last executing test programs: 14.052837482s ago: executing program 2 (id=2578): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) poll(0x0, 0x0, 0xe7f1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 13.196147913s ago: executing program 2 (id=2584): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000006680)) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f443ee190000000000", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0c00b555269c40001f0000000c0058091f2518af5e850c160c00580026000000000000000c0058005a000000000000000d0058000b000000000000000c005879197101fe60ab5600"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x24000014) r1 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r3 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "92bf44e6f58ebf77", "442602ea721df99f48afc3b4df70e7c5", "14b6081d", "42c8883b8666fede"}, 0x28) sendto$inet6(r3, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e27, 0xffff943e, @rand_addr=' \x01\x00', 0x5}, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x0, 0x1e8, 0x0, 0x1e8, 0x1e8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@mh={{0x28}, {'|\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x28}, {"9c6b"}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xd, 0x8, @ipv6=@private2, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0x10000000}) sendto$inet6(r3, &(0x7f0000004b80)="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", 0x1080, 0xc084, &(0x7f00000004c0)={0xa, 0x4e21, 0x7, @mcast2, 0x180000}, 0x1c) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) 13.161986175s ago: executing program 2 (id=2586): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000406010700000000000000000000000005000100070000667247"], 0x28}}, 0x0) 13.122405128s ago: executing program 2 (id=2587): socket(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYRES32=r0], 0x1c}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x49}}], 0x1, 0x40000060, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) io_uring_setup(0x654e, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r10}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000840), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r12, &(0x7f0000000d40)="f9", 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300), 0x20) 13.052934114s ago: executing program 2 (id=2591): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 12.135537539s ago: executing program 2 (id=2603): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0xbc}, 0x1, 0x7a00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}, {@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) 1.779450804s ago: executing program 4 (id=2812): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000b7000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x5751, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x18, 0x0, 0x0) 1.778407935s ago: executing program 1 (id=2813): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x2492c84, &(0x7f0000000640)={[{@oldalloc}, {@grpquota}, {@orlov}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0xb89f}}, {@noquota}, {@bsdgroups}], [{@fsname={'fsname', 0x3d, 'nodelalloc'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@appraise_type}, {@dont_appraise}]}, 0x0, 0x78e, &(0x7f0000001940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getgroups(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000003c0)={{0xfc}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) tkill(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000003c0)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x10) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000340)={0x0, 0xfffffffffffffec6, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES8=r3, @ANYRES16=r6, @ANYBLOB="01230000000000000000090000000400048026c00af5b9326b0e76ccb510a93cd599b8e91d2a9827ff135aa964a9f26eba6734b6af5a048c9f2e851507028ea7ec0eab18af84e17efcdda06bda3f928b10d46a9cb1727cc039a7ab7c6c27c209f4bc6c4527c404e57e45d23a98"], 0x18}}, 0x4008040) ioctl$RTC_UIE_ON(r4, 0x7003) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev}, {0x0, @multicast}, 0xe, {0x2, 0x4e20, @broadcast}, 'wg1\x00'}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x1c9442, 0x0) 1.771741175s ago: executing program 4 (id=2814): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2ba92cf2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 7) 1.655676504s ago: executing program 1 (id=2816): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x3}}, 0x26) 1.655442674s ago: executing program 1 (id=2817): r0 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x82, 0x0, &(0x7f0000000040)) (fail_nth: 1) 1.408821164s ago: executing program 4 (id=2818): signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000280)='./control\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x9) prlimit64(r0, 0xc, &(0x7f0000000000)={0x3, 0x6}, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='./control\x00', 0x26000508) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 1.357053469s ago: executing program 4 (id=2819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x2492c84, &(0x7f0000000640)={[{@oldalloc}, {@grpquota}, {@orlov}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0xb89f}}, {@noquota}, {@bsdgroups}], [{@fsname={'fsname', 0x3d, 'nodelalloc'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@appraise_type}, {@dont_appraise}]}, 0x0, 0x78e, &(0x7f0000001940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getgroups(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000003c0)={{0xfc}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) tkill(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000003c0)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x10) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000340)={0x0, 0xfffffffffffffec6, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES8=r3, @ANYRES16=r6, @ANYBLOB="01230000000000000000090000000400048026c00af5b9326b0e76ccb510a93cd599b8e91d2a9827ff135aa964a9f26eba6734b6af5a048c9f2e851507028ea7ec0eab18af84e17efcdda06bda3f928b10d46a9cb1727cc039a7ab7c6c27c209f4bc6c4527c404e57e45d23a98"], 0x18}}, 0x4008040) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000a56499bea1f78ca7c9ebbb4df5215c0ecd07bc656922bc10f5fe86993cfa9bb727d6e8051c9b7ae4cc58", @ANYRES16=r6, @ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4010) ioctl$RTC_UIE_ON(r4, 0x7003) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev}, {0x0, @multicast}, 0xe, {0x2, 0x4e20, @broadcast}, 'wg1\x00'}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x1c9442, 0x0) 1.122846828s ago: executing program 0 (id=2820): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x90) 1.122044378s ago: executing program 3 (id=2821): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='security.#/00#\x00'/30]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x58}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f1, 0x0, 0x0, 0x0, 0x0) 1.080140121s ago: executing program 0 (id=2822): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0x3ff8000}, 0x1c) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x2, 0x9, 0x40, @private2, @empty, 0x7800, 0x8000, 0x9, 0x8}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0xd0, 0xf8, 0x6, 0x28, @local, @mcast2, 0x10, 0x10, 0x4, 0xb0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0xf, 0x2, 0x8, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x0, 0x10, 0xe56b, 0x2e6d}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x160, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24000804}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r0) sync_file_range(r0, 0x6, 0x5, 0x1) 1.035464805s ago: executing program 0 (id=2823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000b7000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x5751, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x18, 0x0, 0x0) 1.035150005s ago: executing program 3 (id=2824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000014000800"/34], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) io_uring_setup(0x0, &(0x7f0000000000)) r2 = io_uring_setup(0x96b, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='sit0\x00', 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd70000800070001000000080005000100"/30], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4008000) r7 = socket(0x200000100000011, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0x8b49c192454e3e75, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x50) 1.035011315s ago: executing program 1 (id=2825): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 1.034574035s ago: executing program 0 (id=2826): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10202}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_io_uring_setup(0xfae, &(0x7f0000000100)={0x0, 0x0, 0x13580}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r11 = eventfd(0x7) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000040)=r11, 0x1) io_uring_enter(r8, 0x6256, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r14 = socket(0x10, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r14, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x201c}, 0x20000001) write$binfmt_misc(r14, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a3124b15c30e7bcee05425e839b641908bf2b09e5152a935e329135f013a63e7edc840e19fcc657c3193ab95a452f100eda37d2ffa577add86dcc1573dc385dc5637ddc7dd5fcbdeb39b47a9f4d7932dd32e012f2e89c9ec30316e69a4d9d818397de35e9f4feba295ab12ca2e918721ec254d8b712f2c903b1df9a5a37ca46dba969cfe9a07e123f850b826e"], 0x8d) sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r13, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) eventfd2(0xc3, 0x80000) 975.51727ms ago: executing program 1 (id=2827): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf1683010000ddbe2255d6a0244d35b213bca84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b818184ebad0485fbaa816e3b26199d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31799053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efc794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee1"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000080)=""/147, 0x93}, {0x0}], 0x2) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)) 974.85449ms ago: executing program 4 (id=2828): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000002c0)={[0x6]}, &(0x7f0000000340), 0x0, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) bind(r0, &(0x7f00000004c0)=@can={0x1d, r2}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f00000000c0)='./file0/file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r5, 0xffffffffffffff4d, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000d40)=[0x0, 0x0], &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000dc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r9 = open(&(0x7f00000001c0)='./file1\x00', 0x4e142, 0x0) pwritev2(r9, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x7f) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d00011c8500"/20, @ANYRES32=r10, @ANYBLOB="000000000000000018003480140035006970365f767469300000000000000000"], 0x38}}, 0x0) 925.416734ms ago: executing program 3 (id=2829): unshare(0x6a040000) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x308, 0x1f8, 0x98, 0x148, 0x308, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x48}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1003000000000000}}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r2 = socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @random="d311282e7263", @void, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "15cb91b483712639ff6c9940562c04f3aa88a8fb388a11dc531524cf209b7779d305f549fa089c62a91c482247bade8eb00c22d3d9b3b540a3b2c8ee1e1ec77d"}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006000128009000100766c616e00000000500002800600010000000000040003800c00020004000000000000000c000200540a000018000000280004000000010005000000000000000c00010000000000000000000c0001007fae00000100000008000500", @ANYRES32=r5], 0x88}, 0x1, 0xba01}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}}, 0x0) 855.00954ms ago: executing program 0 (id=2830): socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="5aef18000000090000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000716300008510000004000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x8, &(0x7f00000002c0)="0000ff0cffffa000", &(0x7f0000000300)=""/8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="440b01000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYRES32], 0x50}}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') r3 = semget$private(0x0, 0x4, 0x1) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00') semop(r3, &(0x7f00000002c0)=[{0x3, 0xff}, {0x2, 0x1f}, {0x4, 0x3}, {0x0, 0xb, 0x1000}, {0x0, 0xfff, 0x800}], 0x5) semop(r3, &(0x7f0000000500)=[{0x2, 0xe5, 0x3800}, {0x3, 0xfffa, 0x1000}, {0x0, 0x7}, {0x4, 0x5, 0x800}, {0x0, 0x1003, 0x3c00}, {0x0, 0x9}, {0x1, 0x401, 0x1000}, {0x9945010f5813fd98, 0x9, 0x800}, {0x7, 0x80, 0x1000}, {0x3, 0x7}], 0xa) semop(r3, &(0x7f0000000380)=[{0x0, 0x7d12, 0x400}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x4, 0x8001}, {0x4, 0x7f}], 0x2) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r4, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x800}], 0x2, 0x0) semop(r4, &(0x7f00000000c0), 0x0) semctl$GETZCNT(r4, 0x5, 0xf, 0x0) r5 = semget(0x2, 0x0, 0x100) semctl$GETZCNT(r5, 0x0, 0xf, &(0x7f0000000200)=""/231) r6 = semget(0x1, 0x2, 0x208) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r6, &(0x7f0000000140)=[{0x1, 0x1, 0x800}, {}, {0x3, 0xfffc}, {0x2, 0x73aa, 0x1000}, {0x4, 0x8, 0x1000}, {0x4, 0x7, 0x1800}, {0x4, 0x80, 0x800}], 0x7, &(0x7f0000000580)={r7, r8+10000000}) 808.063754ms ago: executing program 1 (id=2831): semget$private(0x0, 0x0, 0x54) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000000000001d1e010e7126", 0xffea}], 0x1}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x141602, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000400)={0x1a, 0x15, 0xc, 0x1b, 0xa, 0x6189, 0x4, 0x148}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x85a7c0289ce9032e, &(0x7f0000000240), 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={0x0, @private}, &(0x7f0000000500)=0xc) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair(0x0, 0x0, 0x5c, &(0x7f0000000340)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000800)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$FICLONE(r6, 0x40049409, 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x7000000, 0x0, 0x0, 0x0, 0xd}, 0x9c) syz_open_procfs$namespace(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x20000000) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) 702.111143ms ago: executing program 3 (id=2832): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1004000, &(0x7f00000003c0)={[{@user_xattr}, {@nombcache}, {@quota}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@nojournal_checksum}, {@nobarrier}]}, 0xfe, 0x564, &(0x7f0000002240)="$eJzs3UtvVFUcAPD/nT54KiVBoi5MExZikCltfWDiApdGiSS6x0l7aUinDOlMCa0kwkI2bAwxMUYS4wdw75L4BfwUJEpCDGl04abmTu+Ugc70MQzMyPx+yYVz7qPnnDn3nPnfuTO5AQys8eyfQsRrEfFtEnGoadtw5BvH1/dbfXhtJluSWFv7/K8kknxdY/8k//9Annk1In77JuJEYXO51eWV+VK5nC7m+YnawuWJ6vLKyYsLpbl0Lr00NT19+t3pqQ/ef69rbX3r3D8/fHb349O3jq1+/8v9w7eTOBMH823N7XgK15sz4zGevyYjceaJHSe7UFg/SXpdAToylI/zkcjmgEMxlI964MX3dUSsAQMqMf5hQDXigMa1fZeug/83Hny0fgG0uf3D65+NxN76tdH+1eSxK6PsenesC+VnZfz6553b2RLd+xwCYFvXb0TEqeHhzfNfks9/nTu1g32eLMP8B8/P3Sz+ebtV/FPYiH+iRfxzoMXY7cT2479wv8VhSbc+pc7ivw9bxr8bN63GhiLilYh4qR7zjSQXLpbTbG57OSKOx8ieLL/V/ZzTq/fW2m1rjv+yJSu/EQvm9bg/vOfxY2ZLtdLTtLnZgxsRr7eMf5ON/k9a9H/26pzbYRlH0ztvtNu2ffufrbWfI95s2f+P7mglW9+fnKifDxONs2Kzv28e/b1d+b1uf9b/+7du/1jSfL+2uvsyftr7b9puW6fn/2jyRT09mq+7WqrVFicjRpNPN6+fenRsI9/YP2v/8WNbz3+tzv99EfHlDtt/88jNtrv2Q//P7qr/d5+498lXP7Yrf2f9/049dTxfs5P5b6cVfJrXDgAAAAAAAPpNISIORlIobqQLhWJx/fsdR2J/oVyp1k5cqCxdmo36b2XHYqTQuNN9qOn7EJP592Eb+akn8tMRcTgivhvaV88XZyrl2V43HgAAAAAAAAAAAAAAAAAAAPrEgTa//8/8MdTykNHnW0PgmfLIbxhc247/bjzpCehLu3//FzHAi6Kj0byv+/UAnj/v5jCgRnpdAaCXvP/D4DL+YXAZ/zC4jH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqnNnz2bL2urDazNZfvbK8tJ85crJ2bQ6X1xYminOVBYvF+cqlblyWpypLGz398qVyuXJqVi6OlFLq7WJ6vLK+YXK0qXa+YsLpbn0fOppQwAAAAAAAAAAAAAAAAAAALBZdXllvlQup4sSEh0lhvujGhJNiVtdGN09npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMl/AQAA///VUDYA") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000020850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) 591.409471ms ago: executing program 3 (id=2833): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1414aa00000000000000000000000000000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000a0000000000000000000000480003006465666c617465"], 0x138}}, 0x0) 561.877324ms ago: executing program 3 (id=2834): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5c}, {0x6}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x60ff, 0x0, &(0x7f0000000000), 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x0, 0x300) shutdown(r1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 86.879042ms ago: executing program 4 (id=2835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000b7000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x5751, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x18, 0x0, 0x0) 0s ago: executing program 0 (id=2836): r0 = socket$inet6(0xa, 0x6, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x2000000, 0x0, 0x5, 0x0, r0, 0x0}]) kernel console output (not intermixed with test programs): oop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.864317][T12506] loop3: detected capacity change from 0 to 2048 [ 161.878190][T12505] rtc_cmos 00:00: Alarms can be up to one day in the future [ 161.951750][ T29] audit: type=1326 audit(1722259781.553:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.3.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 161.975545][ T29] audit: type=1326 audit(1722259781.553:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.3.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 162.004367][ T29] audit: type=1326 audit(1722259781.603:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.3.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 162.028619][ T29] audit: type=1326 audit(1722259781.603:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.3.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 162.052189][ T29] audit: type=1326 audit(1722259781.603:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.3.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 162.056651][T12516] loop2: detected capacity change from 0 to 512 [ 162.080247][ T29] audit: type=1326 audit(1722259781.683:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.3.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 162.151368][T12516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.161828][T12526] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.189581][T12516] EXT4-fs (loop2): 1 truncate cleaned up [ 162.197360][T12516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.220263][T12531] netlink: 'syz.3.2394': attribute type 10 has an invalid length. [ 162.238975][T12533] loop4: detected capacity change from 0 to 256 [ 162.250371][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.280585][T12531] loop3: detected capacity change from 0 to 2048 [ 162.320069][T12539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2398'. [ 162.329974][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 162.336730][T12540] rtc_cmos 00:00: Alarms can be up to one day in the future [ 162.350620][T12538] loop2: detected capacity change from 0 to 4096 [ 162.368695][ T3336] rtc_cmos 00:00: Alarms can be up to one day in the future [ 162.376291][ T3336] rtc_cmos 00:00: Alarms can be up to one day in the future [ 162.383772][ T3336] rtc_cmos 00:00: Alarms can be up to one day in the future [ 162.391354][ T3336] rtc_cmos 00:00: Alarms can be up to one day in the future [ 162.398742][ T3336] rtc rtc0: __rtc_set_alarm: err=-22 [ 162.425016][T12538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.471227][T12558] netlink: 'syz.0.2404': attribute type 10 has an invalid length. [ 162.480777][T12558] FAULT_INJECTION: forcing a failure. [ 162.480777][T12558] name failslab, interval 1, probability 0, space 0, times 0 [ 162.493741][T12558] CPU: 1 UID: 0 PID: 12558 Comm: syz.0.2404 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 162.504817][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.514858][T12558] Call Trace: [ 162.518162][T12558] [ 162.521082][T12558] dump_stack_lvl+0xf2/0x150 [ 162.525721][T12558] dump_stack+0x15/0x20 [ 162.529870][T12558] should_fail_ex+0x229/0x230 [ 162.534554][T12558] ? vm_area_alloc+0x2c/0x130 [ 162.539257][T12558] should_failslab+0x8f/0xb0 [ 162.543908][T12558] kmem_cache_alloc_noprof+0x4c/0x290 [ 162.549300][T12558] vm_area_alloc+0x2c/0x130 [ 162.553843][T12558] mmap_region+0x88b/0x1620 [ 162.558351][T12558] ? security_mmap_addr+0x4c/0x70 [ 162.563390][T12558] ? __get_unmapped_area+0x2d1/0x300 [ 162.568666][T12558] do_mmap+0x72a/0xb70 [ 162.572728][T12558] ? security_mmap_file+0x128/0x150 [ 162.577996][T12558] vm_mmap_pgoff+0x133/0x290 [ 162.582577][T12558] ksys_mmap_pgoff+0xd0/0x340 [ 162.587408][T12558] ? fpregs_assert_state_consistent+0x83/0xa0 [ 162.593630][T12558] x64_sys_call+0x1940/0x2e00 [ 162.598298][T12558] do_syscall_64+0xc9/0x1c0 [ 162.602887][T12558] ? clear_bhb_loop+0x55/0xb0 [ 162.608411][T12558] ? clear_bhb_loop+0x55/0xb0 [ 162.613364][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.619333][T12558] RIP: 0033:0x7f1e6cae72d3 [ 162.623734][T12558] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 162.643400][T12558] RSP: 002b:00007f1e6b766e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 162.651800][T12558] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f1e6cae72d3 [ 162.659757][T12558] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 162.667758][T12558] RBP: 0000000020001042 R08: 00000000ffffffff R09: 0000000000000000 [ 162.675718][T12558] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 162.683752][T12558] R13: 00007f1e6b766f00 R14: 00007f1e6b766ec0 R15: 0000000020000080 [ 162.691763][T12558] [ 162.697484][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.748072][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2405'. [ 162.757741][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2405'. [ 162.768863][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'. [ 162.808927][T12572] loop2: detected capacity change from 0 to 2048 [ 162.828084][T12571] rtc_cmos 00:00: Alarms can be up to one day in the future [ 162.850058][T12580] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.851340][T12563] loop1: detected capacity change from 0 to 2048 [ 162.874420][T12582] loop2: detected capacity change from 0 to 1024 [ 162.885040][T12563] Alternate GPT is invalid, using primary GPT. [ 162.891277][T12563] loop1: p1 p2 p3 [ 162.895938][T12582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.945406][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.977417][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 162.990101][ T4092] udevd[4092]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 162.991184][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 163.035662][T12593] loop2: detected capacity change from 0 to 4096 [ 163.045232][T12593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.100179][T12606] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 163.139038][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.192413][T12612] loop1: detected capacity change from 0 to 1024 [ 163.229164][T12612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.266000][T12614] loop2: detected capacity change from 0 to 2048 [ 163.296043][T12613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 163.307174][ T9438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.368235][T12625] loop2: detected capacity change from 0 to 512 [ 163.373907][ T3336] rtc_cmos 00:00: Alarms can be up to one day in the future [ 163.382047][ T3336] rtc_cmos 00:00: Alarms can be up to one day in the future [ 163.389750][ T3336] rtc_cmos 00:00: Alarms can be up to one day in the future [ 163.392973][T12625] EXT4-fs: Ignoring removed oldalloc option [ 163.397429][ T3336] rtc_cmos 00:00: Alarms can be up to one day in the future [ 163.410595][ T3336] rtc rtc0: __rtc_set_alarm: err=-22 [ 163.419886][T12622] loop1: detected capacity change from 0 to 4096 [ 163.441602][T12625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.458031][T12622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.500005][T12625] EXT4-fs (loop2): 1 truncate cleaned up [ 163.509197][T12625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.526485][T12625] Invalid ELF header magic: != ELF [ 163.537455][ T9438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.550142][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.597194][T12635] loop2: detected capacity change from 0 to 512 [ 163.613754][T12635] EXT4-fs: Ignoring removed oldalloc option [ 163.623711][T12635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.630369][T12635] EXT4-fs (loop2): 1 truncate cleaned up [ 163.630768][T12635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.631886][T12635] FAULT_INJECTION: forcing a failure. [ 163.631886][T12635] name failslab, interval 1, probability 0, space 0, times 0 [ 163.631907][T12635] CPU: 1 UID: 0 PID: 12635 Comm: syz.2.2434 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 163.631930][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 163.631941][T12635] Call Trace: [ 163.631949][T12635] [ 163.631956][T12635] dump_stack_lvl+0xf2/0x150 [ 163.631988][T12635] dump_stack+0x15/0x20 [ 163.632029][T12635] should_fail_ex+0x229/0x230 [ 163.632131][T12635] ? __get_vm_area_node+0xf7/0x1b0 [ 163.632151][T12635] should_failslab+0x8f/0xb0 [ 163.632180][T12635] __kmalloc_cache_node_noprof+0x50/0x2b0 [ 163.632207][T12635] ? mntput_no_expire+0x70/0x3c0 [ 163.632275][T12635] __get_vm_area_node+0xf7/0x1b0 [ 163.632336][T12635] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 163.632355][T12635] ? kernel_read_file+0x2c5/0x4e0 [ 163.632386][T12635] ? selinux_kernel_module_from_file+0x226/0x270 [ 163.632426][T12635] ? kernel_read_file+0x2c5/0x4e0 [ 163.632475][T12635] vmalloc_noprof+0x5e/0x70 [ 163.632497][T12635] ? kernel_read_file+0x2c5/0x4e0 [ 163.632525][T12635] kernel_read_file+0x2c5/0x4e0 [ 163.632555][T12635] __se_sys_finit_module+0x2d5/0x4f0 [ 163.632659][T12635] __x64_sys_finit_module+0x43/0x50 [ 163.632677][T12635] x64_sys_call+0x1d85/0x2e00 [ 163.632699][T12635] do_syscall_64+0xc9/0x1c0 [ 163.632724][T12635] ? clear_bhb_loop+0x55/0xb0 [ 163.632809][T12635] ? clear_bhb_loop+0x55/0xb0 [ 163.632831][T12635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.632853][T12635] RIP: 0033:0x7fe2ff147299 [ 163.632896][T12635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.632915][T12635] RSP: 002b:00007fe2fddc7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 163.632932][T12635] RAX: ffffffffffffffda RBX: 00007fe2ff2d5f80 RCX: 00007fe2ff147299 [ 163.632986][T12635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 163.632998][T12635] RBP: 00007fe2fddc70a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.633011][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.633024][T12635] R13: 000000000000000b R14: 00007fe2ff2d5f80 R15: 00007ffcfa469cf8 [ 163.633041][T12635] [ 163.633049][T12635] syz.2.2434: vmalloc error: size 88, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 163.633107][T12635] CPU: 1 UID: 0 PID: 12635 Comm: syz.2.2434 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 163.633137][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 163.633185][T12635] Call Trace: [ 163.633191][T12635] [ 163.633198][T12635] dump_stack_lvl+0xf2/0x150 [ 163.633224][T12635] dump_stack+0x15/0x20 [ 163.633302][T12635] warn_alloc+0x145/0x1b0 [ 163.633329][T12635] ? mntput_no_expire+0x70/0x3c0 [ 163.633356][T12635] __vmalloc_node_range_noprof+0x310/0xef0 [ 163.633449][T12635] ? selinux_kernel_module_from_file+0x226/0x270 [ 163.633487][T12635] ? kernel_read_file+0x2c5/0x4e0 [ 163.633514][T12635] vmalloc_noprof+0x5e/0x70 [ 163.633616][T12635] ? kernel_read_file+0x2c5/0x4e0 [ 163.633645][T12635] kernel_read_file+0x2c5/0x4e0 [ 163.633736][T12635] __se_sys_finit_module+0x2d5/0x4f0 [ 163.633836][T12635] __x64_sys_finit_module+0x43/0x50 [ 163.633856][T12635] x64_sys_call+0x1d85/0x2e00 [ 163.633876][T12635] do_syscall_64+0xc9/0x1c0 [ 163.633900][T12635] ? clear_bhb_loop+0x55/0xb0 [ 163.633966][T12635] ? clear_bhb_loop+0x55/0xb0 [ 163.633996][T12635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.634020][T12635] RIP: 0033:0x7fe2ff147299 [ 163.634034][T12635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.634050][T12635] RSP: 002b:00007fe2fddc7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 163.634071][T12635] RAX: ffffffffffffffda RBX: 00007fe2ff2d5f80 RCX: 00007fe2ff147299 [ 163.634083][T12635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 163.634101][T12635] RBP: 00007fe2fddc70a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.634113][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.634126][T12635] R13: 000000000000000b R14: 00007fe2ff2d5f80 R15: 00007ffcfa469cf8 [ 163.634142][T12635] [ 163.634234][T12635] Mem-Info: [ 163.634240][T12635] active_anon:18106 inactive_anon:2 isolated_anon:0 [ 163.634240][T12635] active_file:13143 inactive_file:12729 isolated_file:0 [ 163.634240][T12635] unevictable:0 dirty:164 writeback:0 [ 163.634240][T12635] slab_reclaimable:2813 slab_unreclaimable:15857 [ 163.634240][T12635] mapped:29465 shmem:11117 pagetables:959 [ 163.634240][T12635] sec_pagetables:0 bounce:0 [ 163.634240][T12635] kernel_misc_reclaimable:0 [ 163.634240][T12635] free:1814757 free_pcp:4621 free_cma:0 [ 163.634295][T12635] Node 0 active_anon:72424kB inactive_anon:8kB active_file:52572kB inactive_file:50916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117860kB dirty:656kB writeback:0kB shmem:44468kB writeback_tmp:0kB kernel_stack:3152kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no [ 163.634458][T12635] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.634508][T12635] lowmem_reserve[]: 0 2866 7844 0 [ 163.634621][T12635] Node 0 DMA32 free:2950316kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953948kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 163.634676][T12635] lowmem_reserve[]: 0 0 4978 0 [ 163.634696][T12635] Node 0 Normal free:4293352kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:72424kB inactive_anon:8kB active_file:52572kB inactive_file:50916kB unevictable:0kB writepending:656kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:14768kB local_pcp:4768kB free_cma:0kB [ 163.634797][T12635] lowmem_reserve[]: 0 0 0 0 [ 163.634818][T12635] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 163.634960][T12635] Node 0 DMA32: 3*4kB (M) 0*8kB 2*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950316kB [ 163.635107][T12635] Node 0 Normal: 387*4kB (UME) 344*8kB (UE) 162*16kB (UE) 35*32kB (UME) 242*64kB (UME) 60*128kB (UME) 67*256kB (UME) 33*512kB (UME) 27*1024kB (UM) 9*2048kB (UME) 1021*4096kB (UM) = 4293324kB [ 163.635392][T12635] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 163.635409][T12635] 37076 total pagecache pages [ 163.635416][T12635] 2 pages in swap cache [ 163.635422][T12635] Free swap = 124676kB [ 163.635428][T12635] Total swap = 124996kB [ 163.635436][T12635] 2097051 pages RAM [ 163.635442][T12635] 0 pages HighMem/MovableOnly [ 163.635447][T12635] 80172 pages reserved [ 163.671672][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.752381][T12644] loop2: detected capacity change from 0 to 512 [ 163.773186][T12646] macsec1: entered promiscuous mode [ 163.773203][T12646] macvlan0: entered promiscuous mode [ 163.794240][T12644] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2436: casefold flag without casefold feature [ 163.794573][T12644] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2436: couldn't read orphan inode 15 (err -117) [ 163.795259][T12644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.832466][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.927329][T12656] loop2: detected capacity change from 0 to 4096 [ 163.934940][T12656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.976158][T12660] loop3: detected capacity change from 0 to 2048 [ 164.021818][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.099134][T12659] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.708831][T12674] loop2: detected capacity change from 0 to 512 [ 164.717560][ T980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.725129][ T980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.732547][T12674] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2445: casefold flag without casefold feature [ 164.732600][ T980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.732805][ T980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 164.760222][ T980] rtc rtc0: __rtc_set_alarm: err=-22 [ 164.765870][T12674] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2445: couldn't read orphan inode 15 (err -117) [ 164.782530][T12674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.806007][T12678] loop3: detected capacity change from 0 to 4096 [ 164.847293][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.847296][T12678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.850142][T12687] loop1: detected capacity change from 0 to 512 [ 164.882331][T12687] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2451: casefold flag without casefold feature [ 164.901400][T12687] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2451: couldn't read orphan inode 15 (err -117) [ 164.915166][T12687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.918472][T11969] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.942988][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 164.943001][ T29] audit: type=1326 audit(1722259784.543:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ff147299 code=0x7ffc0000 [ 164.972736][ T29] audit: type=1326 audit(1722259784.543:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ff147299 code=0x7ffc0000 [ 164.996257][ T29] audit: type=1326 audit(1722259784.543:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe2ff147299 code=0x7ffc0000 [ 165.019910][ T29] audit: type=1326 audit(1722259784.543:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe2ff1472d3 code=0x7ffc0000 [ 165.043697][ T29] audit: type=1326 audit(1722259784.543:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2ff145e1f code=0x7ffc0000 [ 165.067604][ T29] audit: type=1326 audit(1722259784.543:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe2ff147327 code=0x7ffc0000 [ 165.091173][ T29] audit: type=1326 audit(1722259784.543:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2ff145cd0 code=0x7ffc0000 [ 165.091653][ T9438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.114887][ T29] audit: type=1326 audit(1722259784.543:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2ff146e9b code=0x7ffc0000 [ 165.120758][T12690] loop2: detected capacity change from 0 to 512 [ 165.147491][ T29] audit: type=1326 audit(1722259784.603:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903e717299 code=0x7ffc0000 [ 165.158885][T12695] FAULT_INJECTION: forcing a failure. [ 165.158885][T12695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.190657][T12695] CPU: 1 UID: 0 PID: 12695 Comm: syz.4.2456 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 165.201467][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 165.211614][T12695] Call Trace: [ 165.214963][T12695] [ 165.217905][T12695] dump_stack_lvl+0xf2/0x150 [ 165.222497][T12695] dump_stack+0x15/0x20 [ 165.226759][T12695] should_fail_ex+0x229/0x230 [ 165.231435][T12695] should_fail+0xb/0x10 [ 165.235643][T12695] should_fail_usercopy+0x1a/0x20 [ 165.240749][T12695] _copy_from_user+0x1e/0xd0 [ 165.245389][T12695] ip_tunnel_parm_from_user+0x4c/0x1b0 [ 165.250850][T12695] ip_tunnel_siocdevprivate+0x4e/0x220 [ 165.256473][T12695] ? full_name_hash+0x93/0xe0 [ 165.261142][T12695] ? strcmp+0x21/0x50 [ 165.265175][T12695] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 165.271263][T12695] dev_ifsioc+0x84e/0xa10 [ 165.275597][T12695] dev_ioctl+0x8e9/0xab0 [ 165.279826][T12695] sock_ioctl+0x5c0/0x640 [ 165.284148][T12695] ? __pfx_sock_ioctl+0x10/0x10 [ 165.288991][T12695] __se_sys_ioctl+0xd3/0x150 [ 165.293606][T12695] __x64_sys_ioctl+0x43/0x50 [ 165.298202][T12695] x64_sys_call+0x1688/0x2e00 [ 165.302952][T12695] do_syscall_64+0xc9/0x1c0 [ 165.307450][T12695] ? clear_bhb_loop+0x55/0xb0 [ 165.312124][T12695] ? clear_bhb_loop+0x55/0xb0 [ 165.316895][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.322802][T12695] RIP: 0033:0x7f2089217299 [ 165.327332][T12695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.347013][T12695] RSP: 002b:00007f2087e97048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.356365][T12695] RAX: ffffffffffffffda RBX: 00007f20893a5f80 RCX: 00007f2089217299 [ 165.364325][T12695] RDX: 0000000020000340 RSI: 00000000000089f1 RDI: 0000000000000003 [ 165.372332][T12695] RBP: 00007f2087e970a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.380300][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.388389][T12695] R13: 000000000000000b R14: 00007f20893a5f80 R15: 00007ffc5595c498 [ 165.396356][T12695] [ 165.411755][ T29] audit: type=1326 audit(1722259785.003:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe2ff145fca code=0x7ffc0000 [ 165.455059][T12690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.475878][T12703] loop1: detected capacity change from 0 to 256 [ 165.482404][T12690] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.502475][T12706] loop3: detected capacity change from 0 to 2048 [ 165.521806][T12690] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2452: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 165.532394][T12710] loop4: detected capacity change from 0 to 512 [ 165.541585][T12704] rtc_cmos 00:00: Alarms can be up to one day in the future [ 165.558792][T12690] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 165.568339][T12690] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2452: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 165.590702][T12690] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 165.606050][T12717] loop1: detected capacity change from 0 to 512 [ 165.606380][T12690] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2452: bg 0: block 18: invalid block bitmap [ 165.632105][T12710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.634960][T12690] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2452: Failed to acquire dquot type 1 [ 165.651615][T12710] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.661117][T12714] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2452: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 165.666579][T12717] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2462: casefold flag without casefold feature [ 165.702894][T12714] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 165.702940][T12717] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2462: couldn't read orphan inode 15 (err -117) [ 165.719635][T12714] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2452: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 165.733411][T12723] loop3: detected capacity change from 0 to 4096 [ 165.742690][T12717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.758920][T12714] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 165.768011][T12714] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2452: Failed to acquire dquot type 1 [ 165.780261][T12723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.795293][ T9438] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.810846][T12728] FAULT_INJECTION: forcing a failure. [ 165.810846][T12728] name failslab, interval 1, probability 0, space 0, times 0 [ 165.823799][T12728] CPU: 1 UID: 0 PID: 12728 Comm: syz.1.2464 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 165.825029][T12710] loop4: detected capacity change from 512 to 11 [ 165.834559][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 165.834604][T12728] Call Trace: [ 165.834610][T12728] [ 165.834616][T12728] dump_stack_lvl+0xf2/0x150 [ 165.834663][T12728] dump_stack+0x15/0x20 [ 165.834686][T12728] should_fail_ex+0x229/0x230 [ 165.845414][T12729] EXT4-fs error (device loop4): ext4_write_dquot:6828: comm syz.4.2460: Failed to commit dquot type 0 [ 165.851711][T12728] ? skb_clone+0x154/0x1f0 [ 165.857719][T12729] EXT4-fs error (device loop4): ext4_write_dquot:6828: comm syz.4.2460: Failed to commit dquot type 1 [ 165.857974][T12728] should_failslab+0x8f/0xb0 [ 165.862735][T12729] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 165.866670][T12728] kmem_cache_alloc_noprof+0x4c/0x290 [ 165.866696][T12728] skb_clone+0x154/0x1f0 [ 165.874406][T12729] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #18: comm syz.4.2460: mark_inode_dirty error [ 165.882274][T12728] __netlink_deliver_tap+0x2bd/0x4c0 [ 165.882300][T12728] netlink_unicast+0x641/0x670 [ 165.882320][T12728] netlink_sendmsg+0x5cc/0x6e0 [ 165.889108][T12729] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 165.897604][T12728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.897630][T12728] __sock_sendmsg+0x140/0x180 [ 165.902820][T12729] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #18: comm syz.4.2460: mark_inode_dirty error [ 165.911154][T12728] ____sys_sendmsg+0x312/0x410 [ 165.916745][T12729] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 165.920687][T12728] __sys_sendmsg+0x1e9/0x280 [ 165.932351][T12729] EXT4-fs error (device loop4): ext4_punch_hole:4081: inode #18: comm syz.4.2460: mark_inode_dirty error [ 165.937205][T12728] __x64_sys_sendmsg+0x46/0x50 [ 165.937231][T12728] x64_sys_call+0x26f8/0x2e00 [ 165.937259][T12728] do_syscall_64+0xc9/0x1c0 [ 165.937285][T12728] ? clear_bhb_loop+0x55/0xb0 [ 165.937441][T12728] ? clear_bhb_loop+0x55/0xb0 [ 165.937464][T12728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.937486][T12728] RIP: 0033:0x7f903e717299 [ 165.954414][T11966] syz-executor: attempt to access beyond end of device [ 165.954414][T11966] loop4: rw=12288, sector=12, nr_sectors = 4 limit=11 [ 165.955959][T12728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.073893][T12728] RSP: 002b:00007f903d397048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.082370][T12728] RAX: ffffffffffffffda RBX: 00007f903e8a5f80 RCX: 00007f903e717299 [ 166.090329][T12728] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 166.098281][T12728] RBP: 00007f903d3970a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.106290][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.114241][T12728] R13: 000000000000000b R14: 00007f903e8a5f80 R15: 00007ffecd9be678 [ 166.122195][T12728] [ 166.126479][T11966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.146634][T12720] kmmpd-loop4: attempt to access beyond end of device [ 166.146634][T12720] loop4: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 166.147404][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'. [ 166.160122][T12720] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 166.183191][T11969] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.232295][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.248329][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2470'. [ 166.257456][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 166.295093][T12743] loop2: detected capacity change from 0 to 2048 [ 166.307036][T12742] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.365234][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.372720][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.380633][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.388129][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.395441][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 166.449234][ T3300] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.488747][T12758] loop3: detected capacity change from 0 to 512 [ 166.507344][ T3300] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.516222][T12758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.530438][T12758] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.543209][T12758] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2478: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 166.560475][T12758] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 166.570738][T12758] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2478: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 166.588576][ T3300] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.593888][T12758] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 166.612161][T12758] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2478: bg 0: block 18: invalid block bitmap [ 166.625422][T12758] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2478: Failed to acquire dquot type 1 [ 166.638023][T12773] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2478: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 166.657647][T12773] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 166.671174][ T3300] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.673806][T12773] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2478: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 166.715314][T12773] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 166.724836][T12773] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2478: Failed to acquire dquot type 1 [ 166.739597][T12759] chnl_net:caif_netlink_parms(): no params data found [ 166.764641][T12784] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.801030][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.808146][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.816163][T11969] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.823795][T12759] bridge_slave_0: entered allmulticast mode [ 166.831803][T12759] bridge_slave_0: entered promiscuous mode [ 166.843836][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.851008][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.859629][T12759] bridge_slave_1: entered allmulticast mode [ 166.869436][T12759] bridge_slave_1: entered promiscuous mode [ 166.879092][T12800] loop3: detected capacity change from 0 to 256 [ 166.906593][ T3300] bridge_slave_1: left allmulticast mode [ 166.912267][ T3300] bridge_slave_1: left promiscuous mode [ 166.918127][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.937951][ T3300] bridge_slave_0: left allmulticast mode [ 166.943680][ T3300] bridge_slave_0: left promiscuous mode [ 166.949366][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.962919][T12810] loop3: detected capacity change from 0 to 512 [ 166.977763][T12810] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2485: casefold flag without casefold feature [ 166.990757][T12810] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2485: couldn't read orphan inode 15 (err -117) [ 167.003413][T12810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.051550][T11969] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.070449][T12815] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.086325][ T3300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.097664][ T3300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.107929][ T3300] bond0 (unregistering): Released all slaves [ 167.116905][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.134777][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.155743][T12759] team0: Port device team_slave_0 added [ 167.162637][T12759] team0: Port device team_slave_1 added [ 167.185846][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.193092][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.219315][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.232546][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.239640][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.265673][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.285203][ T3300] hsr_slave_0: left promiscuous mode [ 167.301602][ T3300] hsr_slave_1: left promiscuous mode [ 167.308570][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.309822][T12839] loop3: detected capacity change from 0 to 128 [ 167.316023][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.338724][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.343133][T12842] loop2: detected capacity change from 0 to 1024 [ 167.346292][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.365245][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.372744][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.380284][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.387783][T12842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.387791][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.407559][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 167.417197][ T3300] veth1_macvtap: left promiscuous mode [ 167.422706][ T3300] veth0_macvtap: left promiscuous mode [ 167.428310][ T3300] veth1_vlan: left promiscuous mode [ 167.433642][ T3300] veth0_vlan: left promiscuous mode [ 167.449210][T10193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.458681][T12848] loop3: detected capacity change from 0 to 2048 [ 167.473319][T12847] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.529513][T12852] loop2: detected capacity change from 0 to 2048 [ 167.545898][T12849] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.592103][ T3300] team0 (unregistering): Port device team_slave_1 removed [ 167.602004][ T3300] team0 (unregistering): Port device team_slave_0 removed [ 167.684915][T12866] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.697131][T12868] loop3: detected capacity change from 0 to 256 [ 167.698540][T12759] hsr_slave_0: entered promiscuous mode [ 167.710019][T12759] hsr_slave_1: entered promiscuous mode [ 167.717934][T12759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.725715][T12759] Cannot create hsr debugfs directory [ 167.812054][T12879] loop3: detected capacity change from 0 to 2048 [ 167.826631][T12883] __nla_validate_parse: 1 callbacks suppressed [ 167.826646][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2504'. [ 167.841907][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'. [ 167.852864][T12878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.902502][T12894] loop3: detected capacity change from 0 to 2048 [ 167.953433][T12893] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.170258][T12933] loop3: detected capacity change from 0 to 2048 [ 168.187776][T12936] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.205129][T12759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.222383][T12932] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.230507][T12759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.259238][T12759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.277030][T12759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.284577][T12947] loop3: detected capacity change from 0 to 512 [ 168.325445][T12947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.341117][T12947] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.345022][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.353976][T12947] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2516: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 168.365752][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.380396][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.382317][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.392573][T12947] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 168.396373][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.406546][T12947] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2516: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 168.412691][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.430251][T12947] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 168.436180][ T3335] rtc rtc0: __rtc_set_alarm: err=-22 [ 168.447026][T12947] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2516: bg 0: block 18: invalid block bitmap [ 168.464653][T12947] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2516: Failed to acquire dquot type 1 [ 168.495468][T12759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.505872][T12759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.516157][T12959] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2516: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 168.516257][T12959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 168.516280][T12959] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2516: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 168.516374][T12959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 168.516502][T12959] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2516: Failed to acquire dquot type 1 [ 168.544507][T12966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2519'. [ 168.565736][T12960] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.567439][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2519'. [ 168.646650][T11969] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.660229][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.667372][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.676126][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.683227][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.709308][T12980] loop3: detected capacity change from 0 to 256 [ 168.803417][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.846506][T12995] loop2: detected capacity change from 0 to 2048 [ 168.904660][T12994] rtc_cmos 00:00: Alarms can be up to one day in the future [ 168.914926][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2530'. [ 168.926765][T13006] loop1: detected capacity change from 0 to 4096 [ 168.930225][T13014] loop3: detected capacity change from 0 to 2048 [ 168.959898][T13006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.998547][T13029] loop2: detected capacity change from 0 to 512 [ 169.059886][T13029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.084350][T13036] FAULT_INJECTION: forcing a failure. [ 169.084350][T13036] name failslab, interval 1, probability 0, space 0, times 0 [ 169.097095][T13036] CPU: 1 UID: 0 PID: 13036 Comm: syz.3.2533 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 169.107921][T13036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 169.115032][T13029] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.118031][T13036] Call Trace: [ 169.118040][T13036] [ 169.134854][T13036] dump_stack_lvl+0xf2/0x150 [ 169.139711][T13036] dump_stack+0x15/0x20 [ 169.140156][T12759] veth0_vlan: entered promiscuous mode [ 169.143894][T13036] should_fail_ex+0x229/0x230 [ 169.143922][T13036] ? skb_clone+0x154/0x1f0 [ 169.159014][T13036] should_failslab+0x8f/0xb0 [ 169.163616][T13036] kmem_cache_alloc_noprof+0x4c/0x290 [ 169.169179][T13036] skb_clone+0x154/0x1f0 [ 169.173503][T13036] can_send+0x33f/0x5d0 [ 169.177662][T13036] isotp_sendmsg+0x9ab/0xc00 [ 169.182355][T13036] ? __pfx_isotp_sendmsg+0x10/0x10 [ 169.187466][T13036] __sock_sendmsg+0x140/0x180 [ 169.192236][T13036] ____sys_sendmsg+0x312/0x410 [ 169.197008][T13036] __sys_sendmsg+0x1e9/0x280 [ 169.201626][T13036] __x64_sys_sendmsg+0x46/0x50 [ 169.206387][T13036] x64_sys_call+0x26f8/0x2e00 [ 169.211058][T13036] do_syscall_64+0xc9/0x1c0 [ 169.215645][T13036] ? clear_bhb_loop+0x55/0xb0 [ 169.220317][T13036] ? clear_bhb_loop+0x55/0xb0 [ 169.225019][T13036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.230906][T13036] RIP: 0033:0x7f96b8ef7299 [ 169.235472][T13036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.255466][T13036] RSP: 002b:00007f96b7b77048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.263873][T13036] RAX: ffffffffffffffda RBX: 00007f96b9085f80 RCX: 00007f96b8ef7299 [ 169.271829][T13036] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 169.279829][T13036] RBP: 00007f96b7b770a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.287837][T13036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.295793][T13036] R13: 000000000000000b R14: 00007f96b9085f80 R15: 00007ffe4f18c768 [ 169.303752][T13036] [ 169.306922][T13036] can-isotp: isotp_sendmsg: can_send_ret -ENOMEM [ 169.308036][T12759] veth1_vlan: entered promiscuous mode [ 169.333280][T12759] veth0_macvtap: entered promiscuous mode [ 169.348834][T12759] veth1_macvtap: entered promiscuous mode [ 169.359842][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.370458][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.380316][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.390794][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.397443][T13056] loop3: detected capacity change from 0 to 256 [ 169.400597][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.417301][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.427275][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.438083][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.447962][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.458380][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.468592][ T980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.476566][ T980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.481424][T12759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.484213][ T980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.498700][ T980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.506107][ T980] rtc rtc0: __rtc_set_alarm: err=-22 [ 169.507022][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.521873][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.531792][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.542242][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.552156][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.562737][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.572622][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.583104][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.592973][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.603535][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.616313][T12759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.628527][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2535'. [ 169.637659][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 169.686926][T12759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.695716][T12759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.704521][T12759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.713313][T12759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.802989][T13068] loop4: detected capacity change from 0 to 4096 [ 169.818436][T13076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2540'. [ 169.853428][T13080] loop1: detected capacity change from 0 to 2048 [ 169.877875][T13079] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.880643][T13082] loop2: detected capacity change from 0 to 2048 [ 169.908011][T13086] loop1: detected capacity change from 0 to 512 [ 169.950607][T13086] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.979499][T13084] loop3: detected capacity change from 0 to 4096 [ 169.979738][T13086] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2543: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 170.027236][T13086] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 170.036652][T13086] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2543: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 170.058074][T13086] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 170.067728][T13086] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2543: bg 0: block 18: invalid block bitmap [ 170.081332][T13086] __quota_error: 136 callbacks suppressed [ 170.081344][T13086] Quota error (device loop1): write_blk: dquota write failed [ 170.094659][T13086] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 170.109330][T13086] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2543: Failed to acquire dquot type 1 [ 170.125347][T13099] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2543: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 170.128135][T13090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=151 sclass=netlink_route_socket pid=13090 comm=syz.4.2545 [ 170.164897][T13099] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 170.181500][T13099] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2543: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 170.200542][T13099] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 170.229582][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'. [ 170.240911][T13099] Quota error (device loop1): write_blk: dquota write failed [ 170.258441][T13099] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 170.270682][ T29] audit: type=1326 audit(1722259789.873:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cae7299 code=0x7ffc0000 [ 170.296604][T13116] loop3: detected capacity change from 0 to 2048 [ 170.303073][T13099] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2543: Failed to acquire dquot type 1 [ 170.316624][ T29] audit: type=1326 audit(1722259789.903:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1e6cae7299 code=0x7ffc0000 [ 170.340237][ T29] audit: type=1326 audit(1722259789.903:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cae7299 code=0x7ffc0000 [ 170.363797][ T29] audit: type=1326 audit(1722259789.903:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cae7299 code=0x7ffc0000 [ 170.373926][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.387398][ T29] audit: type=1326 audit(1722259789.903:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e6cae7299 code=0x7ffc0000 [ 170.395059][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.418263][ T29] audit: type=1326 audit(1722259789.903:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.0.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cae7299 code=0x7ffc0000 [ 170.449559][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.457163][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.464510][ T3335] rtc rtc0: __rtc_set_alarm: err=-22 [ 170.472099][T13115] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.477556][T13120] loop4: detected capacity change from 0 to 4096 [ 170.521179][T13124] loop3: detected capacity change from 0 to 2048 [ 170.601197][T13133] loop4: detected capacity change from 0 to 4096 [ 170.645784][T13137] loop1: detected capacity change from 0 to 512 [ 170.677373][T13137] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.776815][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 170.803041][T13150] loop4: detected capacity change from 0 to 512 [ 170.811354][T13150] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.820540][T13150] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 170.829487][T13150] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 170.837517][T13150] System zones: 0-2, 18-18, 34-34 [ 170.842857][T13150] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 170.857915][T13150] EXT4-fs (loop4): 1 truncate cleaned up [ 171.364955][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.372591][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.380121][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.387636][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 171.394997][ T3335] rtc rtc0: __rtc_set_alarm: err=-22 [ 171.412606][T13161] loop2: detected capacity change from 0 to 512 [ 171.436541][T13161] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.443256][T13163] loop3: detected capacity change from 0 to 4096 [ 171.450951][T13161] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2568: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 171.471480][T13161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.484837][T13161] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2568: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 171.502860][T13161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.514412][T13161] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2568: bg 0: block 18: invalid block bitmap [ 171.535960][T13161] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2568: Failed to acquire dquot type 1 [ 171.538016][T13169] loop1: detected capacity change from 0 to 256 [ 171.554533][T13167] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2568: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 171.573213][T13167] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.597631][T13167] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2568: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 171.629238][T13167] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.633654][T13173] loop1: detected capacity change from 0 to 512 [ 171.645091][T13167] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2568: Failed to acquire dquot type 1 [ 171.669613][T13173] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2572: casefold flag without casefold feature [ 171.685239][T13173] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2572: couldn't read orphan inode 15 (err -117) [ 172.499269][T13203] loop3: detected capacity change from 0 to 4096 [ 172.609237][T13211] loop3: detected capacity change from 0 to 512 [ 172.616503][T13211] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.625660][T13211] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 172.635078][T13211] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 172.643987][T13211] System zones: 0-2, 18-18, 34-34 [ 172.649489][T13211] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 172.664229][T13211] EXT4-fs (loop3): 1 truncate cleaned up [ 172.729454][T13218] loop4: detected capacity change from 0 to 512 [ 172.751357][T13218] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2585: casefold flag without casefold feature [ 172.765696][T13218] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2585: couldn't read orphan inode 15 (err -117) [ 172.874757][T13230] loop4: detected capacity change from 0 to 4096 [ 172.903928][T13234] loop1: detected capacity change from 0 to 4096 [ 173.458675][T13251] loop3: detected capacity change from 0 to 512 [ 173.469047][T13251] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2597: casefold flag without casefold feature [ 173.482136][T13251] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2597: couldn't read orphan inode 15 (err -117) [ 173.528495][T13254] __nla_validate_parse: 2 callbacks suppressed [ 173.528508][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2598'. [ 173.567775][T13258] loop3: detected capacity change from 0 to 512 [ 173.575835][T13258] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2600: casefold flag without casefold feature [ 173.588772][T13258] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2600: couldn't read orphan inode 15 (err -117) [ 173.826031][T13269] loop4: detected capacity change from 0 to 4096 [ 173.931769][T13279] loop4: detected capacity change from 0 to 4096 [ 173.953705][T13284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2609'. [ 173.975641][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2610'. [ 174.005068][T13288] loop4: detected capacity change from 0 to 512 [ 174.012864][T13288] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2611: casefold flag without casefold feature [ 174.026543][T13288] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2611: couldn't read orphan inode 15 (err -117) [ 174.064313][T13295] loop4: detected capacity change from 0 to 512 [ 174.072040][T13295] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2613: casefold flag without casefold feature [ 174.085102][T13295] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2613: couldn't read orphan inode 15 (err -117) [ 174.180801][T13303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13303 comm=syz.0.2615 [ 174.194866][T13303] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2615'. [ 174.575857][T13316] loop3: detected capacity change from 0 to 2048 [ 174.674027][T13326] loop3: detected capacity change from 0 to 4096 [ 174.744540][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 174.765147][T13331] FAULT_INJECTION: forcing a failure. [ 174.765147][T13331] name failslab, interval 1, probability 0, space 0, times 0 [ 174.777977][T13331] CPU: 1 UID: 0 PID: 13331 Comm: syz.3.2623 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 174.788780][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 174.798864][T13331] Call Trace: [ 174.802124][T13331] [ 174.805080][T13331] dump_stack_lvl+0xf2/0x150 [ 174.809671][T13331] dump_stack+0x15/0x20 [ 174.813811][T13331] should_fail_ex+0x229/0x230 [ 174.818536][T13331] ? rtnl_newlink+0x5d/0x1690 [ 174.823343][T13331] should_failslab+0x8f/0xb0 [ 174.827921][T13331] __kmalloc_cache_noprof+0x4b/0x2a0 [ 174.833314][T13331] rtnl_newlink+0x5d/0x1690 [ 174.837858][T13331] ? xa_load+0xb9/0xe0 [ 174.841913][T13331] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 174.847412][T13331] ? __rcu_read_unlock+0x4e/0x70 [ 174.852329][T13331] ? avc_has_perm_noaudit+0x1cc/0x210 [ 174.857768][T13331] ? selinux_capable+0x1f2/0x260 [ 174.862690][T13331] ? security_capable+0x64/0x80 [ 174.867583][T13331] ? ns_capable+0x7d/0xb0 [ 174.871932][T13331] ? __pfx_rtnl_newlink+0x10/0x10 [ 174.877087][T13331] rtnetlink_rcv_msg+0x6aa/0x710 [ 174.882008][T13331] ? ref_tracker_free+0x3a5/0x410 [ 174.887022][T13331] ? __dev_queue_xmit+0x161/0x1fe0 [ 174.892126][T13331] netlink_rcv_skb+0x12c/0x230 [ 174.896876][T13331] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.902336][T13331] rtnetlink_rcv+0x1c/0x30 [ 174.906748][T13331] netlink_unicast+0x593/0x670 [ 174.911495][T13331] netlink_sendmsg+0x5cc/0x6e0 [ 174.916428][T13331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.921777][T13331] __sock_sendmsg+0x140/0x180 [ 174.926488][T13331] ____sys_sendmsg+0x312/0x410 [ 174.931255][T13331] __sys_sendmsg+0x1e9/0x280 [ 174.935848][T13331] __x64_sys_sendmsg+0x46/0x50 [ 174.940664][T13331] x64_sys_call+0x26f8/0x2e00 [ 174.945325][T13331] do_syscall_64+0xc9/0x1c0 [ 174.949907][T13331] ? clear_bhb_loop+0x55/0xb0 [ 174.954580][T13331] ? clear_bhb_loop+0x55/0xb0 [ 174.959265][T13331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.965283][T13331] RIP: 0033:0x7f96b8ef7299 [ 174.969688][T13331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.989413][T13331] RSP: 002b:00007f96b7b77048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.997814][T13331] RAX: ffffffffffffffda RBX: 00007f96b9085f80 RCX: 00007f96b8ef7299 [ 175.005776][T13331] RDX: 0000000000000000 RSI: 0000000020001240 RDI: 0000000000000003 [ 175.013822][T13331] RBP: 00007f96b7b770a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.021788][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.029755][T13331] R13: 000000000000000b R14: 00007f96b9085f80 R15: 00007ffe4f18c768 [ 175.037912][T13331] [ 175.060637][T13334] loop4: detected capacity change from 0 to 512 [ 175.068636][T13334] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2624: casefold flag without casefold feature [ 175.087050][T13334] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2624: couldn't read orphan inode 15 (err -117) [ 175.094468][T13338] loop3: detected capacity change from 0 to 512 [ 175.108799][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 175.108811][ T29] audit: type=1400 audit(1722259794.713:2795): avc: denied { watch } for pid=13339 comm="syz.0.2627" path="/70/control" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 175.117545][T13338] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2626: casefold flag without casefold feature [ 175.151010][T13338] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2626: couldn't read orphan inode 15 (err -117) [ 175.181261][ T29] audit: type=1326 audit(1722259794.783:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf1667299 code=0x7ffc0000 [ 175.207522][ T29] audit: type=1326 audit(1722259794.813:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf1667299 code=0x7ffc0000 [ 175.220478][T13347] syzkaller1: entered promiscuous mode [ 175.236643][T13347] syzkaller1: entered allmulticast mode [ 175.265347][T13350] loop4: detected capacity change from 0 to 512 [ 175.272238][ T29] audit: type=1400 audit(1722259794.873:2798): avc: denied { setopt } for pid=13349 comm="syz.4.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.301586][T13350] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 175.301611][T13350] EXT4-fs: failed to create workqueue [ 175.316625][T13350] EXT4-fs (loop4): mount failed [ 175.357598][T13359] loop3: detected capacity change from 0 to 4096 [ 175.426502][ T29] audit: type=1400 audit(1722259795.033:2799): avc: denied { create } for pid=13366 comm="syz.3.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.497900][T13372] FAULT_INJECTION: forcing a failure. [ 175.497900][T13372] name failslab, interval 1, probability 0, space 0, times 0 [ 175.510622][T13372] CPU: 1 UID: 0 PID: 13372 Comm: syz.3.2637 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 175.521375][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 175.531493][T13372] Call Trace: [ 175.534753][T13372] [ 175.537663][T13372] dump_stack_lvl+0xf2/0x150 [ 175.542325][T13372] dump_stack+0x15/0x20 [ 175.546463][T13372] should_fail_ex+0x229/0x230 [ 175.551156][T13372] ? percpu_ref_init+0x96/0x240 [ 175.555985][T13372] should_failslab+0x8f/0xb0 [ 175.560638][T13372] __kmalloc_cache_noprof+0x4b/0x2a0 [ 175.565985][T13372] ? __pfx_free_ioctx_users+0x10/0x10 [ 175.571426][T13372] percpu_ref_init+0x96/0x240 [ 175.576120][T13372] ioctx_alloc+0x1b8/0x4c0 [ 175.580526][T13372] __se_sys_io_setup+0x6b/0x1b0 [ 175.585372][T13372] __x64_sys_io_setup+0x31/0x40 [ 175.590292][T13372] x64_sys_call+0x2b30/0x2e00 [ 175.594955][T13372] do_syscall_64+0xc9/0x1c0 [ 175.599468][T13372] ? clear_bhb_loop+0x55/0xb0 [ 175.604198][T13372] ? clear_bhb_loop+0x55/0xb0 [ 175.608921][T13372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.614804][T13372] RIP: 0033:0x7f96b8ef7299 [ 175.619222][T13372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.638815][T13372] RSP: 002b:00007f96b7b77048 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 175.647824][T13372] RAX: ffffffffffffffda RBX: 00007f96b9085f80 RCX: 00007f96b8ef7299 [ 175.655988][T13372] RDX: 0000000000000000 RSI: 0000000020003300 RDI: 0000000000000005 [ 175.663967][T13372] RBP: 00007f96b7b770a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.671938][T13372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.679924][T13372] R13: 000000000000000b R14: 00007f96b9085f80 R15: 00007ffe4f18c768 [ 175.688057][T13372] [ 175.709510][ T29] audit: type=1326 audit(1722259795.313:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13373 comm="syz.3.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 175.714720][T13374] loop3: detected capacity change from 0 to 512 [ 175.734562][ T29] audit: type=1326 audit(1722259795.313:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13373 comm="syz.3.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 175.762877][ T29] audit: type=1326 audit(1722259795.313:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13373 comm="syz.3.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 175.786409][ T29] audit: type=1326 audit(1722259795.313:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13373 comm="syz.3.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96b8ef72d3 code=0x7ffc0000 [ 175.796082][T13374] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.809753][ T29] audit: type=1326 audit(1722259795.313:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13373 comm="syz.3.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f96b8ef5e1f code=0x7ffc0000 [ 175.832549][T13374] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2638: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 175.859979][T13374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 175.869289][T13374] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2638: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 175.885834][T13374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 175.895447][T13374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2638: bg 0: block 18: invalid block bitmap [ 175.908223][T13374] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2638: Failed to acquire dquot type 1 [ 175.919929][T13377] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2638: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 175.937656][T13377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 175.946721][T13377] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2638: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 175.963257][T13377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 175.972403][T13377] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2638: Failed to acquire dquot type 1 [ 176.012993][T13381] loop1: detected capacity change from 0 to 512 [ 176.031032][T13381] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2640: casefold flag without casefold feature [ 176.044132][T13381] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2640: couldn't read orphan inode 15 (err -117) [ 176.090809][T13388] loop1: detected capacity change from 0 to 512 [ 176.103597][T13388] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 176.111889][T13388] EXT4-fs error (device loop1): ext4_get_journal_inode:5740: comm syz.1.2643: inode #67108864: comm syz.1.2643: iget: illegal inode # [ 176.126160][T13388] EXT4-fs (loop1): no journal found [ 176.135578][T13388] loop1: detected capacity change from 0 to 512 [ 176.146844][T13388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 176.155592][T13388] EXT4-fs (loop1): orphan cleanup on readonly fs [ 176.165705][T13388] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 176.183216][T13388] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 176.190275][T13388] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.2643: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 176.218673][T13388] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2643: couldn't read orphan inode 13 (err -117) [ 176.229610][T13393] loop3: detected capacity change from 0 to 4096 [ 176.303407][T13402] loop1: detected capacity change from 0 to 512 [ 176.324216][ C0] eth0: bad gso: type: 1, size: 1408 [ 176.328618][T13402] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 176.342480][ C0] eth0: bad gso: type: 1, size: 1408 [ 176.565436][T13416] loop1: detected capacity change from 0 to 512 [ 176.574787][T13416] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2654: casefold flag without casefold feature [ 176.589292][T13419] loop3: detected capacity change from 0 to 164 [ 176.597011][T13418] loop4: detected capacity change from 0 to 256 [ 176.604490][T13416] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2654: couldn't read orphan inode 15 (err -117) [ 176.621848][T13419] iso9660: Unknown parameter '1844674407370955161500000000000000000000265' [ 177.196944][T13440] loop1: detected capacity change from 0 to 512 [ 177.246243][T13445] loop3: detected capacity change from 0 to 512 [ 177.246434][T13440] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.253816][T13445] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2663: casefold flag without casefold feature [ 177.276354][T13445] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2663: couldn't read orphan inode 15 (err -117) [ 177.276558][T13440] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2660: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 177.305106][T13440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 177.315013][T13440] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2660: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 177.331560][T13440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 177.342507][T13440] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2660: bg 0: block 18: invalid block bitmap [ 177.355630][T13440] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2660: Failed to acquire dquot type 1 [ 177.366071][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 177.373610][T13449] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2660: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 177.393424][T13449] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 177.403412][T13449] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2660: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 177.421388][T13449] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 177.431247][T13453] FAULT_INJECTION: forcing a failure. [ 177.431247][T13453] name failslab, interval 1, probability 0, space 0, times 0 [ 177.433001][T13449] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2660: Failed to acquire dquot type 1 [ 177.443881][T13453] CPU: 1 UID: 0 PID: 13453 Comm: syz.3.2665 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 177.465825][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.475975][T13453] Call Trace: [ 177.479250][T13453] [ 177.482164][T13453] dump_stack_lvl+0xf2/0x150 [ 177.486800][T13453] dump_stack+0x15/0x20 [ 177.491103][T13453] should_fail_ex+0x229/0x230 [ 177.495883][T13453] ? audit_log_start+0x34c/0x6b0 [ 177.500807][T13453] should_failslab+0x8f/0xb0 [ 177.505515][T13453] kmem_cache_alloc_noprof+0x4c/0x290 [ 177.510971][T13453] audit_log_start+0x34c/0x6b0 [ 177.515721][T13453] ? __bpf_prog_run32+0x74/0xa0 [ 177.520564][T13453] audit_seccomp+0x4b/0x130 [ 177.525124][T13453] __seccomp_filter+0x6fa/0x1180 [ 177.530069][T13453] __secure_computing+0x9f/0x1c0 [ 177.535000][T13453] syscall_trace_enter+0xd1/0x1f0 [ 177.540072][T13453] do_syscall_64+0xaa/0x1c0 [ 177.544606][T13453] ? clear_bhb_loop+0x55/0xb0 [ 177.549290][T13453] ? clear_bhb_loop+0x55/0xb0 [ 177.554110][T13453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.560340][T13453] RIP: 0033:0x7f96b8ef5d7c [ 177.564758][T13453] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 177.584436][T13453] RSP: 002b:00007f96b7b77040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.592845][T13453] RAX: ffffffffffffffda RBX: 00007f96b9085f80 RCX: 00007f96b8ef5d7c [ 177.600865][T13453] RDX: 000000000000000f RSI: 00007f96b7b770b0 RDI: 0000000000000004 [ 177.608831][T13453] RBP: 00007f96b7b770a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.616852][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.625000][T13453] R13: 000000000000000b R14: 00007f96b9085f80 R15: 00007ffe4f18c768 [ 177.632967][T13453] [ 177.737917][T13463] FAULT_INJECTION: forcing a failure. [ 177.737917][T13463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.747690][T13461] loop3: detected capacity change from 0 to 4096 [ 177.751117][T13463] CPU: 1 UID: 0 PID: 13463 Comm: syz.4.2670 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 177.768088][T13463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.778165][T13463] Call Trace: [ 177.781483][T13463] [ 177.784402][T13463] dump_stack_lvl+0xf2/0x150 [ 177.789175][T13463] dump_stack+0x15/0x20 [ 177.793405][T13463] should_fail_ex+0x229/0x230 [ 177.798092][T13463] should_fail+0xb/0x10 [ 177.802809][T13463] should_fail_usercopy+0x1a/0x20 [ 177.807854][T13463] _copy_to_user+0x1e/0xa0 [ 177.812350][T13463] simple_read_from_buffer+0xa0/0x110 [ 177.817733][T13463] proc_fail_nth_read+0xfc/0x140 [ 177.822752][T13463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.828312][T13463] vfs_read+0x1a2/0x6e0 [ 177.832518][T13463] ? __rcu_read_unlock+0x4e/0x70 [ 177.837445][T13463] ? __fget_files+0x1da/0x210 [ 177.842184][T13463] ksys_read+0xeb/0x1b0 [ 177.846363][T13463] __x64_sys_read+0x42/0x50 [ 177.850888][T13463] x64_sys_call+0x2a36/0x2e00 [ 177.855601][T13463] do_syscall_64+0xc9/0x1c0 [ 177.860142][T13463] ? clear_bhb_loop+0x55/0xb0 [ 177.864809][T13463] ? clear_bhb_loop+0x55/0xb0 [ 177.869545][T13463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.875485][T13463] RIP: 0033:0x7fdaf1665d7c [ 177.879962][T13463] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 177.899708][T13463] RSP: 002b:00007fdaf02e7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.908151][T13463] RAX: ffffffffffffffda RBX: 00007fdaf17f5f80 RCX: 00007fdaf1665d7c [ 177.916114][T13463] RDX: 000000000000000f RSI: 00007fdaf02e70b0 RDI: 0000000000000006 [ 177.924121][T13463] RBP: 00007fdaf02e70a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.932074][T13463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.940029][T13463] R13: 000000000000000b R14: 00007fdaf17f5f80 R15: 00007ffe816de5d8 [ 177.948173][T13463] [ 177.991191][T13467] 9pnet_fd: Insufficient options for proto=fd [ 178.041685][T13475] loop1: detected capacity change from 0 to 512 [ 178.052843][T13475] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2674: casefold flag without casefold feature [ 178.067345][T13475] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2674: couldn't read orphan inode 15 (err -117) [ 178.108901][T13480] loop1: detected capacity change from 0 to 256 [ 178.233859][T13486] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.435929][T13493] loop4: detected capacity change from 0 to 512 [ 178.443676][T13493] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2679: casefold flag without casefold feature [ 178.456635][T13493] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2679: couldn't read orphan inode 15 (err -117) [ 178.456675][T13485] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.549550][T13496] loop4: detected capacity change from 0 to 8192 [ 178.564907][T13496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=13496 comm=syz.4.2680 [ 178.604455][T13501] loop4: detected capacity change from 0 to 512 [ 178.615792][T13501] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.628083][T13501] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2682: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 178.644804][T13501] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 178.655168][T13501] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2682: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 178.671844][T13501] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 178.681280][T13486] FAULT_INJECTION: forcing a failure. [ 178.681280][T13486] name fail_futex, interval 1, probability 0, space 0, times 0 [ 178.681746][T13501] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2682: bg 0: block 18: invalid block bitmap [ 178.694164][T13486] CPU: 0 UID: 0 PID: 13486 Comm: syz.1.2678 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 178.707212][T13501] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2682: Failed to acquire dquot type 1 [ 178.717162][T13486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 178.717183][T13486] Call Trace: [ 178.730272][T13504] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2682: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 178.738474][T13486] [ 178.738484][T13486] dump_stack_lvl+0xf2/0x150 [ 178.738515][T13486] dump_stack+0x15/0x20 [ 178.742945][T13504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 178.758046][T13486] should_fail_ex+0x229/0x230 [ 178.783420][T13486] should_fail+0xb/0x10 [ 178.787574][T13486] get_futex_key+0xf4/0x710 [ 178.792223][T13486] futex_wake+0x7d/0x330 [ 178.796529][T13486] do_futex+0x2ab/0x370 [ 178.800697][T13486] mm_release+0xb7/0x1e0 [ 178.804943][T13486] exit_mm_release+0x25/0x30 [ 178.810949][T13486] exit_mm+0x38/0x190 [ 178.815026][T13486] do_exit+0x55e/0x1720 [ 178.819203][T13486] do_group_exit+0x102/0x150 [ 178.823794][T13486] ? get_signal+0xf27/0x1080 [ 178.828437][T13486] get_signal+0xf2f/0x1080 [ 178.832847][T13486] ? selinux_file_ioctl+0x2f7/0x380 [ 178.838041][T13486] arch_do_signal_or_restart+0x95/0x4b0 [ 178.843706][T13486] syscall_exit_to_user_mode+0x59/0x130 [ 178.849307][T13486] do_syscall_64+0xd6/0x1c0 [ 178.853822][T13486] ? clear_bhb_loop+0x55/0xb0 [ 178.858495][T13486] ? clear_bhb_loop+0x55/0xb0 [ 178.863267][T13486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.869190][T13486] RIP: 0033:0x7f903e717299 [ 178.873591][T13486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.893278][T13486] RSP: 002b:00007f903d376048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.901678][T13486] RAX: ffffffffffffffea RBX: 00007f903e8a6058 RCX: 00007f903e717299 [ 178.909716][T13486] RDX: 00000000200000c0 RSI: 0000000080045519 RDI: 0000000000000009 [ 178.917830][T13486] RBP: 00007f903d3760a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.925880][T13486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.933837][T13486] R13: 000000000000006e R14: 00007f903e8a6058 R15: 00007ffecd9be678 [ 178.941920][T13486] [ 178.948085][T13504] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2682: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 178.966321][T13504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 178.975535][T13504] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2682: Failed to acquire dquot type 1 [ 179.044833][T13507] loop1: detected capacity change from 0 to 4096 [ 179.066902][T13511] FAULT_INJECTION: forcing a failure. [ 179.066902][T13511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.080088][T13511] CPU: 1 UID: 0 PID: 13511 Comm: syz.3.2684 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 179.090905][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 179.100998][T13511] Call Trace: [ 179.104257][T13511] [ 179.107175][T13511] dump_stack_lvl+0xf2/0x150 [ 179.111752][T13511] dump_stack+0x15/0x20 [ 179.115911][T13511] should_fail_ex+0x229/0x230 [ 179.120570][T13511] should_fail+0xb/0x10 [ 179.124781][T13511] should_fail_usercopy+0x1a/0x20 [ 179.129819][T13511] _copy_from_user+0x1e/0xd0 [ 179.136543][T13511] copy_msghdr_from_user+0x54/0x2a0 [ 179.141784][T13511] do_recvmmsg+0x290/0x720 [ 179.146351][T13511] __x64_sys_recvmmsg+0xe2/0x170 [ 179.151454][T13511] x64_sys_call+0x1b8b/0x2e00 [ 179.156131][T13511] do_syscall_64+0xc9/0x1c0 [ 179.160633][T13511] ? clear_bhb_loop+0x55/0xb0 [ 179.165317][T13511] ? clear_bhb_loop+0x55/0xb0 [ 179.170070][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.175972][T13511] RIP: 0033:0x7f96b8ef7299 [ 179.180401][T13511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.199994][T13511] RSP: 002b:00007f96b7b77048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 179.208620][T13511] RAX: ffffffffffffffda RBX: 00007f96b9085f80 RCX: 00007f96b8ef7299 [ 179.216687][T13511] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000007 [ 179.224669][T13511] RBP: 00007f96b7b770a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.232697][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.240725][T13511] R13: 000000000000000b R14: 00007f96b9085f80 R15: 00007ffe4f18c768 [ 179.248745][T13511] [ 179.278743][T13516] loop3: detected capacity change from 0 to 512 [ 179.286241][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.299223][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.305620][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.313237][ C0] eth0: bad gso: type: 1, size: 1408 [ 179.313434][T13516] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.320108][T13521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2689'. [ 179.329654][T13518] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 179.342022][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 179.359532][T13518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 179.385719][T13525] loop4: detected capacity change from 0 to 512 [ 179.395040][T13525] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2690: casefold flag without casefold feature [ 179.407831][T13525] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2690: couldn't read orphan inode 15 (err -117) [ 179.423217][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.430166][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.437670][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.448542][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.456942][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.464384][T13518] wg0 speed is unknown, defaulting to 1000 [ 179.486157][T13533] loop4: detected capacity change from 0 to 2048 [ 179.504905][T13532] rtc_cmos 00:00: Alarms can be up to one day in the future [ 179.525294][T13537] loop1: detected capacity change from 0 to 128 [ 179.587222][T13543] loop4: detected capacity change from 0 to 128 [ 179.627885][T13545] loop4: detected capacity change from 0 to 512 [ 179.630546][T13535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=13535 comm=syz.0.2693 [ 179.636623][T13545] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2698: casefold flag without casefold feature [ 179.671061][T13545] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2698: couldn't read orphan inode 15 (err -117) [ 179.701234][T13548] loop1: detected capacity change from 0 to 4096 [ 179.739057][T13553] loop4: detected capacity change from 0 to 512 [ 179.760851][T13553] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.762883][T13557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2702'. [ 179.775860][T13553] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2701: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 179.780316][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 179.811848][T13553] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 179.820940][T13553] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2701: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 179.838870][T13553] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 179.848932][T13553] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2701: bg 0: block 18: invalid block bitmap [ 179.862207][ C0] eth0: bad gso: type: 1, size: 1408 [ 179.863074][T13553] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2701: Failed to acquire dquot type 1 [ 179.879446][T13560] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2701: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 179.896238][T13560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 179.906900][T13560] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.2701: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 179.924232][T13560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 179.933321][T13560] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2701: Failed to acquire dquot type 1 [ 180.018832][T13570] loop1: detected capacity change from 0 to 2048 [ 180.032717][T13569] rtc_cmos 00:00: Alarms can be up to one day in the future [ 180.118212][T13582] loop1: detected capacity change from 0 to 512 [ 180.126002][T13582] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2711: casefold flag without casefold feature [ 180.139210][T13582] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2711: couldn't read orphan inode 15 (err -117) [ 180.165482][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 180.165496][ T29] audit: type=1326 audit(1722259799.773:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903e717299 code=0x7ffc0000 [ 180.170163][T13587] FAULT_INJECTION: forcing a failure. [ 180.170163][T13587] name failslab, interval 1, probability 0, space 0, times 0 [ 180.207868][T13587] CPU: 0 UID: 0 PID: 13587 Comm: syz.3.2712 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 180.207813][ T29] audit: type=1326 audit(1722259799.813:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903e717299 code=0x7ffc0000 [ 180.242065][T13587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 180.252405][T13587] Call Trace: [ 180.255685][T13587] [ 180.258641][T13587] dump_stack_lvl+0xf2/0x150 [ 180.263242][T13587] dump_stack+0x15/0x20 [ 180.267434][T13587] should_fail_ex+0x229/0x230 [ 180.272167][T13587] ? shmem_alloc_inode+0x34/0x50 [ 180.277101][T13587] should_failslab+0x8f/0xb0 [ 180.281766][T13587] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 180.287495][T13587] shmem_alloc_inode+0x34/0x50 [ 180.292262][T13587] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 180.297771][T13587] alloc_inode+0x3c/0x160 [ 180.302092][T13587] new_inode+0x1e/0x100 [ 180.306245][T13587] shmem_get_inode+0x258/0x740 [ 180.311098][T13587] __shmem_file_setup+0x127/0x1f0 [ 180.316117][T13587] shmem_file_setup+0x3b/0x50 [ 180.320850][T13587] __se_sys_memfd_create+0x31d/0x600 [ 180.326170][T13587] __x64_sys_memfd_create+0x31/0x40 [ 180.331374][T13587] x64_sys_call+0x1163/0x2e00 [ 180.336275][T13587] do_syscall_64+0xc9/0x1c0 [ 180.340808][T13587] ? clear_bhb_loop+0x55/0xb0 [ 180.345477][T13587] ? clear_bhb_loop+0x55/0xb0 [ 180.350147][T13587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.356062][T13587] RIP: 0033:0x7f96b8ef7299 [ 180.360464][T13587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.380063][T13587] RSP: 002b:00007f96b7b76e28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 180.388542][T13587] RAX: ffffffffffffffda RBX: 0000000000000452 RCX: 00007f96b8ef7299 [ 180.396570][T13587] RDX: 00007f96b7b76f00 RSI: 0000000000000000 RDI: 00007f96b8f65094 [ 180.404596][T13587] RBP: 0000000020000480 R08: 00007f96b7b76bc7 R09: 00007f96b7b76e50 [ 180.412554][T13587] R10: 000000000000000a R11: 0000000000000206 R12: 00000000200000c0 [ 180.420512][T13587] R13: 00007f96b7b76f00 R14: 00007f96b7b76ec0 R15: 0000000020000940 [ 180.428476][T13587] [ 180.432379][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 180.439865][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 180.447435][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 180.455293][ T3335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 180.462738][ T3335] rtc rtc0: __rtc_set_alarm: err=-22 [ 180.490904][T13593] loop1: detected capacity change from 0 to 512 [ 180.507806][T13593] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.577960][T13603] loop4: detected capacity change from 0 to 2048 [ 180.600679][T13602] rtc_cmos 00:00: Alarms can be up to one day in the future [ 180.613518][T13606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2716'. [ 180.622514][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'. [ 180.636951][T13610] loop3: detected capacity change from 0 to 512 [ 180.650365][ T29] audit: type=1400 audit(1722259800.253:3023): avc: denied { name_bind } for pid=13608 comm="syz.4.2720" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 180.676256][T13610] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2719: casefold flag without casefold feature [ 180.691593][T13610] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2719: couldn't read orphan inode 15 (err -117) [ 180.738895][ T29] audit: type=1400 audit(1722259800.343:3024): avc: denied { shutdown } for pid=13608 comm="syz.4.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.789494][T13620] loop4: detected capacity change from 0 to 256 [ 180.809718][T13622] loop3: detected capacity change from 0 to 512 [ 180.829432][T13622] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2724: casefold flag without casefold feature [ 180.844556][T13626] wg0 speed is unknown, defaulting to 1000 [ 180.855772][T13622] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2724: couldn't read orphan inode 15 (err -117) [ 180.888435][ T29] audit: type=1326 audit(1722259800.493:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 180.890579][T13626] ipt_ECN: cannot use operation on non-tcp rule [ 180.911962][ T29] audit: type=1326 audit(1722259800.493:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.3.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b8ef7299 code=0x7ffc0000 [ 180.949967][T13626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2725'. [ 180.974103][T13638] loop3: detected capacity change from 0 to 512 [ 180.980978][ T29] audit: type=1400 audit(1722259800.583:3027): avc: denied { read } for pid=13625 comm="syz.1.2725" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.983618][T13638] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.013247][T13638] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 181.021262][ T29] audit: type=1400 audit(1722259800.583:3028): avc: denied { open } for pid=13625 comm="syz.1.2725" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.034081][T13638] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 181.045104][ T29] audit: type=1400 audit(1722259800.583:3029): avc: denied { ioctl } for pid=13625 comm="syz.1.2725" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.048421][T13640] loop4: detected capacity change from 0 to 2048 [ 181.056134][T13638] System zones: 0-2, 18-18, 34-34 [ 181.097292][T13643] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.105368][ T29] audit: type=1400 audit(1722259800.703:3030): avc: denied { read } for pid=13642 comm="syz.1.2731" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 181.113496][T13639] rtc_cmos 00:00: Alarms can be up to one day in the future [ 181.135454][T13638] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.171705][T13638] EXT4-fs (loop3): 1 truncate cleaned up [ 181.183038][T13650] loop4: detected capacity change from 0 to 1024 [ 181.245074][T13657] loop4: detected capacity change from 0 to 512 [ 181.254053][T13657] EXT4-fs (loop4): unable to read superblock [ 181.343342][T13670] loop1: detected capacity change from 0 to 512 [ 181.351186][T13670] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2739: casefold flag without casefold feature [ 181.363928][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 181.364128][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 181.372030][T13670] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2739: couldn't read orphan inode 15 (err -117) [ 181.379093][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 181.398410][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 181.405855][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 181.524584][T13684] rtc_cmos 00:00: Alarms can be up to one day in the future [ 181.638966][T13697] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 181.660378][T13699] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.820331][T13703] loop3: detected capacity change from 0 to 512 [ 181.829221][T13703] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2750: casefold flag without casefold feature [ 181.842211][T13703] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2750: couldn't read orphan inode 15 (err -117) [ 181.927753][T13712] loop3: detected capacity change from 0 to 512 [ 181.937540][T13712] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.946656][T13712] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 181.955499][T13712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 181.964189][T13712] System zones: 0-2, 18-18, 34-34 [ 181.969518][T13712] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.984271][T13712] EXT4-fs (loop3): 1 truncate cleaned up [ 182.095768][T13717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2755'. [ 182.099218][T13719] loop4: detected capacity change from 0 to 2048 [ 182.119759][T13718] rtc_cmos 00:00: Alarms can be up to one day in the future [ 182.161500][T13723] loop4: detected capacity change from 0 to 4096 [ 182.226766][T13728] wg0 speed is unknown, defaulting to 1000 [ 182.262916][T13728] ipt_ECN: cannot use operation on non-tcp rule [ 182.271935][T13728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2759'. [ 182.288691][T13732] loop4: detected capacity change from 0 to 512 [ 182.302666][T13732] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2761: casefold flag without casefold feature [ 182.317030][T13732] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2761: couldn't read orphan inode 15 (err -117) [ 182.363839][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 182.371365][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 182.378991][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 182.386506][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 182.393866][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 182.435595][T13743] SELinux: security_context_str_to_sid (N:ُB GړbEkc{'\x.p0Txb\< JF) failed with errno=-22 [ 182.449088][T13745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2766'. [ 182.502405][T13747] loop4: detected capacity change from 0 to 2048 [ 182.515252][T13746] rtc_cmos 00:00: Alarms can be up to one day in the future [ 182.540719][T13750] FAULT_INJECTION: forcing a failure. [ 182.540719][T13750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.554028][T13750] CPU: 0 UID: 0 PID: 13750 Comm: syz.4.2768 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 182.564802][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 182.564815][T13750] Call Trace: [ 182.564822][T13750] [ 182.564828][T13750] dump_stack_lvl+0xf2/0x150 [ 182.564938][T13750] dump_stack+0x15/0x20 [ 182.589851][T13750] should_fail_ex+0x229/0x230 [ 182.589899][T13750] should_fail+0xb/0x10 [ 182.589924][T13750] should_fail_usercopy+0x1a/0x20 [ 182.589951][T13750] _copy_from_iter+0xd3/0xb00 [ 182.608397][T13750] ? kmalloc_reserve+0x16e/0x190 [ 182.608419][T13750] ? __build_skb_around+0x196/0x1f0 [ 182.608439][T13750] ? __alloc_skb+0x21f/0x310 [ 182.623222][T13750] ? __virt_addr_valid+0x1ed/0x250 [ 182.623245][T13750] ? __check_object_size+0x35b/0x510 [ 182.633756][T13750] netlink_sendmsg+0x460/0x6e0 [ 182.633787][T13750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.633812][T13750] __sock_sendmsg+0x140/0x180 [ 182.633913][T13750] ____sys_sendmsg+0x312/0x410 [ 182.653495][T13750] __sys_sendmsg+0x1e9/0x280 [ 182.653531][T13750] __x64_sys_sendmsg+0x46/0x50 [ 182.653571][T13750] x64_sys_call+0x26f8/0x2e00 [ 182.653596][T13750] do_syscall_64+0xc9/0x1c0 [ 182.672233][T13750] ? clear_bhb_loop+0x55/0xb0 [ 182.672260][T13750] ? clear_bhb_loop+0x55/0xb0 [ 182.681609][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.681658][T13750] RIP: 0033:0x7fdaf1667299 [ 182.681674][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.711640][T13750] RSP: 002b:00007fdaf02e7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.711661][T13750] RAX: ffffffffffffffda RBX: 00007fdaf17f5f80 RCX: 00007fdaf1667299 [ 182.728074][T13750] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 182.728143][T13750] RBP: 00007fdaf02e70a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.728154][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.728166][T13750] R13: 000000000000000b R14: 00007fdaf17f5f80 R15: 00007ffe816de5d8 [ 182.728180][T13750] [ 182.822486][T13754] loop4: detected capacity change from 0 to 4096 [ 182.838123][T13757] wg0 speed is unknown, defaulting to 1000 [ 182.849310][T13759] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 182.867375][T13763] loop3: detected capacity change from 0 to 128 [ 182.889831][T13763] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.972828][T13781] loop4: detected capacity change from 0 to 2048 [ 182.989531][T13779] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.015436][T13783] wg0 speed is unknown, defaulting to 1000 [ 183.047058][T13783] ipt_ECN: cannot use operation on non-tcp rule [ 183.106040][T13791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.106425][ C0] eth0: bad gso: type: 1, size: 1408 [ 183.113261][T13791] IPv6: NLM_F_CREATE should be set when creating new route [ 183.113273][T13791] IPv6: NLM_F_CREATE should be set when creating new route [ 183.126571][T13793] loop3: detected capacity change from 0 to 512 [ 183.167543][T13793] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2785: casefold flag without casefold feature [ 183.182289][T13793] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2785: couldn't read orphan inode 15 (err -117) [ 183.197217][T13795] loop1: detected capacity change from 0 to 2048 [ 183.233044][T13794] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.254586][T13809] loop1: detected capacity change from 0 to 256 [ 183.305222][T13811] loop3: detected capacity change from 0 to 2048 [ 183.351243][T13810] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.363878][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.371435][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.376680][T13821] wg0 speed is unknown, defaulting to 1000 [ 183.378918][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.392051][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.399382][ T3334] rtc rtc0: __rtc_set_alarm: err=-22 [ 183.406314][T13821] ipt_ECN: cannot use operation on non-tcp rule [ 183.423168][T13823] loop1: detected capacity change from 0 to 512 [ 183.449561][T13823] EXT4-fs (loop1): inodes count not valid: 0 vs 32 [ 183.509246][T13838] loop3: detected capacity change from 0 to 512 [ 183.531600][T13837] loop4: detected capacity change from 0 to 2048 [ 183.539458][T13838] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2800: casefold flag without casefold feature [ 183.550778][T13840] veth2: entered promiscuous mode [ 183.557377][T13840] veth2: entered allmulticast mode [ 183.558772][T13836] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.572845][T13842] loop1: detected capacity change from 0 to 512 [ 183.582683][T13838] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2800: couldn't read orphan inode 15 (err -117) [ 183.589153][T13845] loop4: detected capacity change from 0 to 256 [ 183.625813][T13842] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2802: casefold flag without casefold feature [ 183.641821][T13842] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2802: couldn't read orphan inode 15 (err -117) [ 183.673331][T13842] Invalid option length (234) for dns_resolver key [ 183.715699][T13840] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 183.715699][T13840] The task syz.0.2801 (13840) triggered the difference, watch for misbehavior. [ 183.715664][T13854] loop3: detected capacity change from 0 to 2048 [ 183.721683][T13853] rtc_cmos 00:00: Alarms can be up to one day in the future [ 183.749701][T13858] FAULT_INJECTION: forcing a failure. [ 183.749701][T13858] name failslab, interval 1, probability 0, space 0, times 0 [ 183.762512][T13858] CPU: 1 UID: 0 PID: 13858 Comm: syz.4.2808 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 183.773269][T13858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 183.783400][T13858] Call Trace: [ 183.788684][T13858] [ 183.791616][T13858] dump_stack_lvl+0xf2/0x150 [ 183.796293][T13858] dump_stack+0x15/0x20 [ 183.800442][T13858] should_fail_ex+0x229/0x230 [ 183.805130][T13858] ? __kvmalloc_node_noprof+0x72/0x170 [ 183.810634][T13858] should_failslab+0x8f/0xb0 [ 183.815221][T13858] __kmalloc_node_noprof+0xa8/0x380 [ 183.820480][T13858] __kvmalloc_node_noprof+0x72/0x170 [ 183.825903][T13858] alloc_netdev_mqs+0x9d/0x8d0 [ 183.830665][T13858] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 183.836120][T13858] rtnl_create_link+0x233/0x680 [ 183.840975][T13858] rtnl_newlink+0xe12/0x1690 [ 183.845562][T13858] ? security_capable+0x64/0x80 [ 183.850402][T13858] ? ns_capable+0x7d/0xb0 [ 183.854743][T13858] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.859818][T13858] rtnetlink_rcv_msg+0x6aa/0x710 [ 183.864789][T13858] ? ref_tracker_free+0x3a5/0x410 [ 183.869859][T13858] ? __dev_queue_xmit+0x161/0x1fe0 [ 183.875072][T13858] netlink_rcv_skb+0x12c/0x230 [ 183.879847][T13858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.885311][T13858] rtnetlink_rcv+0x1c/0x30 [ 183.889743][T13858] netlink_unicast+0x593/0x670 [ 183.894493][T13858] netlink_sendmsg+0x5cc/0x6e0 [ 183.899321][T13858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.904593][T13858] __sock_sendmsg+0x140/0x180 [ 183.909698][T13858] ____sys_sendmsg+0x312/0x410 [ 183.914454][T13858] __sys_sendmsg+0x1e9/0x280 [ 183.919265][T13858] __x64_sys_sendmsg+0x46/0x50 [ 183.924016][T13858] x64_sys_call+0x26f8/0x2e00 [ 183.928681][T13858] do_syscall_64+0xc9/0x1c0 [ 183.933260][T13858] ? clear_bhb_loop+0x55/0xb0 [ 183.938072][T13858] ? clear_bhb_loop+0x55/0xb0 [ 183.942767][T13858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.948750][T13858] RIP: 0033:0x7fdaf1667299 [ 183.953196][T13858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.972790][T13858] RSP: 002b:00007fdaf02e7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.981249][T13858] RAX: ffffffffffffffda RBX: 00007fdaf17f5f80 RCX: 00007fdaf1667299 [ 183.989426][T13858] RDX: 0000000000000000 RSI: 0000000020001240 RDI: 0000000000000005 [ 183.997468][T13858] RBP: 00007fdaf02e70a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.005461][T13858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.013425][T13858] R13: 000000000000000b R14: 00007fdaf17f5f80 R15: 00007ffe816de5d8 [ 184.021556][T13858] [ 184.091341][T13862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.131908][T13882] FAULT_INJECTION: forcing a failure. [ 184.131908][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 184.139699][T13879] loop1: detected capacity change from 0 to 2048 [ 184.144722][T13882] CPU: 1 UID: 0 PID: 13882 Comm: syz.4.2814 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 184.161995][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 184.170579][T13877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.172040][T13882] Call Trace: [ 184.172049][T13882] [ 184.172056][T13882] dump_stack_lvl+0xf2/0x150 [ 184.191225][T13882] dump_stack+0x15/0x20 [ 184.195738][T13882] should_fail_ex+0x229/0x230 [ 184.200423][T13882] ? __kvmalloc_node_noprof+0x72/0x170 [ 184.205906][T13882] should_failslab+0x8f/0xb0 [ 184.210517][T13882] __kmalloc_node_noprof+0xa8/0x380 [ 184.215751][T13882] __kvmalloc_node_noprof+0x72/0x170 [ 184.221037][T13882] alloc_netdev_mqs+0x9d/0x8d0 [ 184.225828][T13882] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 184.231358][T13882] rtnl_create_link+0x233/0x680 [ 184.236207][T13882] rtnl_newlink+0xe12/0x1690 [ 184.240874][T13882] ? security_capable+0x64/0x80 [ 184.245750][T13882] ? ns_capable+0x7d/0xb0 [ 184.250079][T13882] ? __pfx_rtnl_newlink+0x10/0x10 [ 184.255100][T13882] rtnetlink_rcv_msg+0x6aa/0x710 [ 184.260067][T13882] ? ref_tracker_free+0x3a5/0x410 [ 184.265165][T13882] ? __dev_queue_xmit+0x161/0x1fe0 [ 184.267957][T13888] FAULT_INJECTION: forcing a failure. [ 184.267957][T13888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.270334][T13882] netlink_rcv_skb+0x12c/0x230 [ 184.288245][T13882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.293733][T13882] rtnetlink_rcv+0x1c/0x30 [ 184.298139][T13882] netlink_unicast+0x593/0x670 [ 184.302911][T13882] netlink_sendmsg+0x5cc/0x6e0 [ 184.307669][T13882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.312941][T13882] __sock_sendmsg+0x140/0x180 [ 184.317616][T13882] ____sys_sendmsg+0x312/0x410 [ 184.322440][T13882] __sys_sendmsg+0x1e9/0x280 [ 184.327688][T13882] __x64_sys_sendmsg+0x46/0x50 [ 184.332897][T13882] x64_sys_call+0x26f8/0x2e00 [ 184.337577][T13882] do_syscall_64+0xc9/0x1c0 [ 184.342153][T13882] ? clear_bhb_loop+0x55/0xb0 [ 184.346850][T13882] ? clear_bhb_loop+0x55/0xb0 [ 184.351537][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.357436][T13882] RIP: 0033:0x7fdaf1667299 [ 184.361849][T13882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.381460][T13882] RSP: 002b:00007fdaf02e7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.390654][T13882] RAX: ffffffffffffffda RBX: 00007fdaf17f5f80 RCX: 00007fdaf1667299 [ 184.398638][T13882] RDX: 0000000000000000 RSI: 0000000020001240 RDI: 0000000000000003 [ 184.406601][T13882] RBP: 00007fdaf02e70a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.414674][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.422677][T13882] R13: 000000000000000b R14: 00007fdaf17f5f80 R15: 00007ffe816de5d8 [ 184.430761][T13882] [ 184.433770][T13888] CPU: 0 UID: 0 PID: 13888 Comm: syz.1.2817 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 184.444688][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 184.444703][T13888] Call Trace: [ 184.444710][T13888] [ 184.444718][T13888] dump_stack_lvl+0xf2/0x150 [ 184.444791][T13888] dump_stack+0x15/0x20 [ 184.444816][T13888] should_fail_ex+0x229/0x230 [ 184.444846][T13888] should_fail+0xb/0x10 [ 184.444873][T13888] should_fail_usercopy+0x1a/0x20 [ 184.444932][T13888] _copy_to_user+0x1e/0xa0 [ 184.444957][T13888] simple_read_from_buffer+0xa0/0x110 [ 184.445052][T13888] proc_fail_nth_read+0xfc/0x140 [ 184.445078][T13888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.445100][T13888] vfs_read+0x1a2/0x6e0 [ 184.445125][T13888] ? __rcu_read_unlock+0x4e/0x70 [ 184.445149][T13888] ? __fget_files+0x1da/0x210 [ 184.445170][T13888] ksys_read+0xeb/0x1b0 [ 184.445204][T13888] __x64_sys_read+0x42/0x50 [ 184.445315][T13888] x64_sys_call+0x2a36/0x2e00 [ 184.445341][T13888] do_syscall_64+0xc9/0x1c0 [ 184.445365][T13888] ? clear_bhb_loop+0x55/0xb0 [ 184.445433][T13888] ? clear_bhb_loop+0x55/0xb0 [ 184.445458][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.445491][T13888] RIP: 0033:0x7f903e715d7c [ 184.445505][T13888] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 184.445524][T13888] RSP: 002b:00007f903d315040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.445544][T13888] RAX: ffffffffffffffda RBX: 00007f903e8a6058 RCX: 00007f903e715d7c [ 184.445634][T13888] RDX: 000000000000000f RSI: 00007f903d3150b0 RDI: 0000000000000005 [ 184.445648][T13888] RBP: 00007f903d3150a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.445661][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.445675][T13888] R13: 000000000000006e R14: 00007f903e8a6058 R15: 00007ffecd9be678 [ 184.445689][T13888] [ 184.465227][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.465456][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.465651][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.465883][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.465946][ T3334] rtc rtc0: __rtc_set_alarm: err=-22 [ 184.545334][T13875] wg0 speed is unknown, defaulting to 1000 [ 184.556685][T13899] loop4: detected capacity change from 0 to 2048 [ 184.797715][T13875] chnl_net:caif_netlink_parms(): no params data found [ 184.835630][T13914] loop1: detected capacity change from 0 to 512 [ 184.838174][T13898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 184.850165][T13914] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2825: casefold flag without casefold feature [ 184.875313][T13914] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2825: couldn't read orphan inode 15 (err -117) [ 184.876493][T13912] __nla_validate_parse: 5 callbacks suppressed [ 184.876505][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2824'. [ 184.912774][T13912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13912 comm=syz.3.2824 [ 184.931723][T13875] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.938836][T13875] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.946346][T13875] bridge_slave_0: entered allmulticast mode [ 184.959596][T13875] bridge_slave_0: entered promiscuous mode [ 184.976208][T13875] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.983355][T13875] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.992822][T13875] bridge_slave_1: entered allmulticast mode [ 184.999366][T13875] bridge_slave_1: entered promiscuous mode [ 185.007768][T13926] wg0 speed is unknown, defaulting to 1000 [ 185.010041][T13928] loop4: detected capacity change from 0 to 1024 [ 185.014753][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2830'. [ 185.029734][T13930] ipt_ECN: cannot use operation on non-tcp rule [ 185.032084][T13928] EXT4-fs: Ignoring removed orlov option [ 185.042586][T13928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.047007][T13929] veth2: entered promiscuous mode [ 185.054837][T13929] veth2: entered allmulticast mode [ 185.089213][T13930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2829'. [ 185.111920][T13875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.126884][T13875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.156925][T13875] team0: Port device team_slave_0 added [ 185.163649][T13875] team0: Port device team_slave_1 added [ 185.194952][T13943] loop3: detected capacity change from 0 to 1024 [ 185.195285][T13875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.208291][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.234334][T13875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.261643][T13875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.268797][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.294942][T13875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.329579][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 185.329669][ T29] audit: type=1400 audit(1722259804.933:3284): avc: denied { name_bind } for pid=13949 comm="syz.3.2834" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 185.363919][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 185.371445][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 185.378948][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 185.386524][ T3334] rtc_cmos 00:00: Alarms can be up to one day in the future [ 185.393835][ T3334] rtc rtc0: __rtc_set_alarm: err=-22 [ 185.400384][T13875] hsr_slave_0: entered promiscuous mode [ 185.409447][T13875] hsr_slave_1: entered promiscuous mode [ 185.415678][T13875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.423219][T13875] Cannot create hsr debugfs directory [ 185.484085][T13875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.494448][T13875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.550630][T13875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.561007][T13875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.620073][T13875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.630474][T13875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.676356][T13875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.686798][T13875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.747438][T13875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.755704][T13875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.764457][T13875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.772782][T13875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.811442][T13875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.832238][T13875] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.842997][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.850145][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.861214][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.868266][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.936986][T13875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.957050][T13960] loop1: detected capacity change from 0 to 2048 [ 185.969892][ T2960] ================================================================== [ 185.977985][ T2960] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 185.984754][ T2960] [ 185.987081][ T2960] write to 0xffff88810124d220 of 8 bytes by task 13960 on cpu 1: [ 185.994792][ T2960] inc_diskseq+0x2c/0x40 [ 185.998822][T13959] rtc_cmos 00:00: Alarms can be up to one day in the future [ 185.999024][ T2960] disk_force_media_change+0x9f/0xf0 [ 186.011558][ T2960] lo_release+0x2d0/0x400 [ 186.015901][ T2960] bdev_release+0x3d2/0x430 [ 186.020410][ T2960] blkdev_release+0x15/0x20 [ 186.020606][T13970] loop1: detected capacity change from 0 to 512 [ 186.024903][ T2960] __fput+0x192/0x6f0 [ 186.024971][ T2960] __fput_sync+0x44/0x60 [ 186.024990][ T2960] __se_sys_close+0x101/0x1b0 [ 186.025012][ T2960] __x64_sys_close+0x1f/0x30 [ 186.025030][ T2960] x64_sys_call+0x2630/0x2e00 [ 186.025157][ T2960] do_syscall_64+0xc9/0x1c0 [ 186.025182][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.025215][ T2960] [ 186.025225][ T2960] read to 0xffff88810124d220 of 8 bytes by task 2960 on cpu 0: [ 186.025243][ T2960] block_uevent+0x31/0x50 [ 186.025265][ T2960] dev_uevent+0x2f3/0x380 [ 186.040751][T13970] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2839: casefold flag without casefold feature [ 186.044441][ T2960] uevent_show+0x11e/0x210 [ 186.044462][ T2960] dev_attr_show+0x3a/0xa0 [ 186.044487][ T2960] sysfs_kf_seq_show+0x17c/0x250 [ 186.044504][ T2960] kernfs_seq_show+0x7c/0x90 [ 186.049648][T13970] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2839: couldn't read orphan inode 15 (err -117) [ 186.053748][ T2960] seq_read_iter+0x2d7/0x940 [ 186.053772][ T2960] kernfs_fop_read_iter+0xc6/0x310 [ 186.053796][ T2960] vfs_read+0x5e9/0x6e0 [ 186.139065][ T2960] ksys_read+0xeb/0x1b0 [ 186.143223][ T2960] __x64_sys_read+0x42/0x50 [ 186.147727][ T2960] x64_sys_call+0x2a36/0x2e00 [ 186.152483][ T2960] do_syscall_64+0xc9/0x1c0 [ 186.156982][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.162893][ T2960] [ 186.165204][ T2960] value changed: 0x000000000000064d -> 0x000000000000064e [ 186.172302][ T2960] [ 186.174643][ T2960] Reported by Kernel Concurrency Sanitizer on: [ 186.181220][ T2960] CPU: 0 UID: 0 PID: 2960 Comm: udevd Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 186.191499][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 186.201558][ T2960] ================================================================== [ 186.243877][T13875] veth0_vlan: entered promiscuous mode [ 186.249826][ T29] audit: type=1326 audit(1722259805.833:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13969 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903e717299 code=0x7ffc0000 [ 186.251911][T13875] veth1_vlan: entered promiscuous mode [ 186.273436][ T29] audit: type=1326 audit(1722259805.833:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13969 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903e717299 code=0x7ffc0000 [ 186.329704][ T3300] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.352962][T13875] veth0_macvtap: entered promiscuous mode [ 186.360530][T13875] veth1_macvtap: entered promiscuous mode [ 186.363462][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.370495][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.373739][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.384073][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.384086][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.391517][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.401174][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.401188][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.411829][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 186.418929][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.428687][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 186.439106][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.471956][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.481776][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.492302][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.502181][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.512678][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.523456][T13875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.533385][ T3300] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.548697][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.559204][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.569101][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.579655][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.589583][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.600113][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.609934][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.620396][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.630256][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.640665][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.650514][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.660926][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.671745][T13875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.681841][T13875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.690655][T13875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.699484][T13875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.708194][T13875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.728538][ T29] audit: type=1400 audit(1722259806.333:3287): avc: denied { mounton } for pid=13875 comm="syz-executor" path="/root/syzkaller.SUt0Dm/syz-tmp" dev="sda1" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 186.753754][ T29] audit: type=1400 audit(1722259806.333:3288): avc: denied { mount } for pid=13875 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.776377][ T29] audit: type=1400 audit(1722259806.363:3289): avc: denied { mounton } for pid=13875 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 186.802449][ T3300] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.896738][ T3300] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.959730][ T29] audit: type=1400 audit(1722259806.563:3290): avc: denied { read } for pid=2998 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 186.984695][ T29] audit: type=1400 audit(1722259806.573:3291): avc: denied { search } for pid=2998 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.985562][ T3300] bridge_slave_1: left allmulticast mode [ 187.006119][ T29] audit: type=1400 audit(1722259806.573:3292): avc: denied { read } for pid=2998 comm="dhcpcd" name="n141" dev="tmpfs" ino=18758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.011794][ T3300] bridge_slave_1: left promiscuous mode [ 187.033603][ T29] audit: type=1400 audit(1722259806.573:3293): avc: denied { open } for pid=2998 comm="dhcpcd" path="/run/udev/data/n141" dev="tmpfs" ino=18758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.039231][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.070552][ T3300] bridge_slave_0: left allmulticast mode [ 187.076268][ T3300] bridge_slave_0: left promiscuous mode [ 187.081953][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.187612][ T3300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.197976][ T3300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.208213][ T3300] bond0 (unregistering): Released all slaves [ 187.327578][ T3300] hsr_slave_0: left promiscuous mode [ 187.333379][ T3300] hsr_slave_1: left promiscuous mode [ 187.341391][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.348915][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.356524][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.366120][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.375704][ T3300] veth1_macvtap: left promiscuous mode [ 187.381204][ T3300] veth0_macvtap: left promiscuous mode [ 187.386853][ T3300] veth1_vlan: left promiscuous mode [ 187.392254][ T3300] veth0_vlan: left promiscuous mode [ 187.470261][ T3300] team0 (unregistering): Port device team_slave_1 removed [ 187.481127][ T3300] team0 (unregistering): Port device team_slave_0 removed