c1cf88b0e288dc1b92e3076bccbd15935760fe4b17d95065dd70ffc397c223f64beab0fa3680536da6a0d41655a8ec96e3cb79b762d602e16da6562aeb29d2f234338fc575eb1a2b3ddab866f38a1ddbc2038556a54a85d1aca7b1693247bc08e54331c9500f6688bb55eca9321a5da3d67bdd43bc19c574c1968d7622ff233a1534bcae03f91d26f8ca900bf5d68d777c3c80acbd7fdbaa0c882fbf001", 0x1000}, {&(0x7f0000002200)="522c2309ffa015752728176f6b86b6edd700deb52ea25d2d83b47c8f7055f0b08004e086c32163223e91d8ff29feb1a2013335e17bb21bc7608f8d10502d2becb6959ff6b5563c7ab59703fb40d85da272384c4519af309084b60059261958b3c8b2786650590bff415c550686df85a8c214d2b2a5aa22b6", 0x78}], 0x6}}, {{&(0x7f0000002300)={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000002340), 0x0, &(0x7f0000002440)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x89}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x8d7021800948cf27, 0x50, 0x0, [@empty]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x73, 0x0, 0x0, 0x6}}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0xd8}}, {{&(0x7f00000025c0)={0xa, 0x4e21, 0x68, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5f65}, 0x1c, &(0x7f00000027c0)=[{0x0}, {&(0x7f00000026c0)}], 0x2, &(0x7f0000002800)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit_2292={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002900)}}], 0x6, 0x20000800) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x26, 0x0) 1.175485796s ago: executing program 0 (id=1135): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0xd8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xbc, 0x6, [@m_connmark={0x8c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x21, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x16c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.139518369s ago: executing program 0 (id=1136): socket(0x0, 0x0, 0x0) setregid(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x80002) r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;\x00\xf4~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)="7f", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 491.83571ms ago: executing program 4 (id=1141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f000000a280)={0x0, 0x5, &(0x7f0000000040)={&(0x7f000000a2c0)=@newtaction={0x44, 0x1c, 0x301, 0x0, 0x0, {0x2}, [{0x30, 0x2, [@m_bpf]}]}, 0x44}}, 0x0) 418.066957ms ago: executing program 3 (id=1142): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) 356.634601ms ago: executing program 3 (id=1143): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) 333.636693ms ago: executing program 4 (id=1144): socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x80002) r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;\x00\xf4~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9855980a2963b2811330b4a6a9b3058bf75c485334a408395f0cfd458477597351b797122c5285c92d9052840bc02d713749ae82a73a13e383b1529cf278da0ae467d27e362b5483ce2287dbf01bc404a1d3b70c86af63f0f491eecb5a2ecde8b35239b56ad4a308b1d73a0359b69d6256f524fd31fbb02aee614775df4d07"]) kernel console output (not intermixed with test programs): e_0 (retrying later): interface not active [ 79.809285][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.809347][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.809376][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.864526][ T5488] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.889443][ T5601] hsr_slave_0: entered promiscuous mode [ 79.892036][ T5601] hsr_slave_1: entered promiscuous mode [ 79.916330][ T5601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.916348][ T5601] Cannot create hsr debugfs directory [ 79.917175][ T5488] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.967563][ T5488] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.981184][ T5488] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.993410][ T4560] bridge_slave_1: left allmulticast mode [ 79.999149][ T4560] bridge_slave_1: left promiscuous mode [ 80.005028][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.014640][ T4560] bridge_slave_0: left allmulticast mode [ 80.020410][ T4560] bridge_slave_0: left promiscuous mode [ 80.026064][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.071079][ T5696] loop4: detected capacity change from 0 to 1024 [ 80.085218][ T5696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.171119][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.181176][ T5020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.190706][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.201198][ T4560] bond0 (unregistering): Released all slaves [ 80.220541][ T5703] bond0: (slave bond_slave_1): Releasing backup interface [ 80.328157][ T4560] hsr_slave_0: left promiscuous mode [ 80.337758][ T4560] hsr_slave_1: left promiscuous mode [ 80.347907][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.355438][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.365739][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.373333][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.402845][ T4560] veth1_macvtap: left promiscuous mode [ 80.408459][ T4560] veth0_macvtap: left promiscuous mode [ 80.414039][ T4560] veth1_vlan: left promiscuous mode [ 80.419369][ T4560] veth0_vlan: left promiscuous mode [ 80.443704][ T5733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.634'. [ 80.570654][ T4560] team0 (unregistering): Port device team_slave_1 removed [ 80.583170][ T4560] team0 (unregistering): Port device team_slave_0 removed [ 80.649838][ T5754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.640'. [ 80.660337][ T3782] IPVS: starting estimator thread 0... [ 80.663409][ T5757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.641'. [ 80.679814][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.689996][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 80.694785][ T5488] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.727979][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.735107][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.746388][ T5756] IPVS: using max 2160 ests per chain, 108000 per kthread [ 80.750039][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.760690][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.828818][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 80.874307][ T5488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.928403][ T5781] 9pnet_fd: Insufficient options for proto=fd [ 80.978413][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.015966][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.038921][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.057900][ T5488] veth0_vlan: entered promiscuous mode [ 81.065143][ T4560] IPVS: stop unused estimator thread 0... [ 81.074317][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.090802][ T5488] veth1_vlan: entered promiscuous mode [ 81.136471][ T5488] veth0_macvtap: entered promiscuous mode [ 81.150937][ T5488] veth1_macvtap: entered promiscuous mode [ 81.181680][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.192342][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.202409][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.212853][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.222745][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.233197][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.283578][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.293958][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.334355][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.351354][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.358509][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.412240][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.419445][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.433726][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.444212][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.454057][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.464635][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.474612][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.485104][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.498135][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.510406][ T5488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.519363][ T5488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.528266][ T5488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.537067][ T5488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.589297][ T5601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.609253][ T5818] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 81.684652][ T5836] loop0: detected capacity change from 0 to 1024 [ 81.698195][ T5836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.713453][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.792126][ T5848] loop4: detected capacity change from 0 to 512 [ 81.835629][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.840050][ T5601] veth0_vlan: entered promiscuous mode [ 81.846910][ T5848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.853345][ T5601] veth1_vlan: entered promiscuous mode [ 81.868428][ T5848] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.892761][ T5601] veth0_macvtap: entered promiscuous mode [ 81.914122][ T5601] veth1_macvtap: entered promiscuous mode [ 81.926159][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.936996][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.946930][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.957434][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.967410][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.978079][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.984824][ T5861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5861 comm=syz.4.657 [ 81.988169][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.010833][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.024301][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.033048][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.043582][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.053519][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.064104][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.074121][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.084604][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.094552][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.105029][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.106472][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 82.106492][ T29] audit: type=1400 audit(1720446420.943:383): avc: denied { watch watch_reads } for pid=5862 comm="syz.3.663" path="/6/bus" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.169785][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.244004][ T5601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.252933][ T5601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.262116][ T5601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.271043][ T5601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.371610][ T3782] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 82.387874][ T3782] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 82.438068][ T5885] loop0: detected capacity change from 0 to 128 [ 82.464935][ T5885] EXT4-fs: Ignoring removed nobh option [ 82.500510][ T5885] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.564467][ T5899] loop3: detected capacity change from 0 to 1764 [ 82.586366][ T5885] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.618657][ T5905] __nla_validate_parse: 3 callbacks suppressed [ 82.618674][ T5905] netlink: 168 bytes leftover after parsing attributes in process `syz.1.678'. [ 82.635623][ T5899] iso9660: Unknown parameter 'iochaas' [ 82.653853][ T29] audit: type=1400 audit(1720446421.563:384): avc: denied { ioctl } for pid=5884 comm="syz.0.670" path="/153/mnt/cpu.stat" dev="loop0" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.702264][ T3083] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.713642][ T5045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 82.727435][ T5908] netlink: 'syz.1.680': attribute type 6 has an invalid length. [ 82.758753][ T5848] syz.4.657 (5848) used greatest stack depth: 8208 bytes left [ 82.829158][ T5020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.838421][ T5912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.677'. [ 82.864822][ T5915] loop1: detected capacity change from 0 to 764 [ 82.885797][ T5917] loop0: detected capacity change from 0 to 512 [ 82.902531][ T5915] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.927039][ T5918] loop3: detected capacity change from 0 to 128 [ 83.078376][ T5917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.116850][ T5917] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.642522][ T5925] loop4: detected capacity change from 0 to 2048 [ 83.653575][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.688124][ T5925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.751735][ T4560] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.769730][ T4560] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 83.782053][ T4560] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.782053][ T4560] [ 83.791755][ T4560] EXT4-fs (loop4): Total free blocks count 0 [ 83.797826][ T4560] EXT4-fs (loop4): Free/Dirty block details [ 83.803743][ T4560] EXT4-fs (loop4): free_blocks=2415919104 [ 83.809598][ T4560] EXT4-fs (loop4): dirty_blocks=32 [ 83.814776][ T4560] EXT4-fs (loop4): Block reservation details [ 83.820827][ T4560] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 83.827885][ T4560] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 83.856588][ T5939] loop0: detected capacity change from 0 to 128 [ 83.864369][ T5939] EXT4-fs: Ignoring removed nobh option [ 83.873632][ T5939] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.894885][ T5941] loop3: detected capacity change from 0 to 128 [ 83.905422][ T29] audit: type=1400 audit(1720446422.813:385): avc: denied { nlmsg_read } for pid=5945 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.929876][ T5946] netlink: 164 bytes leftover after parsing attributes in process `syz.1.692'. [ 83.930908][ T5939] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.950455][ T5944] loop2: detected capacity change from 0 to 1024 [ 83.971114][ T5944] journal_path: not usable as path [ 83.976389][ T5944] EXT4-fs: error: could not find journal device path [ 84.022600][ T3083] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.051176][ T5954] loop1: detected capacity change from 0 to 764 [ 84.068519][ T5959] loop3: detected capacity change from 0 to 1764 [ 84.080225][ T5954] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 84.090436][ T5959] iso9660: Unknown parameter 'iochaas' [ 84.119888][ T4757] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 84.246571][ T29] audit: type=1400 audit(1720446423.153:386): avc: denied { create } for pid=5974 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.277635][ T29] audit: type=1400 audit(1720446423.183:387): avc: denied { ioctl } for pid=5974 comm="syz.2.704" path="socket:[14350]" dev="sockfs" ino=14350 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.327734][ T5975] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5975 comm=syz.2.704 [ 84.624138][ T5973] loop3: detected capacity change from 0 to 128 [ 84.832165][ T5979] loop2: detected capacity change from 0 to 164 [ 84.847744][ T29] audit: type=1400 audit(1720446423.233:388): avc: denied { create } for pid=5974 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.868097][ T29] audit: type=1400 audit(1720446423.233:389): avc: denied { write } for pid=5974 comm="syz.2.704" path="socket:[14363]" dev="sockfs" ino=14363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.892379][ T29] audit: type=1400 audit(1720446423.233:390): avc: denied { nlmsg_read } for pid=5974 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.913076][ T29] audit: type=1400 audit(1720446423.723:391): avc: denied { read } for pid=5974 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 84.998183][ T5975] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 85.061265][ T5972] loop0: detected capacity change from 0 to 2048 [ 85.092465][ T4559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.155297][ T29] audit: type=1400 audit(1720446424.063:392): avc: denied { nlmsg_write } for pid=5991 comm="syz.3.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 85.200445][ T4559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.217631][ T5972] FAULT_INJECTION: forcing a failure. [ 85.217631][ T5972] name failslab, interval 1, probability 0, space 0, times 0 [ 85.232328][ T5972] CPU: 1 PID: 5972 Comm: syz.0.703 Not tainted 6.10.0-rc7-syzkaller #0 [ 85.240709][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 85.250821][ T5972] Call Trace: [ 85.254143][ T5972] [ 85.257091][ T5972] dump_stack_lvl+0xf2/0x150 [ 85.261875][ T5972] dump_stack+0x15/0x20 [ 85.266177][ T5972] should_fail_ex+0x229/0x230 [ 85.270944][ T5972] ? getname_flags+0x86/0x360 [ 85.275729][ T5972] __should_failslab+0x92/0xa0 [ 85.280587][ T5972] should_failslab+0x9/0x20 [ 85.285122][ T5972] kmem_cache_alloc_noprof+0x4c/0x290 [ 85.290735][ T5972] ? lapic_next_event+0x11/0x20 [ 85.295676][ T5972] getname_flags+0x86/0x360 [ 85.300206][ T5972] user_path_at_empty+0x2c/0x120 [ 85.305156][ T5972] __se_sys_chdir+0x4f/0x150 [ 85.309862][ T5972] __x64_sys_chdir+0x1f/0x30 [ 85.314464][ T5972] x64_sys_call+0x2b05/0x2d70 [ 85.319171][ T5972] do_syscall_64+0xc9/0x1c0 [ 85.323720][ T5972] ? clear_bhb_loop+0x55/0xb0 [ 85.328409][ T5972] ? clear_bhb_loop+0x55/0xb0 [ 85.333094][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.339124][ T5972] RIP: 0033:0x7f5a2658fbd9 [ 85.343765][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.363386][ T5972] RSP: 002b:00007f5a25811048 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 85.371826][ T5972] RAX: ffffffffffffffda RBX: 00007f5a2671df60 RCX: 00007f5a2658fbd9 [ 85.379843][ T5972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 85.387926][ T5972] RBP: 00007f5a258110a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.395898][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.403884][ T5972] R13: 000000000000000b R14: 00007f5a2671df60 R15: 00007ffd6ca643c8 [ 85.411865][ T5972] [ 85.457556][ T6005] loop3: detected capacity change from 0 to 128 [ 85.469755][ T6005] journal_path: Lookup failure for 'mnt/encrypted_dir' [ 85.476695][ T6005] EXT4-fs: error: could not find journal device path [ 85.506915][ T4559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.577423][ T6014] loop3: detected capacity change from 0 to 764 [ 85.584735][ T6014] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.596443][ T4559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.635274][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 85.804382][ T6030] loop1: detected capacity change from 0 to 512 [ 85.842872][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.850047][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.943507][ T6030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.970068][ T5980] bridge_slave_0: entered allmulticast mode [ 85.992992][ T6030] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.010942][ T5980] bridge_slave_0: entered promiscuous mode [ 86.119744][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.127033][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.142972][ T6033] loop2: detected capacity change from 0 to 512 [ 86.147107][ T6039] loop0: detected capacity change from 0 to 256 [ 86.158125][ T5980] bridge_slave_1: entered allmulticast mode [ 86.168155][ T5980] bridge_slave_1: entered promiscuous mode [ 86.193473][ T3515] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /158/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 86.218206][ T3515] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /158/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 86.228274][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.242859][ T3515] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /158/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 86.274181][ T6033] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.276531][ T3515] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /158/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 86.308977][ T3515] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /158/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 86.321054][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.339878][ T4559] bridge_slave_1: left allmulticast mode [ 86.345581][ T4559] bridge_slave_1: left promiscuous mode [ 86.351236][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.358833][ T3515] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /158/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 86.382592][ T4559] bridge_slave_0: left allmulticast mode [ 86.388296][ T4559] bridge_slave_0: left promiscuous mode [ 86.394074][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.394298][ T3515] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /158/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 86.421883][ T3515] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 86.437834][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.554969][ T4559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.556925][ T6046] loop3: detected capacity change from 0 to 1024 [ 86.577496][ T4559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.580352][ T6046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.608050][ T4559] bond0 (unregistering): Released all slaves [ 86.614707][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 86.625720][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.671318][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.717933][ T4559] hsr_slave_0: left promiscuous mode [ 86.724764][ T4559] hsr_slave_1: left promiscuous mode [ 86.755204][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.762869][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.773738][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.781330][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.785533][ T6074] loop3: detected capacity change from 0 to 256 [ 86.804032][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.813630][ T4559] veth1_macvtap: left promiscuous mode [ 86.814624][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.819251][ T4559] veth0_macvtap: left promiscuous mode [ 86.829582][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.831399][ T4559] veth1_vlan: left promiscuous mode [ 86.843386][ T4559] veth0_vlan: left promiscuous mode [ 86.849066][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.861503][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.868774][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.875581][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.884606][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.891568][ T6074] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 86.899009][ T6074] FAT-fs (loop3): Directory bread(block 1285) failed [ 86.921008][ T3515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.976097][ T4559] team0 (unregistering): Port device team_slave_1 removed [ 86.989817][ T4559] team0 (unregistering): Port device team_slave_0 removed [ 87.030189][ T5980] team0: Port device team_slave_0 added [ 87.053349][ T5980] team0: Port device team_slave_1 added [ 87.092800][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.099919][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.125992][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.145159][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.152185][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.178387][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.220258][ T6103] loop0: detected capacity change from 0 to 2048 [ 87.266524][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.285579][ T5980] hsr_slave_0: entered promiscuous mode [ 87.302036][ T5980] hsr_slave_1: entered promiscuous mode [ 87.313318][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.327567][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.337747][ T5980] Cannot create hsr debugfs directory [ 87.419030][ T6137] loop3: detected capacity change from 0 to 512 [ 87.454556][ T6137] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.749: invalid indirect mapped block 256 (level 2) [ 87.473238][ T6137] EXT4-fs (loop3): 2 truncates cleaned up [ 87.481371][ T6147] FAULT_INJECTION: forcing a failure. [ 87.481371][ T6147] name failslab, interval 1, probability 0, space 0, times 0 [ 87.482987][ T6137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.494352][ T6147] CPU: 1 PID: 6147 Comm: syz.2.752 Not tainted 6.10.0-rc7-syzkaller #0 [ 87.512897][ T6143] loop0: detected capacity change from 0 to 1024 [ 87.514660][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 87.531127][ T6147] Call Trace: [ 87.534457][ T6147] [ 87.537424][ T6147] dump_stack_lvl+0xf2/0x150 [ 87.542054][ T6147] dump_stack+0x15/0x20 [ 87.546392][ T6147] should_fail_ex+0x229/0x230 [ 87.551218][ T6147] ? vfs_parse_fs_string+0x6a/0xd0 [ 87.556380][ T6147] __should_failslab+0x92/0xa0 [ 87.561193][ T6147] should_failslab+0x9/0x20 [ 87.565762][ T6147] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 87.571938][ T6147] kmemdup_nul+0x30/0x80 [ 87.576229][ T6147] vfs_parse_fs_string+0x6a/0xd0 [ 87.581267][ T6147] do_new_mount+0x1ca/0x690 [ 87.585877][ T6147] path_mount+0x49b/0xb30 [ 87.590224][ T6147] __se_sys_mount+0x27f/0x2d0 [ 87.595017][ T6147] __x64_sys_mount+0x67/0x80 [ 87.599704][ T6147] x64_sys_call+0x25c9/0x2d70 [ 87.604441][ T6147] do_syscall_64+0xc9/0x1c0 [ 87.609029][ T6147] ? clear_bhb_loop+0x55/0xb0 [ 87.613768][ T6147] ? clear_bhb_loop+0x55/0xb0 [ 87.618454][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.624444][ T6147] RIP: 0033:0x7f87eebfcbd9 [ 87.628858][ T6147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.648561][ T6147] RSP: 002b:00007f87ede7e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.657036][ T6147] RAX: ffffffffffffffda RBX: 00007f87eed8af60 RCX: 00007f87eebfcbd9 [ 87.665008][ T6147] RDX: 0000000020000580 RSI: 0000000020000540 RDI: 0000000020000040 [ 87.673061][ T6147] RBP: 00007f87ede7e0a0 R08: 0000000020000000 R09: 0000000000000000 [ 87.681163][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.689134][ T6147] R13: 000000000000000b R14: 00007f87eed8af60 R15: 00007ffcaf3b0b98 [ 87.697183][ T6147] [ 87.707061][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 87.707077][ T29] audit: type=1400 audit(1720446426.613:400): avc: denied { create } for pid=6135 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.732545][ T29] audit: type=1400 audit(1720446426.613:401): avc: denied { bind } for pid=6135 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.751938][ T29] audit: type=1400 audit(1720446426.613:402): avc: denied { name_bind } for pid=6135 comm="syz.3.749" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 87.761553][ T6150] loop2: detected capacity change from 0 to 1024 [ 87.772938][ T29] audit: type=1400 audit(1720446426.613:403): avc: denied { node_bind } for pid=6135 comm="syz.3.749" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 87.801370][ T29] audit: type=1400 audit(1720446426.633:404): avc: denied { setopt } for pid=6135 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.802084][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.834940][ T6143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.838304][ T6150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.895462][ T6157] loop3: detected capacity change from 0 to 128 [ 87.902243][ T6157] FAT-fs (loop3): Unrecognized mount option "/dev/net/tun" or missing value [ 87.937671][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 87.977204][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.995348][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.007660][ T1517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.078473][ T1517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.102931][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.110143][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.124980][ T29] audit: type=1400 audit(1720446427.033:405): avc: denied { bind } for pid=6186 comm="syz.3.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.131876][ T6083] bridge_slave_0: entered allmulticast mode [ 88.151613][ T6083] bridge_slave_0: entered promiscuous mode [ 88.179760][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.186955][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.194375][ T6083] bridge_slave_1: entered allmulticast mode [ 88.206504][ T6083] bridge_slave_1: entered promiscuous mode [ 88.229366][ T1517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.271800][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 88.284025][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.303028][ T1517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.317561][ T6195] hub 6-0:1.0: USB hub found [ 88.324403][ T6207] loop2: detected capacity change from 0 to 512 [ 88.329447][ T6208] loop3: detected capacity change from 0 to 1024 [ 88.330884][ T6195] hub 6-0:1.0: 8 ports detected [ 88.340010][ T6208] /dev/loop3: Can't open blockdev [ 88.347501][ T6207] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.358295][ T6207] EXT4-fs (loop2): 1 truncate cleaned up [ 88.364754][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.365730][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.380977][ T29] audit: type=1400 audit(1720446427.293:406): avc: denied { setattr } for pid=6205 comm="syz.2.764" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.431003][ T6211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6211 comm=syz.0.765 [ 88.432688][ T29] audit: type=1400 audit(1720446427.343:407): avc: denied { setopt } for pid=6205 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.462711][ T29] audit: type=1400 audit(1720446427.343:408): avc: denied { bind } for pid=6205 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.462919][ T29] audit: type=1400 audit(1720446427.343:409): avc: denied { write } for pid=6205 comm="syz.2.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.486592][ T6083] team0: Port device team_slave_0 added [ 88.524421][ T6083] team0: Port device team_slave_1 added [ 88.541157][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.568335][ T6214] FAULT_INJECTION: forcing a failure. [ 88.568335][ T6214] name failslab, interval 1, probability 0, space 0, times 0 [ 88.575946][ T5980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.581020][ T6214] CPU: 0 PID: 6214 Comm: syz.0.766 Not tainted 6.10.0-rc7-syzkaller #0 [ 88.581047][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 88.606141][ T6214] Call Trace: [ 88.609430][ T6214] [ 88.612361][ T6214] dump_stack_lvl+0xf2/0x150 [ 88.616984][ T6214] dump_stack+0x15/0x20 [ 88.621241][ T6214] should_fail_ex+0x229/0x230 [ 88.625983][ T6214] ? bpf_test_init+0xc7/0x170 [ 88.630831][ T6214] __should_failslab+0x92/0xa0 [ 88.635704][ T6214] should_failslab+0x9/0x20 [ 88.640217][ T6214] __kmalloc_noprof+0xa5/0x370 [ 88.645012][ T6214] ? _parse_integer+0x27/0x30 [ 88.649785][ T6214] bpf_test_init+0xc7/0x170 [ 88.654464][ T6214] bpf_prog_test_run_skb+0x156/0x9b0 [ 88.659903][ T6214] ? __rcu_read_unlock+0x4e/0x70 [ 88.664865][ T6214] ? __fget_files+0x1da/0x210 [ 88.669619][ T6214] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 88.675482][ T6214] bpf_prog_test_run+0x26d/0x3e0 [ 88.680437][ T6214] __sys_bpf+0x400/0x7a0 [ 88.684728][ T6214] __x64_sys_bpf+0x43/0x50 [ 88.689197][ T6214] x64_sys_call+0x2655/0x2d70 [ 88.693966][ T6214] do_syscall_64+0xc9/0x1c0 [ 88.698500][ T6214] ? clear_bhb_loop+0x55/0xb0 [ 88.703252][ T6214] ? clear_bhb_loop+0x55/0xb0 [ 88.708007][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.713910][ T6214] RIP: 0033:0x7f5a2658fbd9 [ 88.718332][ T6214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.737987][ T6214] RSP: 002b:00007f5a25811048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.746624][ T6214] RAX: ffffffffffffffda RBX: 00007f5a2671df60 RCX: 00007f5a2658fbd9 [ 88.754606][ T6214] RDX: 0000000000000028 RSI: 00000000200000c0 RDI: 000000000000000a [ 88.762582][ T6214] RBP: 00007f5a258110a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.770559][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.778531][ T6214] R13: 000000000000000b R14: 00007f5a2671df60 R15: 00007ffd6ca643c8 [ 88.786511][ T6214] [ 88.810626][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.817738][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.843907][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.856003][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.863033][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.889062][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.938752][ T5980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.959226][ T5980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.002166][ T5980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.046807][ T6083] hsr_slave_0: entered promiscuous mode [ 89.054548][ T6083] hsr_slave_1: entered promiscuous mode [ 89.058166][ T6243] loop0: detected capacity change from 0 to 128 [ 89.069723][ T6243] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 89.079022][ T6083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.087766][ T6083] Cannot create hsr debugfs directory [ 89.130345][ T1517] bridge_slave_1: left allmulticast mode [ 89.136060][ T1517] bridge_slave_1: left promiscuous mode [ 89.141907][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.157909][ T1517] bridge_slave_0: left allmulticast mode [ 89.163600][ T1517] bridge_slave_0: left promiscuous mode [ 89.169441][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.261480][ T6269] loop7: detected capacity change from 0 to 16384 [ 89.277186][ T6272] loop3: detected capacity change from 0 to 1024 [ 89.296029][ T6272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.402282][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.456337][ T6275] loop7: detected capacity change from 16384 to 16383 [ 89.465862][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.476379][ T1517] bond0 (unregistering): Released all slaves [ 89.574908][ T1517] hsr_slave_0: left promiscuous mode [ 89.583208][ T1517] hsr_slave_1: left promiscuous mode [ 89.589340][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.596817][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.608605][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.616043][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.626983][ T1517] veth1_macvtap: left promiscuous mode [ 89.632489][ T1517] veth0_macvtap: left promiscuous mode [ 89.638182][ T1517] veth1_vlan: left promiscuous mode [ 89.643459][ T1517] veth0_vlan: left promiscuous mode [ 89.768527][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 89.779768][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 89.827191][ T6302] netlink: 80 bytes leftover after parsing attributes in process `syz.0.779'. [ 89.932387][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.951925][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.962793][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 89.982405][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.989516][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.013386][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.020570][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.036224][ T6343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.783'. [ 90.063453][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.070761][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.078855][ T6219] bridge_slave_0: entered allmulticast mode [ 90.085351][ T6219] bridge_slave_0: entered promiscuous mode [ 90.110775][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.117903][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.125133][ T6219] bridge_slave_1: entered allmulticast mode [ 90.133899][ T6219] bridge_slave_1: entered promiscuous mode [ 90.145886][ T5980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.156593][ T5980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.197762][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.213816][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.228462][ T6083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.266046][ T6083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.286236][ T6219] team0: Port device team_slave_0 added [ 90.296445][ T6219] team0: Port device team_slave_1 added [ 90.303719][ T6083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.314989][ T6083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.336307][ T1517] IPVS: stop unused estimator thread 0... [ 90.377340][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.389926][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.397006][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.423104][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.480171][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.487220][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.513287][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.544284][ T1517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.576168][ T6219] hsr_slave_0: entered promiscuous mode [ 90.582848][ T6219] hsr_slave_1: entered promiscuous mode [ 90.589068][ T6219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.598991][ T6219] Cannot create hsr debugfs directory [ 90.627321][ T1517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.673124][ T1517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.726643][ T1517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.756427][ T6389] Process accounting resumed [ 90.769044][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.813871][ T6083] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.836664][ T3782] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.843803][ T3782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.858759][ T5980] veth0_vlan: entered promiscuous mode [ 90.872761][ T3782] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.879877][ T3782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.902452][ T1517] bridge_slave_1: left allmulticast mode [ 90.908221][ T1517] bridge_slave_1: left promiscuous mode [ 90.913923][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.923256][ T1517] bridge_slave_0: left allmulticast mode [ 90.929124][ T1517] bridge_slave_0: left promiscuous mode [ 90.934858][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.041623][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.052524][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.069309][ T1517] bond0 (unregistering): Released all slaves [ 91.080021][ T5980] veth1_vlan: entered promiscuous mode [ 91.113775][ T6083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.124268][ T6083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.188535][ T5980] veth0_macvtap: entered promiscuous mode [ 91.198866][ T1517] hsr_slave_0: left promiscuous mode [ 91.206481][ T1517] hsr_slave_1: left promiscuous mode [ 91.212593][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.220166][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.228249][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.235688][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.250828][ T1517] veth1_macvtap: left promiscuous mode [ 91.256478][ T1517] veth0_macvtap: left promiscuous mode [ 91.262031][ T1517] veth1_vlan: left promiscuous mode [ 91.267325][ T1517] veth0_vlan: left promiscuous mode [ 91.348345][ T6398] sctp: [Deprecated]: syz.3.790 (pid 6398) Use of int in max_burst socket option deprecated. [ 91.348345][ T6398] Use struct sctp_assoc_value instead [ 91.363811][ T6397] sctp: [Deprecated]: syz.3.790 (pid 6397) Use of int in max_burst socket option deprecated. [ 91.363811][ T6397] Use struct sctp_assoc_value instead [ 91.393851][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 91.405300][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 91.462425][ T5980] veth1_macvtap: entered promiscuous mode [ 91.473671][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.499646][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.510229][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.520070][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.530646][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.549097][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.569169][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.579783][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.589823][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.600346][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.638950][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.655702][ T5980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.664570][ T5980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.673366][ T5980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.682185][ T5980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.715852][ T6219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.737466][ T6219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.769588][ T6083] veth0_vlan: entered promiscuous mode [ 91.785587][ T6412] loop0: detected capacity change from 0 to 1764 [ 91.796405][ T6219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.803435][ T6412] iso9660: Unknown parameter 'iochaas' [ 91.812469][ T6083] veth1_vlan: entered promiscuous mode [ 91.821870][ T6219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.850447][ T6083] veth0_macvtap: entered promiscuous mode [ 91.858427][ T6083] veth1_macvtap: entered promiscuous mode [ 91.982052][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.992683][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.002759][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.013213][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.023140][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.033605][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.048645][ T6416] loop4: detected capacity change from 0 to 128 [ 92.098026][ T6417] loop0: detected capacity change from 0 to 128 [ 92.236101][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.333994][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.380863][ T6421] program syz.4.795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.396394][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.407160][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.417016][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.427528][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.437417][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.448249][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.459520][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.472104][ T6219] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.486233][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.493421][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.503676][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.510848][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.523788][ T6083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.532868][ T6083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.541864][ T6083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.551010][ T6083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598799][ T6219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.609305][ T6219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.723689][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.881371][ T6219] veth0_vlan: entered promiscuous mode [ 92.891218][ T6219] veth1_vlan: entered promiscuous mode [ 92.912618][ T6446] Process accounting resumed [ 92.924630][ T6219] veth0_macvtap: entered promiscuous mode [ 92.952329][ T6219] veth1_macvtap: entered promiscuous mode [ 92.967638][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 92.979757][ T6450] loop1: detected capacity change from 0 to 512 [ 92.982100][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.996715][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.006629][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.017076][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.026937][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.037399][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.047195][ T6450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.047278][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.047294][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.078012][ T6450] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.082020][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.124012][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.134558][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.144427][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.155009][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.165045][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.175841][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.185898][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.196453][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.211944][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.222349][ T6219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.231303][ T6219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.240138][ T6219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.248923][ T6219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.278871][ T6083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.316112][ T6458] 9pnet_virtio: no channels available for device [ 93.336328][ T6462] loop4: detected capacity change from 0 to 1764 [ 93.343100][ T6462] iso9660: Unknown parameter 'iochaas' [ 93.375745][ T6466] FAULT_INJECTION: forcing a failure. [ 93.375745][ T6466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.389010][ T6466] CPU: 0 PID: 6466 Comm: syz.2.806 Not tainted 6.10.0-rc7-syzkaller #0 [ 93.397279][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 93.397299][ T6466] Call Trace: [ 93.397306][ T6466] [ 93.397314][ T6466] dump_stack_lvl+0xf2/0x150 [ 93.397393][ T6466] dump_stack+0x15/0x20 [ 93.397419][ T6466] should_fail_ex+0x229/0x230 [ 93.397521][ T6466] should_fail+0xb/0x10 [ 93.397557][ T6466] should_fail_usercopy+0x1a/0x20 [ 93.397624][ T6466] _copy_to_user+0x1e/0xa0 [ 93.397666][ T6466] simple_read_from_buffer+0xa0/0x110 [ 93.397738][ T6466] proc_fail_nth_read+0xfc/0x140 [ 93.397781][ T6466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.397822][ T6466] vfs_read+0x1a2/0x6e0 [ 93.397903][ T6466] ? __rcu_read_unlock+0x4e/0x70 [ 93.397979][ T6466] ? __fget_files+0x1da/0x210 [ 93.398014][ T6466] ksys_read+0xeb/0x1b0 [ 93.398040][ T6466] __x64_sys_read+0x42/0x50 [ 93.398149][ T6466] x64_sys_call+0x27e5/0x2d70 [ 93.398177][ T6466] do_syscall_64+0xc9/0x1c0 [ 93.398209][ T6466] ? clear_bhb_loop+0x55/0xb0 [ 93.398240][ T6466] ? clear_bhb_loop+0x55/0xb0 [ 93.455344][ T6468] loop1: detected capacity change from 0 to 2048 [ 93.457721][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.457756][ T6466] RIP: 0033:0x7f403fe5f6bc [ 93.457770][ T6466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 93.457789][ T6466] RSP: 002b:00007f403f0e2040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.543960][ T6466] RAX: ffffffffffffffda RBX: 00007f403ffeef60 RCX: 00007f403fe5f6bc [ 93.552111][ T6466] RDX: 000000000000000f RSI: 00007f403f0e20b0 RDI: 0000000000000004 [ 93.560103][ T6466] RBP: 00007f403f0e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.568131][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.576135][ T6466] R13: 000000000000000b R14: 00007f403ffeef60 R15: 00007fffdf9c7e98 [ 93.584199][ T6466] [ 93.607664][ T6468] loop1: p1 < > p3 [ 93.629393][ T6468] loop1: p3 size 134217728 extends beyond EOD, truncated [ 93.667638][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 93.682540][ T6472] loop0: detected capacity change from 0 to 512 [ 93.700448][ T6468] netlink: 'syz.1.804': attribute type 8 has an invalid length. [ 93.711755][ T6472] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.796689][ T6484] loop4: detected capacity change from 0 to 128 [ 93.888829][ T6482] Â: renamed from pim6reg1 [ 93.900358][ T6488] loop1: detected capacity change from 0 to 512 [ 93.918249][ T6472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.957181][ T6488] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.984573][ T6472] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.023470][ T6488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.089773][ T6488] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.104023][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.116016][ T6083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.162354][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 94.162371][ T29] audit: type=1400 audit(1720446433.073:412): avc: denied { setopt } for pid=6491 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.200721][ T6496] FAULT_INJECTION: forcing a failure. [ 94.200721][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 94.213520][ T6496] CPU: 0 PID: 6496 Comm: syz.4.815 Not tainted 6.10.0-rc7-syzkaller #0 [ 94.221867][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 94.231946][ T6496] Call Trace: [ 94.235318][ T6496] [ 94.238278][ T6496] dump_stack_lvl+0xf2/0x150 [ 94.242963][ T6496] dump_stack+0x15/0x20 [ 94.247169][ T6496] should_fail_ex+0x229/0x230 [ 94.251968][ T6496] ? skb_clone+0x154/0x1f0 [ 94.251998][ T6496] __should_failslab+0x92/0xa0 [ 94.252044][ T6496] should_failslab+0x9/0x20 [ 94.252071][ T6496] kmem_cache_alloc_noprof+0x4c/0x290 [ 94.252165][ T6496] skb_clone+0x154/0x1f0 [ 94.252209][ T6496] __netlink_deliver_tap+0x2bd/0x4c0 [ 94.252243][ T6496] netlink_unicast+0x63b/0x660 [ 94.252272][ T6496] netlink_sendmsg+0x5ca/0x6e0 [ 94.252314][ T6496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.252420][ T6496] __sock_sendmsg+0x140/0x180 [ 94.252451][ T6496] ____sys_sendmsg+0x312/0x410 [ 94.252527][ T6496] __sys_sendmsg+0x1e9/0x280 [ 94.252565][ T6496] __x64_sys_sendmsg+0x46/0x50 [ 94.252612][ T6496] x64_sys_call+0xb25/0x2d70 [ 94.252641][ T6496] do_syscall_64+0xc9/0x1c0 [ 94.252668][ T6496] ? clear_bhb_loop+0x55/0xb0 [ 94.252770][ T6496] ? clear_bhb_loop+0x55/0xb0 [ 94.252795][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.252896][ T6496] RIP: 0033:0x7fc923ea2bd9 [ 94.252911][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.252930][ T6496] RSP: 002b:00007fc923124048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.253013][ T6496] RAX: ffffffffffffffda RBX: 00007fc924030f60 RCX: 00007fc923ea2bd9 [ 94.253026][ T6496] RDX: 0000000000000000 RSI: 000000002000a280 RDI: 0000000000000005 [ 94.253039][ T6496] RBP: 00007fc9231240a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.253073][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.253086][ T6496] R13: 000000000000000b R14: 00007fc924030f60 R15: 00007ffece3f4df8 [ 94.253103][ T6496] [ 94.256768][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz.4.815'. [ 94.391214][ T6492] loop3: detected capacity change from 0 to 2048 [ 94.461161][ T6492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.476729][ T6492] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.516881][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.614617][ T6525] loop3: detected capacity change from 0 to 512 [ 94.623211][ T6525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.636725][ T6512] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 94.648555][ T6525] EXT4-fs (loop3): 1 truncate cleaned up [ 94.654630][ T6525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.758178][ T6530] loop2: detected capacity change from 0 to 764 [ 94.775893][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.795000][ T6530] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 94.930155][ T6540] loop3: detected capacity change from 0 to 1764 [ 94.936829][ T6540] iso9660: Unknown parameter 'iochaas' [ 95.325568][ T6548] loop3: detected capacity change from 0 to 128 [ 95.444353][ T6549] loop4: detected capacity change from 0 to 512 [ 95.548936][ T6549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.666283][ T6549] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.785090][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.797934][ T6558] loop2: detected capacity change from 0 to 1024 [ 95.807407][ T6555] can0: slcan on pts0. [ 95.821929][ T6558] EXT4-fs: quotafile must be on filesystem root [ 95.866358][ T6555] can0 (unregistered): slcan off pts0. [ 95.938553][ T6565] loop1: detected capacity change from 0 to 128 [ 95.946624][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 96.064886][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.837'. [ 96.090498][ T6579] FAULT_INJECTION: forcing a failure. [ 96.090498][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 96.094184][ T6575] loop7: detected capacity change from 0 to 16384 [ 96.103167][ T6579] CPU: 1 PID: 6579 Comm: syz.4.838 Not tainted 6.10.0-rc7-syzkaller #0 [ 96.117847][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 96.127973][ T6579] Call Trace: [ 96.131260][ T6579] [ 96.134200][ T6579] dump_stack_lvl+0xf2/0x150 [ 96.138913][ T6579] dump_stack+0x15/0x20 [ 96.143086][ T6579] should_fail_ex+0x229/0x230 [ 96.147819][ T6579] ? skb_clone+0x154/0x1f0 [ 96.152264][ T6579] __should_failslab+0x92/0xa0 [ 96.157072][ T6579] should_failslab+0x9/0x20 [ 96.161661][ T6579] kmem_cache_alloc_noprof+0x4c/0x290 [ 96.167087][ T6579] skb_clone+0x154/0x1f0 [ 96.171356][ T6579] __netlink_deliver_tap+0x2bd/0x4c0 [ 96.176736][ T6579] netlink_unicast+0x63b/0x660 [ 96.181530][ T6579] netlink_sendmsg+0x5ca/0x6e0 [ 96.186484][ T6579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.191795][ T6579] __sock_sendmsg+0x140/0x180 [ 96.196510][ T6579] ____sys_sendmsg+0x312/0x410 [ 96.201368][ T6579] __sys_sendmsg+0x1e9/0x280 [ 96.206005][ T6579] __x64_sys_sendmsg+0x46/0x50 [ 96.210850][ T6579] x64_sys_call+0xb25/0x2d70 [ 96.215549][ T6579] do_syscall_64+0xc9/0x1c0 [ 96.220082][ T6579] ? clear_bhb_loop+0x55/0xb0 [ 96.224814][ T6579] ? clear_bhb_loop+0x55/0xb0 [ 96.229556][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.235473][ T6579] RIP: 0033:0x7fc923ea2bd9 [ 96.239953][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.259627][ T6579] RSP: 002b:00007fc923124048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.268150][ T6579] RAX: ffffffffffffffda RBX: 00007fc924030f60 RCX: 00007fc923ea2bd9 [ 96.276180][ T6579] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 96.284165][ T6579] RBP: 00007fc9231240a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.292158][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.300452][ T6579] R13: 000000000000000b R14: 00007fc924030f60 R15: 00007ffece3f4df8 [ 96.308433][ T6579] [ 96.342874][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 96.364283][ T6584] loop3: detected capacity change from 0 to 764 [ 96.385179][ T6584] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 96.576354][ T6575] loop7: detected capacity change from 16384 to 16383 [ 96.685671][ T257] I/O error, dev loop7, sector 6400 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 96.695766][ T257] buffer_io_error: 23 callbacks suppressed [ 96.695793][ T257] Buffer I/O error on dev loop7, logical block 800, lost async page write [ 96.815093][ T6593] loop2: detected capacity change from 0 to 256 [ 96.852684][ T6593] FAT-fs (loop2): Unrecognized mount option "ÿ0x000000000000ee00" or missing value [ 96.949790][ T6593] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 97.009857][ T6575] I/O error, dev loop7, sector 6408 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 97.019777][ T6575] Buffer I/O error on dev loop7, logical block 801, lost async page write [ 97.112369][ T6601] loop1: detected capacity change from 0 to 1764 [ 97.121241][ T6601] iso9660: Unknown parameter 'iochaas' [ 97.145120][ T6605] loop2: detected capacity change from 0 to 128 [ 97.291798][ T6609] loop2: detected capacity change from 0 to 1024 [ 97.293525][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.849'. [ 97.374476][ T6616] loop1: detected capacity change from 0 to 128 [ 97.617766][ T6622] loop4: detected capacity change from 0 to 128 [ 97.642112][ T6620] loop3: detected capacity change from 0 to 256 [ 97.695264][ T6620] FAT-fs (loop3): Unrecognized mount option "ÿ0x000000000000ee00" or missing value [ 97.700258][ T6623] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 97.716305][ T29] audit: type=1400 audit(1720446436.623:413): avc: denied { relabelto } for pid=6608 comm="syz.2.848" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:policy_config_t:s0" [ 97.729836][ T6609] loop2: detected capacity change from 0 to 8192 [ 97.742803][ T29] audit: type=1400 audit(1720446436.623:414): avc: denied { associate } for pid=6608 comm="syz.2.848" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:policy_config_t:s0" [ 97.768055][ T6625] loop7: detected capacity change from 0 to 16384 [ 97.790854][ T29] audit: type=1400 audit(1720446436.703:415): avc: denied { execute } for pid=6627 comm="syz.4.854" path="/16/cpuacct.usage_percpu_user" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.816911][ T6620] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 97.827627][ T6609] loop2: p1 p2[DM] p4 [ 97.847543][ T6609] loop2: p1 size 196608 extends beyond EOD, truncated [ 97.852291][ T6609] loop2: p2 size 150994946 extends beyond EOD, truncated [ 97.852725][ T6609] loop2: p4 size 50331648 extends beyond EOD, truncated [ 97.965056][ T6632] loop7: detected capacity change from 16384 to 16383 [ 98.004499][ T6641] loop1: detected capacity change from 0 to 764 [ 98.020214][ T6641] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 98.037721][ T6640] loop2: detected capacity change from 0 to 128 [ 98.194210][ T6652] loop3: detected capacity change from 0 to 1024 [ 98.289342][ T6657] loop4: detected capacity change from 0 to 136 [ 98.333219][ T6652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.355604][ T6660] loop2: detected capacity change from 0 to 128 [ 98.419785][ T6660] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 98.586972][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.646486][ T6669] loop0: detected capacity change from 0 to 1764 [ 98.653132][ T6669] iso9660: Unknown parameter 'iochaas' [ 98.664571][ T29] audit: type=1400 audit(1720446437.573:416): avc: denied { setopt } for pid=6672 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.687022][ T29] audit: type=1400 audit(1720446437.573:417): avc: denied { create } for pid=6672 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.734804][ T6680] loop4: detected capacity change from 0 to 1024 [ 98.752724][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.781637][ T6683] loop2: detected capacity change from 0 to 1764 [ 98.789493][ T6683] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 98.798418][ T6684] netlink: 'syz.3.865': attribute type 4 has an invalid length. [ 98.819519][ T6684] loop3: detected capacity change from 0 to 256 [ 98.839834][ T6683] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 98.905917][ T6687] loop2: detected capacity change from 0 to 128 [ 98.916575][ T6688] loop0: detected capacity change from 0 to 128 [ 98.949859][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.239418][ T29] audit: type=1400 audit(1720446438.153:418): avc: denied { write } for pid=6691 comm="syz.4.874" name="event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.271189][ T6701] loop2: detected capacity change from 0 to 512 [ 99.279126][ T6701] EXT4-fs: test_dummy_encryption option not supported [ 99.304646][ T29] audit: type=1400 audit(1720446438.213:419): avc: denied { read } for pid=6704 comm="syz.1.878" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 99.305560][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 99.331556][ T29] audit: type=1400 audit(1720446438.213:420): avc: denied { open } for pid=6704 comm="syz.1.878" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 99.418641][ T6708] loop1: detected capacity change from 0 to 2048 [ 99.456621][ T6708] loop1: p1 < > p4 [ 99.460977][ T6708] loop1: p4 size 8388608 extends beyond EOD, truncated [ 99.470360][ T29] audit: type=1400 audit(1720446438.383:421): avc: denied { write } for pid=6707 comm="syz.1.879" name="loop1p1" dev="devtmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.497729][ T29] audit: type=1400 audit(1720446438.383:422): avc: denied { open } for pid=6707 comm="syz.1.879" path="/dev/loop1p1" dev="devtmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.615085][ T6722] loop1: detected capacity change from 0 to 764 [ 99.622865][ T6722] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 100.183566][ T29] audit: type=1400 audit(1720446439.093:423): avc: denied { ioctl } for pid=6734 comm="syz.4.887" path="socket:[17647]" dev="sockfs" ino=17647 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.208903][ T29] audit: type=1400 audit(1720446439.123:424): avc: denied { read } for pid=6734 comm="syz.4.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.259378][ T29] audit: type=1400 audit(1720446439.173:425): avc: denied { shutdown } for pid=6738 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.282523][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'. [ 100.291520][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'. [ 100.313137][ T6742] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 100.321764][ T6742] syz_tun: entered promiscuous mode [ 100.391508][ T6744] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.890'. [ 100.419804][ T6746] loop0: detected capacity change from 0 to 512 [ 100.430000][ T6746] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.891: casefold flag without casefold feature [ 100.445006][ T6746] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.891: couldn't read orphan inode 15 (err -117) [ 100.509899][ T6746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.602314][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.623391][ T29] audit: type=1400 audit(1720446439.533:426): avc: denied { execute } for pid=6755 comm="syz.1.895" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 100.740513][ T6766] loop3: detected capacity change from 0 to 1024 [ 100.751325][ T6768] loop2: detected capacity change from 0 to 1024 [ 100.786138][ T6776] loop3: detected capacity change from 0 to 512 [ 100.794110][ T6776] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.902: casefold flag without casefold feature [ 100.807234][ T6776] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.902: couldn't read orphan inode 15 (err -117) [ 100.887340][ T6786] loop2: detected capacity change from 0 to 764 [ 100.894530][ T6786] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 100.930510][ T6796] loop3: detected capacity change from 0 to 512 [ 100.939745][ T6796] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.906: casefold flag without casefold feature [ 100.954326][ T6796] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.906: couldn't read orphan inode 15 (err -117) [ 101.046319][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.910'. [ 101.060838][ T29] audit: type=1400 audit(1720446439.973:427): avc: denied { create } for pid=6806 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 101.240823][ T6821] loop3: detected capacity change from 0 to 1024 [ 101.427227][ T6801] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 101.495594][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.914'. [ 101.529353][ T6832] loop1: detected capacity change from 0 to 512 [ 101.543378][ T6834] loop4: detected capacity change from 0 to 512 [ 101.551378][ T6834] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.919: casefold flag without casefold feature [ 101.565760][ T6834] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.919: couldn't read orphan inode 15 (err -117) [ 101.581180][ T6832] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.582786][ T6830] loop3: detected capacity change from 0 to 128 [ 101.598337][ T6830] FAT-fs (loop3): Unrecognized mount option "/dev/mISDNtimer" or missing value [ 101.601231][ T6832] FAULT_INJECTION: forcing a failure. [ 101.601231][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 101.620131][ T6832] CPU: 0 PID: 6832 Comm: syz.1.918 Not tainted 6.10.0-rc7-syzkaller #0 [ 101.628411][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 101.638521][ T6832] Call Trace: [ 101.641810][ T6832] [ 101.644802][ T6832] dump_stack_lvl+0xf2/0x150 [ 101.649442][ T6832] dump_stack+0x15/0x20 [ 101.653645][ T6832] should_fail_ex+0x229/0x230 [ 101.658425][ T6832] ? security_file_alloc+0x32/0xe0 [ 101.663576][ T6832] __should_failslab+0x92/0xa0 [ 101.668384][ T6832] should_failslab+0x9/0x20 [ 101.672958][ T6832] kmem_cache_alloc_noprof+0x4c/0x290 [ 101.678403][ T6832] security_file_alloc+0x32/0xe0 [ 101.683381][ T6832] alloc_empty_file+0x121/0x310 [ 101.688254][ T6832] path_openat+0x6a/0x1fa0 [ 101.692765][ T6832] ? mntput+0x49/0x70 [ 101.696760][ T6832] ? terminate_walk+0x260/0x280 [ 101.701687][ T6832] ? path_openat+0x1a6f/0x1fa0 [ 101.706466][ T6832] ? _parse_integer_limit+0x167/0x180 [ 101.711868][ T6832] do_filp_open+0xf7/0x200 [ 101.716304][ T6832] do_open_execat+0xd0/0x270 [ 101.720952][ T6832] alloc_bprm+0x28/0x5e0 [ 101.725220][ T6832] do_execveat_common+0x138/0x7d0 [ 101.730260][ T6832] ? getname_flags+0x166/0x360 [ 101.735152][ T6832] __x64_sys_execve+0x5a/0x70 [ 101.739885][ T6832] x64_sys_call+0x1378/0x2d70 [ 101.744570][ T6832] do_syscall_64+0xc9/0x1c0 [ 101.749257][ T6832] ? clear_bhb_loop+0x55/0xb0 [ 101.754013][ T6832] ? clear_bhb_loop+0x55/0xb0 [ 101.758738][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.764717][ T6832] RIP: 0033:0x7f0e2957ebd9 [ 101.769132][ T6832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.788923][ T6832] RSP: 002b:00007f0e28800048 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 101.797485][ T6832] RAX: ffffffffffffffda RBX: 00007f0e2970cf60 RCX: 00007f0e2957ebd9 [ 101.805550][ T6832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 101.813544][ T6832] RBP: 00007f0e288000a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.821562][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.829568][ T6832] R13: 000000000000000b R14: 00007f0e2970cf60 R15: 00007ffddbd3bab8 [ 101.837540][ T6832] [ 101.923296][ T6849] loop3: detected capacity change from 0 to 1024 [ 101.932080][ T6853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6853 comm=syz.1.926 [ 101.956545][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'. [ 101.976042][ T6859] loop7: detected capacity change from 0 to 16384 [ 101.983282][ T6858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.928'. [ 102.013498][ T6862] loop3: detected capacity change from 0 to 512 [ 102.057441][ T6862] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.076760][ T6862] process 'syz.3.929' launched './file0' with NULL argv: empty string added [ 102.124127][ T6853] loop1: detected capacity change from 0 to 256 [ 102.166611][ T6867] loop7: detected capacity change from 16384 to 16383 [ 102.175497][ T6867] I/O error, dev loop7, sector 8696 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.185559][ T6867] Buffer I/O error on dev loop7, logical block 1087, lost async page write [ 102.194221][ T6867] I/O error, dev loop7, sector 8688 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.204463][ T6867] Buffer I/O error on dev loop7, logical block 1086, lost async page write [ 102.213153][ T6867] I/O error, dev loop7, sector 8680 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.223006][ T6867] Buffer I/O error on dev loop7, logical block 1085, lost async page write [ 102.231697][ T6867] I/O error, dev loop7, sector 8672 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.232687][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.935'. [ 102.241390][ T6867] Buffer I/O error on dev loop7, logical block 1084, lost async page write [ 102.241471][ T6867] I/O error, dev loop7, sector 8664 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.250268][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.935'. [ 102.258877][ T6867] Buffer I/O error on dev loop7, logical block 1083, lost async page write [ 102.286162][ T6867] I/O error, dev loop7, sector 8656 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.295995][ T6867] Buffer I/O error on dev loop7, logical block 1082, lost async page write [ 102.304659][ T6867] I/O error, dev loop7, sector 8648 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.314434][ T6867] Buffer I/O error on dev loop7, logical block 1081, lost async page write [ 102.323085][ T6867] I/O error, dev loop7, sector 8640 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.332950][ T6867] Buffer I/O error on dev loop7, logical block 1080, lost async page write [ 102.341667][ T6867] I/O error, dev loop7, sector 8632 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 102.351361][ T6867] Buffer I/O error on dev loop7, logical block 1079, lost async page write [ 102.360043][ T6867] Buffer I/O error on dev loop7, logical block 1078, lost async page write [ 102.418940][ T6889] loop3: detected capacity change from 0 to 1024 [ 102.849878][ T6934] loop3: detected capacity change from 0 to 1024 [ 102.910899][ T6915] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.012698][ T6945] FAULT_INJECTION: forcing a failure. [ 103.012698][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 103.025413][ T6945] CPU: 0 PID: 6945 Comm: syz.1.955 Not tainted 6.10.0-rc7-syzkaller #0 [ 103.033755][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.043831][ T6945] Call Trace: [ 103.047123][ T6945] [ 103.050065][ T6945] dump_stack_lvl+0xf2/0x150 [ 103.054735][ T6945] dump_stack+0x15/0x20 [ 103.058934][ T6945] should_fail_ex+0x229/0x230 [ 103.063657][ T6945] ? __alloc_skb+0x10b/0x300 [ 103.068279][ T6945] __should_failslab+0x92/0xa0 [ 103.073058][ T6945] should_failslab+0x9/0x20 [ 103.077611][ T6945] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 103.083470][ T6945] __alloc_skb+0x10b/0x300 [ 103.087940][ T6945] ? should_failslab+0x9/0x20 [ 103.092651][ T6945] audit_log_start+0x368/0x6b0 [ 103.097585][ T6945] ? __bpf_prog_run32+0x74/0xa0 [ 103.102531][ T6945] audit_seccomp+0x4b/0x130 [ 103.107081][ T6945] __seccomp_filter+0x6fa/0x1180 [ 103.112069][ T6945] ? proc_fail_nth_write+0x12d/0x160 [ 103.117442][ T6945] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.123134][ T6945] ? vfs_write+0x5a5/0x900 [ 103.127554][ T6945] ? __fget_files+0x1da/0x210 [ 103.132348][ T6945] __secure_computing+0x9f/0x1c0 [ 103.137294][ T6945] syscall_trace_enter+0xd1/0x1f0 [ 103.142336][ T6945] ? fpregs_assert_state_consistent+0x83/0xa0 [ 103.148452][ T6945] do_syscall_64+0xaa/0x1c0 [ 103.152991][ T6945] ? clear_bhb_loop+0x55/0xb0 [ 103.157728][ T6945] ? clear_bhb_loop+0x55/0xb0 [ 103.162443][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.168349][ T6945] RIP: 0033:0x7f0e2957ebd9 [ 103.172776][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.192411][ T6945] RSP: 002b:00007f0e28800048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 103.200858][ T6945] RAX: ffffffffffffffda RBX: 00007f0e2970cf60 RCX: 00007f0e2957ebd9 [ 103.208855][ T6945] RDX: 0000000020000580 RSI: 000000000000005f RDI: 0000000000000000 [ 103.216917][ T6945] RBP: 00007f0e288000a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.224901][ T6945] R10: 00000000000a0000 R11: 0000000000000246 R12: 0000000000000001 [ 103.232961][ T6945] R13: 000000000000000b R14: 00007f0e2970cf60 R15: 00007ffddbd3bab8 [ 103.240935][ T6945] [ 103.331120][ T6955] loop3: detected capacity change from 0 to 256 [ 103.616392][ T6972] loop2: detected capacity change from 0 to 512 [ 103.623046][ T6972] EXT4-fs: quotafile must be on filesystem root [ 104.284866][ T6996] dvmrp1: entered allmulticast mode [ 104.330136][ T6998] dvmrp1: left allmulticast mode [ 104.380678][ T7004] __nla_validate_parse: 5 callbacks suppressed [ 104.380746][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 104.391507][ T6996] xt_hashlimit: invalid interval [ 104.402836][ T6996] netlink: 148 bytes leftover after parsing attributes in process `syz.4.974'. [ 104.426964][ T7006] loop2: detected capacity change from 0 to 1024 [ 104.437663][ T7006] EXT4-fs mount: 20 callbacks suppressed [ 104.437678][ T7006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.467214][ T6219] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.533543][ T7020] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.541912][ T7018] netlink: 136 bytes leftover after parsing attributes in process `syz.2.981'. [ 104.551076][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 104.551090][ T29] audit: type=1400 audit(1720446443.453:457): avc: denied { ioctl } for pid=7017 comm="syz.2.981" path="socket:[17397]" dev="sockfs" ino=17397 ioctlcmd=0x89fd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.585413][ T7018] netlink: 'syz.2.981': attribute type 11 has an invalid length. [ 104.717539][ T7029] loop4: detected capacity change from 0 to 512 [ 104.724188][ T7029] EXT4-fs: quotafile must be on filesystem root [ 104.799459][ T7031] syzkaller1: entered promiscuous mode [ 104.805024][ T7031] syzkaller1: entered allmulticast mode [ 104.886059][ T7037] FAULT_INJECTION: forcing a failure. [ 104.886059][ T7037] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.899446][ T7037] CPU: 1 PID: 7037 Comm: syz.1.992 Not tainted 6.10.0-rc7-syzkaller #0 [ 104.907711][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.917789][ T7037] Call Trace: [ 104.921086][ T7037] [ 104.924032][ T7037] dump_stack_lvl+0xf2/0x150 [ 104.928778][ T7037] dump_stack+0x15/0x20 [ 104.932956][ T7037] should_fail_ex+0x229/0x230 [ 104.937797][ T7037] __should_fail_alloc_page+0xfd/0x110 [ 104.943276][ T7037] __alloc_pages_noprof+0x109/0x360 [ 104.948516][ T7037] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 104.953925][ T7037] vma_alloc_folio_noprof+0x176/0x2d0 [ 104.959388][ T7037] do_wp_page+0x62b/0x22b0 [ 104.963874][ T7037] ? memcg_list_lru_alloc+0xd2/0x740 [ 104.969214][ T7037] ? __rcu_read_lock+0x36/0x50 [ 104.974192][ T7037] handle_mm_fault+0xb9b/0x2a80 [ 104.979174][ T7037] exc_page_fault+0x296/0x650 [ 104.984095][ T7037] asm_exc_page_fault+0x26/0x30 [ 104.989008][ T7037] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 104.994846][ T7037] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 105.014577][ T7037] RSP: 0018:ffffc90001167ac8 EFLAGS: 00050206 [ 105.020718][ T7037] RAX: ffff888103cf2b80 RBX: 0000000020003500 RCX: 0000000000000500 [ 105.028818][ T7037] RDX: 0000000000000000 RSI: ffff88810472cb00 RDI: 0000000020004000 [ 105.036832][ T7037] RBP: ffffc90001167d48 R08: 0000000000000000 R09: 0000000000000000 [ 105.044825][ T7037] R10: 000188810472c000 R11: 000188810472cfff R12: 0000000000001000 [ 105.052826][ T7037] R13: 0000000020004500 R14: ffffc90001167d58 R15: ffff88810472c000 [ 105.060946][ T7037] _copy_to_iter+0x137/0xaf0 [ 105.065567][ T7037] ? free_unref_page_commit+0x67/0x270 [ 105.071098][ T7037] ? _raw_spin_unlock+0x26/0x50 [ 105.076075][ T7037] ? free_unref_page+0x237/0x4f0 [ 105.081100][ T7037] copy_page_to_iter+0x171/0x2b0 [ 105.086160][ T7037] pipe_to_user+0x5c/0x90 [ 105.090652][ T7037] __splice_from_pipe+0x207/0x4b0 [ 105.095717][ T7037] ? __pfx_pipe_to_user+0x10/0x10 [ 105.100833][ T7037] __se_sys_vmsplice+0x265/0xdc0 [ 105.105813][ T7037] ? kstrtouint+0x77/0xc0 [ 105.110212][ T7037] ? kstrtouint_from_user+0xb0/0xe0 [ 105.115440][ T7037] ? __rcu_read_unlock+0x4e/0x70 [ 105.120526][ T7037] ? __perf_event_task_sched_in+0x7c4/0x7f0 [ 105.126533][ T7037] ? restore_fpregs_from_fpstate+0x64/0x130 [ 105.132465][ T7037] __x64_sys_vmsplice+0x55/0x70 [ 105.137355][ T7037] x64_sys_call+0xb5f/0x2d70 [ 105.142014][ T7037] do_syscall_64+0xc9/0x1c0 [ 105.146580][ T7037] ? clear_bhb_loop+0x55/0xb0 [ 105.151356][ T7037] ? clear_bhb_loop+0x55/0xb0 [ 105.156154][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.162169][ T7037] RIP: 0033:0x7f0e2957ebd9 [ 105.166612][ T7037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.186399][ T7037] RSP: 002b:00007f0e287df048 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 105.194899][ T7037] RAX: ffffffffffffffda RBX: 00007f0e2970d038 RCX: 00007f0e2957ebd9 [ 105.202897][ T7037] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000008 [ 105.210918][ T7037] RBP: 00007f0e287df0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.218909][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.226915][ T7037] R13: 000000000000006e R14: 00007f0e2970d038 R15: 00007ffddbd3bab8 [ 105.234953][ T7037] [ 105.473144][ T7041] loop2: detected capacity change from 0 to 512 [ 105.513885][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.516688][ T29] audit: type=1400 audit(1720446444.423:458): avc: denied { read } for pid=7054 comm="syz.4.998" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 105.526986][ T7041] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.550167][ T29] audit: type=1400 audit(1720446444.423:459): avc: denied { open } for pid=7054 comm="syz.4.998" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 105.550228][ T29] audit: type=1400 audit(1720446444.423:460): avc: denied { ioctl } for pid=7054 comm="syz.4.998" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 105.568549][ T7058] loop4: detected capacity change from 0 to 512 [ 105.640255][ T6219] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.664908][ T7058] EXT4-fs: Ignoring removed i_version option [ 105.671153][ T7058] EXT4-fs: Ignoring removed nobh option [ 105.734943][ T7058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.786859][ T7058] EXT4-fs (loop4): 1 truncate cleaned up [ 105.793203][ T7058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.813207][ T7058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.901344][ T7066] chnl_net:caif_netlink_parms(): no params data found [ 106.013702][ T1517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.031998][ T7090] loop3: detected capacity change from 0 to 512 [ 106.038584][ T7090] EXT4-fs: quotafile must be on filesystem root [ 106.133135][ T29] audit: type=1400 audit(1720446445.043:461): avc: denied { watch watch_reads } for pid=7092 comm="syz.1.1010" path="/59/control" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.271039][ T1517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.331040][ T7066] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.338300][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.352549][ T7066] bridge_slave_0: entered allmulticast mode [ 106.364433][ T7066] bridge_slave_0: entered promiscuous mode [ 106.384397][ T1517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.476103][ T7066] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.483277][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.558105][ T7066] bridge_slave_1: entered allmulticast mode [ 106.571798][ T7066] bridge_slave_1: entered promiscuous mode [ 106.621316][ T1517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.788010][ T7101] loop3: detected capacity change from 0 to 512 [ 106.808699][ T7066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.818101][ T1517] bridge_slave_1: left allmulticast mode [ 106.823863][ T1517] bridge_slave_1: left promiscuous mode [ 106.829606][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.848610][ T1517] bridge_slave_0: left allmulticast mode [ 106.854289][ T1517] bridge_slave_0: left promiscuous mode [ 106.860054][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.877414][ T7101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.891406][ T7101] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.975062][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.039531][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.058230][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.078235][ T1517] bond0 (unregistering): Released all slaves [ 107.090493][ T7066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.122501][ T7066] team0: Port device team_slave_0 added [ 107.130510][ T7066] team0: Port device team_slave_1 added [ 107.152035][ T7066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.159144][ T7066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.185302][ T7066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.208242][ T7066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.215302][ T7066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.241277][ T7066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.255609][ T7115] loop7: detected capacity change from 0 to 16384 [ 107.269712][ T1517] hsr_slave_0: left promiscuous mode [ 107.275573][ T1517] hsr_slave_1: left promiscuous mode [ 107.289642][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.297182][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.321014][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.328667][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.353340][ T1517] veth1_macvtap: left promiscuous mode [ 107.359008][ T1517] veth0_macvtap: left promiscuous mode [ 107.364602][ T1517] veth1_vlan: left promiscuous mode [ 107.370002][ T1517] veth0_vlan: left promiscuous mode [ 107.437477][ T7119] loop7: detected capacity change from 16384 to 16383 [ 107.483167][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 107.495212][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 107.549731][ T7066] hsr_slave_0: entered promiscuous mode [ 107.556087][ T7066] hsr_slave_1: entered promiscuous mode [ 107.564222][ T7066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.574320][ T7066] Cannot create hsr debugfs directory [ 107.586346][ T7126] syzkaller1: entered promiscuous mode [ 107.591921][ T7126] syzkaller1: entered allmulticast mode [ 107.713643][ T7139] loop4: detected capacity change from 0 to 1764 [ 107.720407][ T7139] iso9660: Unknown parameter 'iochaas' [ 107.742179][ T7142] loop0: detected capacity change from 0 to 16384 [ 107.757342][ T7144] netlink: 'syz.3.1019': attribute type 4 has an invalid length. [ 107.768754][ T7144] loop3: detected capacity change from 0 to 256 [ 107.961200][ T7147] loop4: detected capacity change from 0 to 128 [ 108.073816][ T7066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.084363][ T7066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.096214][ T7145] loop0: detected capacity change from 16384 to 16383 [ 108.104543][ T7066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.116742][ T7066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.141711][ T7145] blk_print_req_error: 26 callbacks suppressed [ 108.141729][ T7145] I/O error, dev loop0, sector 14080 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 108.157690][ T7145] buffer_io_error: 24 callbacks suppressed [ 108.157703][ T7145] Buffer I/O error on dev loop0, logical block 1760, lost async page write [ 108.219091][ T7066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.238631][ T7066] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.250304][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.257489][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.269034][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.276119][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.302711][ T7066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.313230][ T7066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.376716][ T7066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.425678][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 108.463649][ T7066] veth0_vlan: entered promiscuous mode [ 108.473529][ T7066] veth1_vlan: entered promiscuous mode [ 108.491742][ T7066] veth0_macvtap: entered promiscuous mode [ 108.500071][ T7066] veth1_macvtap: entered promiscuous mode [ 108.511751][ T7066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.522387][ T7066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.532447][ T7066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.543274][ T7066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.553290][ T7066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.563737][ T7066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.563758][ T7066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.584187][ T7066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.601353][ T7066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.611201][ T7066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.621746][ T7066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.631769][ T7066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.642416][ T7066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.652283][ T7066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.662872][ T7066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.673026][ T7066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.683505][ T7066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.694512][ T7066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.720463][ T7066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.725841][ T7168] loop4: detected capacity change from 0 to 1024 [ 108.729359][ T7066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.744440][ T7066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.753293][ T7066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.766757][ T7168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.823043][ T29] audit: type=1400 audit(1720446447.733:462): avc: denied { ioctl } for pid=7175 comm="syz.2.1001" path="/dev/input/event0" dev="devtmpfs" ino=217 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.850325][ T7176] Process accounting resumed [ 108.854202][ T29] audit: type=1400 audit(1720446447.733:463): avc: denied { mounton } for pid=7175 comm="syz.2.1001" path="/0/file0" dev="ramfs" ino=19780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 108.881784][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.066698][ T7197] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 109.090986][ T7197] loop3: detected capacity change from 0 to 256 [ 109.291946][ T7200] loop1: detected capacity change from 0 to 512 [ 109.310164][ T7200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.376266][ T7200] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.430261][ T6083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.661944][ T7208] loop1: detected capacity change from 0 to 1024 [ 109.671788][ T7208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.806414][ T6083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.878845][ T29] audit: type=1400 audit(1720446448.783:464): avc: denied { name_bind } for pid=7210 comm="syz.3.1042" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 109.904621][ T7215] loop1: detected capacity change from 0 to 128 [ 109.951897][ T7219] vlan2: entered promiscuous mode [ 109.957175][ T7219] bridge0: entered promiscuous mode [ 109.964929][ T7219] bridge0: port 3(vlan2) entered blocking state [ 109.971281][ T7219] bridge0: port 3(vlan2) entered disabled state [ 109.977924][ T7219] vlan2: entered allmulticast mode [ 109.983060][ T7219] bridge0: entered allmulticast mode [ 109.989177][ T7219] vlan2: left allmulticast mode [ 109.994096][ T7219] bridge0: left allmulticast mode [ 109.999711][ T7219] bridge0: left promiscuous mode [ 110.024883][ T7221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1047'. [ 110.119017][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1048'. [ 110.146784][ T7234] can0: slcan on pts0. [ 110.175753][ T7236] loop2: detected capacity change from 0 to 1024 [ 110.185442][ T7236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.280250][ T7241] netlink: 'syz.4.1052': attribute type 4 has an invalid length. [ 110.295353][ T7066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.319309][ T7241] loop4: detected capacity change from 0 to 256 [ 110.936654][ T7228] can0 (unregistered): slcan off pts0. [ 111.153725][ T4560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.179404][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1060'. [ 111.190275][ T7272] FAULT_INJECTION: forcing a failure. [ 111.190275][ T7272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.203505][ T7272] CPU: 1 PID: 7272 Comm: syz.3.1061 Not tainted 6.10.0-rc7-syzkaller #0 [ 111.211864][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 111.221987][ T7272] Call Trace: [ 111.221997][ T7272] [ 111.222005][ T7272] dump_stack_lvl+0xf2/0x150 [ 111.232831][ T7272] dump_stack+0x15/0x20 [ 111.237021][ T7272] should_fail_ex+0x229/0x230 [ 111.241785][ T7272] should_fail+0xb/0x10 [ 111.246038][ T7272] should_fail_usercopy+0x1a/0x20 [ 111.251082][ T7272] _copy_from_iter+0xd3/0xb00 [ 111.255779][ T7272] ? kmalloc_reserve+0x16e/0x190 [ 111.260791][ T7272] ? __build_skb_around+0x196/0x1f0 [ 111.266034][ T7272] ? __alloc_skb+0x217/0x300 [ 111.270702][ T7272] ? __virt_addr_valid+0x1dd/0x240 [ 111.275843][ T7272] ? __check_object_size+0x35b/0x510 [ 111.281141][ T7272] netlink_sendmsg+0x460/0x6e0 [ 111.285924][ T7272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.291249][ T7272] __sock_sendmsg+0x140/0x180 [ 111.296050][ T7272] ____sys_sendmsg+0x312/0x410 [ 111.300827][ T7272] __sys_sendmsg+0x1e9/0x280 [ 111.305440][ T7272] __x64_sys_sendmsg+0x46/0x50 [ 111.310228][ T7272] x64_sys_call+0xb25/0x2d70 [ 111.314830][ T7272] do_syscall_64+0xc9/0x1c0 [ 111.319408][ T7272] ? clear_bhb_loop+0x55/0xb0 [ 111.324160][ T7272] ? clear_bhb_loop+0x55/0xb0 [ 111.328848][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.334765][ T7272] RIP: 0033:0x7f190b218bd9 [ 111.339255][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.358882][ T7272] RSP: 002b:00007f190a49a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.367306][ T7272] RAX: ffffffffffffffda RBX: 00007f190b3a6f60 RCX: 00007f190b218bd9 [ 111.375368][ T7272] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 111.383347][ T7272] RBP: 00007f190a49a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.391428][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.399496][ T7272] R13: 000000000000000b R14: 00007f190b3a6f60 R15: 00007fffcfa42268 [ 111.407481][ T7272] [ 111.433112][ T7277] loop3: detected capacity change from 0 to 1024 [ 111.436096][ T4560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.448077][ T7279] loop2: detected capacity change from 0 to 2048 [ 111.458870][ T7277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.496514][ T7279] loop2: p1 p2 p3 [ 111.500302][ T7279] loop2: p1 size 458752 extends beyond EOD, truncated [ 111.509511][ T7284] loop0: detected capacity change from 0 to 16384 [ 111.511737][ T7279] loop2: p2 start 4294902784 is beyond EOD, truncated [ 111.522895][ T7279] loop2: p3 start 4278191616 is beyond EOD, truncated [ 111.533021][ T4560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.536419][ T7284] loop0: detected capacity change from 16384 to 16383 [ 111.551530][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1064'. [ 111.568911][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.573622][ T7249] chnl_net:caif_netlink_parms(): no params data found [ 111.590840][ T4560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.664599][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.664624][ T7301] loop3: detected capacity change from 0 to 512 [ 111.671721][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.685393][ T7249] bridge_slave_0: entered allmulticast mode [ 111.689441][ T7301] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1071: casefold flag without casefold feature [ 111.692467][ T7249] bridge_slave_0: entered promiscuous mode [ 111.706009][ T7301] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1071: couldn't read orphan inode 15 (err -117) [ 111.711218][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.729075][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.736923][ T7249] bridge_slave_1: entered allmulticast mode [ 111.738623][ T7301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.743519][ T7249] bridge_slave_1: entered promiscuous mode [ 111.787997][ T4560] bridge_slave_1: left allmulticast mode [ 111.793714][ T4560] bridge_slave_1: left promiscuous mode [ 111.799515][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.807635][ T4560] bridge_slave_0: left allmulticast mode [ 111.813408][ T4560] bridge_slave_0: left promiscuous mode [ 111.819178][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.835343][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.900951][ T7315] loop3: detected capacity change from 0 to 512 [ 111.969786][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.981336][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.992143][ T4560] bond0 (unregistering): Released all slaves [ 111.992480][ T7322] loop0: detected capacity change from 0 to 16384 [ 112.008667][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.020612][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.027926][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.035347][ T7318] bridge0: entered promiscuous mode [ 112.046382][ T7322] loop0: detected capacity change from 16384 to 16383 [ 112.049010][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.068450][ T4560] hsr_slave_0: left promiscuous mode [ 112.079525][ T4560] hsr_slave_1: left promiscuous mode [ 112.089236][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.096874][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.105070][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.112542][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.128832][ T4560] veth1_macvtap: left promiscuous mode [ 112.134507][ T4560] veth0_macvtap: left promiscuous mode [ 112.140212][ T4560] veth1_vlan: left promiscuous mode [ 112.145538][ T4560] veth0_vlan: left promiscuous mode [ 112.199620][ T7338] loop3: detected capacity change from 0 to 512 [ 112.201416][ T7341] loop4: detected capacity change from 0 to 764 [ 112.209288][ T7338] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1085: casefold flag without casefold feature [ 112.225384][ T7338] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1085: couldn't read orphan inode 15 (err -117) [ 112.236135][ T7341] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 112.257790][ T7338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.276492][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 112.285892][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 112.349480][ T4560] team0 (unregistering): Port device team_slave_1 removed [ 112.370659][ T4560] team0 (unregistering): Port device team_slave_0 removed [ 112.378244][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.429057][ T29] audit: type=1400 audit(1720446451.333:465): avc: denied { read } for pid=7357 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.430060][ T7249] team0: Port device team_slave_0 added [ 112.464915][ T7249] team0: Port device team_slave_1 added [ 112.490034][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.497067][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.523274][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.541379][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.548849][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.574893][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.604662][ T7361] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 112.644458][ T7249] hsr_slave_0: entered promiscuous mode [ 112.651809][ T7249] hsr_slave_1: entered promiscuous mode [ 112.767818][ T4560] IPVS: stop unused estimator thread 0... [ 112.859435][ T7370] loop2: detected capacity change from 0 to 512 [ 112.877970][ T7368] loop0: detected capacity change from 0 to 16384 [ 112.880398][ T7370] EXT4-fs: Ignoring removed i_version option [ 112.890615][ T7370] EXT4-fs: Ignoring removed nobh option [ 112.904712][ T7370] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.918023][ T7370] EXT4-fs (loop2): 1 truncate cleaned up [ 112.924097][ T7370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.937118][ T7368] loop0: detected capacity change from 16384 to 16383 [ 112.952043][ T7370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.096796][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'. [ 113.120889][ T7386] loop3: detected capacity change from 0 to 512 [ 113.131078][ T7386] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1100: casefold flag without casefold feature [ 113.143999][ T7386] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1100: couldn't read orphan inode 15 (err -117) [ 113.147865][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 113.184679][ T7249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.191907][ T7386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.237211][ T7249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.258623][ T7249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.277114][ T7249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.318511][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.378086][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.395604][ T7249] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.406769][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.413870][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.523802][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.530995][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.597865][ T7249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.608325][ T7249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.749558][ T7403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7403 comm=syz.3.1104 [ 113.840064][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.932212][ T7249] veth0_vlan: entered promiscuous mode [ 113.945520][ T7420] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 113.949262][ T7249] veth1_vlan: entered promiscuous mode [ 114.000228][ T7249] veth0_macvtap: entered promiscuous mode [ 114.019668][ T7249] veth1_macvtap: entered promiscuous mode [ 114.048110][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.058749][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.068987][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.079628][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.092139][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.102711][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.112624][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.123078][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.124795][ T7428] loop2: detected capacity change from 0 to 1024 [ 114.137140][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.143403][ T7428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.150415][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.169871][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.169891][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.169909][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.169923][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.169936][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.169951][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.170014][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.180974][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.252884][ T7249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.261823][ T7249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270640][ T7249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.279490][ T7249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.316760][ T7435] loop4: detected capacity change from 0 to 512 [ 114.325451][ T7435] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1112: casefold flag without casefold feature [ 114.339779][ T7435] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1112: couldn't read orphan inode 15 (err -117) [ 114.353457][ T7435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.379551][ T7066] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.385500][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1116'. [ 114.398397][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 114.482622][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.524784][ T7467] loop0: detected capacity change from 0 to 1024 [ 114.534667][ T7465] loop2: detected capacity change from 0 to 512 [ 114.540639][ T7467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.555427][ T7465] EXT4-fs: Ignoring removed i_version option [ 114.561077][ T7472] loop3: detected capacity change from 0 to 128 [ 114.561666][ T7465] EXT4-fs: Ignoring removed nobh option [ 114.578476][ T7465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.598528][ T7465] EXT4-fs (loop2): 1 truncate cleaned up [ 114.605470][ T7465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.622518][ T7465] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.654469][ T7249] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.136240][ T7505] loop7: detected capacity change from 16383 to 16384 [ 115.208271][ T7510] loop4: detected capacity change from 0 to 1024 [ 115.238148][ T7510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.450551][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.544745][ T7515] __nla_validate_parse: 3 callbacks suppressed [ 115.544823][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1141'. [ 115.627391][ T7458] syz.2.1121 (7458) used greatest stack depth: 7320 bytes left [ 115.642915][ T7522] FAULT_INJECTION: forcing a failure. [ 115.642915][ T7522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.656109][ T7522] CPU: 0 PID: 7522 Comm: syz.3.1145 Not tainted 6.10.0-rc7-syzkaller #0 [ 115.664537][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 115.674602][ T7522] Call Trace: [ 115.677910][ T7522] [ 115.680860][ T7522] dump_stack_lvl+0xf2/0x150 [ 115.685611][ T7522] dump_stack+0x15/0x20 [ 115.689798][ T7522] should_fail_ex+0x229/0x230 [ 115.694502][ T7522] should_fail+0xb/0x10 [ 115.698683][ T7522] should_fail_usercopy+0x1a/0x20 [ 115.703826][ T7522] _copy_from_user+0x1e/0xd0 [ 115.708441][ T7522] lo_ioctl+0x5ee/0x1330 [ 115.712693][ T7522] ? __rcu_read_unlock+0x4e/0x70 [ 115.717652][ T7522] ? avc_has_extended_perms+0x60b/0x820 [ 115.723240][ T7522] ? ioctl_has_perm+0x28b/0x2e0 [ 115.728107][ T7522] ? __pfx_lo_ioctl+0x10/0x10 [ 115.732888][ T7522] blkdev_ioctl+0x35f/0x450 [ 115.737435][ T7522] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.742486][ T7522] __se_sys_ioctl+0xd3/0x150 [ 115.747090][ T7522] __x64_sys_ioctl+0x43/0x50 [ 115.751696][ T7522] x64_sys_call+0x1581/0x2d70 [ 115.756457][ T7522] do_syscall_64+0xc9/0x1c0 [ 115.760986][ T7522] ? clear_bhb_loop+0x55/0xb0 [ 115.765722][ T7522] ? clear_bhb_loop+0x55/0xb0 [ 115.770448][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.776451][ T7522] RIP: 0033:0x7f190b218bd9 [ 115.780878][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.800504][ T7522] RSP: 002b:00007f190a49a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.808921][ T7522] RAX: ffffffffffffffda RBX: 00007f190b3a6f60 RCX: 00007f190b218bd9 [ 115.816898][ T7522] RDX: 0000000020000200 RSI: 0000000000004c02 RDI: 0000000000000004 [ 115.824877][ T7522] RBP: 00007f190a49a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.832852][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.840850][ T7522] R13: 000000000000000b R14: 00007f190b3a6f60 R15: 00007fffcfa42268 [ 115.848902][ T7522] [ 115.889149][ T24] ================================================================== [ 115.897305][ T24] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 115.905519][ T24] [ 115.907866][ T24] read-write to 0xffff888100631838 of 8 bytes by task 7506 on cpu 0: [ 115.916031][ T24] __filemap_remove_folio+0x1c5/0x2c0 [ 115.921871][ T24] __remove_mapping+0x341/0x470 [ 115.926743][ T24] remove_mapping+0x22/0x90 [ 115.931270][ T24] mapping_try_invalidate+0x288/0x3e0 [ 115.936695][ T24] invalidate_mapping_pages+0x27/0x40 [ 115.942111][ T24] invalidate_bdev+0x58/0x70 [ 115.946740][ T24] loop_set_status+0x114/0x550 [ 115.951525][ T24] lo_ioctl+0x892/0x1330 [ 115.955792][ T24] blkdev_ioctl+0x35f/0x450 [ 115.960324][ T24] __se_sys_ioctl+0xd3/0x150 [ 115.964915][ T24] __x64_sys_ioctl+0x43/0x50 [ 115.969505][ T24] x64_sys_call+0x1581/0x2d70 [ 115.974184][ T24] do_syscall_64+0xc9/0x1c0 [ 115.978698][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.984619][ T24] [ 115.986937][ T24] read to 0xffff888100631838 of 8 bytes by task 24 on cpu 1: [ 115.994297][ T24] nr_blockdev_pages+0x7c/0xd0 [ 115.999129][ T24] si_meminfo+0x87/0xd0 [ 116.003322][ T24] update_defense_level+0x49/0x5b0 [ 116.008433][ T24] defense_work_handler+0x1f/0x80 [ 116.013475][ T24] process_scheduled_works+0x483/0x9a0 [ 116.018935][ T24] worker_thread+0x526/0x720 [ 116.023533][ T24] kthread+0x1d1/0x210 [ 116.027608][ T24] ret_from_fork+0x4b/0x60 [ 116.032039][ T24] ret_from_fork_asm+0x1a/0x30 [ 116.036834][ T24] [ 116.039160][ T24] value changed: 0x0000000000000666 -> 0x0000000000000665 [ 116.046270][ T24] [ 116.048592][ T24] Reported by Kernel Concurrency Sanitizer on: [ 116.054736][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.10.0-rc7-syzkaller #0 [ 116.062990][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 116.073218][ T24] Workqueue: events_long defense_work_handler [ 116.079299][ T24] ================================================================== [ 116.099441][ T7506] loop7: detected capacity change from 16384 to 16383 [ 116.103458][ T29] audit: type=1400 audit(1720446455.013:466): avc: denied { mounton } for pid=7533 comm="syz.3.1149" path="/144/file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.152228][ T7535] 9pnet_fd: Insufficient options for proto=fd