last executing test programs: 6.562179233s ago: executing program 2 (id=2494): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7c8b000000000000180a74b648690000000000000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 6.554198444s ago: executing program 2 (id=2496): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = dup2(r1, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000140)=ANY=[], 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) close(r6) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0xfffc, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200000900ffffb703000008000000b704000000000000850000008300000018110000400b32f6569fe4bf69501e87495b632d8d2c4936ceaae67e68b61494acc10dd85cb637fca12fa10360d6a9f3a912648341ec476cd8e026e63538622a1dd9ce182b27585ea01b894e3cdc6fc4a5e19182a334f7b759b03d955b7b667d63265f2926b1a9a8a02a2cb2d68e8650ee234b27408ceca0e34baa32004861442857c370f606cae044f6b8cf7500645e0743fc71d5", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000006800000429bd7000fcdbdf2502000400120000000600070000000000060c0300000000000800010001000000100008800c0001000000000000000008c1732507cc99d2fb6d76dd5dd3fb0b7b72a29f08a80247be2f2656545f9d40611e6bd5a1c3a0697000a39cce6f25222bb1185dee794dbc330bc8692dc717961db4f14f9689fa0c7557ff55e9db264bb3201046ae5c74c83596acca14668c92c060142ebfcace732b80aab42869e45c2972700057dfb8fbad04cfb47f0d1a1a655d"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) getgroups(0x7, &(0x7f0000000000)=[0xee01, 0x0, 0xee01, 0xee01, 0x0, 0x0, 0xee00]) 6.436428533s ago: executing program 2 (id=2498): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) 6.435564073s ago: executing program 2 (id=2501): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001d0000000000000000000000c3000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x93, &(0x7f0000000100)=""/147}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000007000000001c0012801100010067656e65766500000c00028008000100000001000a000100aaaaaaaaaa000000"], 0x48}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)) (rerun: 32) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r1) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000004c0)=""/130, &(0x7f0000000200)=0x82) (async) listen(r3, 0x4) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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") (async, rerun: 64) accept(r3, &(0x7f0000000080)=@can, 0x0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) readahead(0xffffffffffffffff, 0x6, 0xffffffffffffffff) (async) sendmmsg$unix(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000180)=@abs, 0x6e, 0x0}}], 0x2, 0x0) (async, rerun: 64) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 6.35063873s ago: executing program 2 (id=2502): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1f, &(0x7f0000000540), 0x1, 0x4b1, &(0x7f0000000580)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000340)=""/201, 0xc9}], 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 6.131460848s ago: executing program 2 (id=2512): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) 2.441188961s ago: executing program 4 (id=2589): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7c8b000000000000180a74b64869000000000000000000009500000000000000"], 0x0, 0x3, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 2.386764635s ago: executing program 4 (id=2591): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_io_uring_setup(0x222c, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 2.370250406s ago: executing program 4 (id=2593): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x43d014, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @local}, {0x20000010304, @random="b8b2de99f79d"}, 0x0, {0x2, 0x240}}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x2, 0x5, 0x3, 0x401, 0x3, "ee44769638abf9b6aae28b4f7d9fb0b8c9a8ec"}) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x107502, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.21211619s ago: executing program 4 (id=2598): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xe, &(0x7f0000000440)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}]}, 0x3, 0x451, &(0x7f0000000500)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003500)={0xffffffffffffffff, 0x20, &(0x7f00000034c0)={&(0x7f0000001080)=""/120, 0x78, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xffc7) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x2, &(0x7f0000000180), 0x8}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="164aac2f202c5feda71e039a5fa93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f39e97ada0c7ab62f274f34dc4cc07399a811cda54385228d312fbc340f7455e880cad1adf9fe77da03ad70d6c309ca6f8aef416b77438228ea9f53", 0xbe, 0x1810, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r5, &(0x7f0000000100)=""/169, 0xa9) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601010000000000000000000000000c00078005001500030000000500010007000000050005000a000000050004000000000009000213000300686173683a6e65742c69666163650000"], 0x58}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.090974849s ago: executing program 1 (id=2603): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_io_uring_setup(0x222c, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 2.07688764s ago: executing program 4 (id=2604): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) 2.051025823s ago: executing program 1 (id=2606): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x82c0, 0x0, 0x0, 0x0, 0x6, 0x89db, 0x1, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x42, 0x0, "6fcd42ec0222f5b3eed9ee7c7544fa14a6ec4d6ce4bcab371951b2bf889190aa406396de415e124db0b32226b1c1acd7c6bdbb9d4f698bae30daa85e202ef6664ae79c9cab1c4d18795a07f58005cd9e"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) io_uring_setup(0x7d5, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f45070000"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000380)) 2.044044303s ago: executing program 4 (id=2607): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000840)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f00000002c0)="$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") syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/ipc\x00') r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x101, 0x0, 0x7, 0x0, 0x0}) 1.654810435s ago: executing program 1 (id=2609): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x43d014, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @local}, {0x20000010304, @random="b8b2de99f79d"}, 0x0, {0x2, 0x240}}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x2, 0x5, 0x3, 0x401, 0x3, "ee44769638abf9b6aae28b4f7d9fb0b8c9a8ec"}) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x107502, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.492542018s ago: executing program 1 (id=2611): unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) write(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x20, 0x8000}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "7d3b331a312ee08bcc36dc36e12b49e0b393e8bf81058dc2d5762b17464cff0d", "1c64ed0b4a59ae1c119ddbc71b0930d8", {"d23dd644021a65f4b2db00f46fda5861", "72997824b931d497927989ebef22a608"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x240) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x90, 0x7, 0x208, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair(0x1a, 0x80000, 0x4, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000004000000000000000000000000000000402315082e20cb12cbd000"/104], 0x68) 1.006599468s ago: executing program 0 (id=2613): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x18000, &(0x7f0000000540)={[], [{@subj_role={'subj_role', 0x3d, ']).&}](+}*'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6erspan\x00'}}]}, 0xfd, 0xb8e, &(0x7f00000017c0)="$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") chdir(&(0x7f0000000200)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x44, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x47, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62fa926f35cb5b22f3f83917018e5535d9d693"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x7c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x95, 0xe, 0x8, 0x9, 0x0, 0x0, 0x8, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x6}, 0x80041, 0x4, 0x7, 0x9, 0x5, 0xe2e8, 0xa, 0x0, 0xfffffff7, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000000180c2000386dd6001010000161100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020200000000000030b00afe4e7000"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000020000000000008001e0001000000"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1.004951338s ago: executing program 0 (id=2614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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") socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0xe8, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001e0001029055241ba39107c0676e8ef8", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000840)={'\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x86, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001900100029bd7000fedbdf2502100004e604c80b0014000008001e00be18000008000100e000000108001900", @ANYRES32=0x0, @ANYBLOB="d3433d7ba1db1b0dac9e2692eee79c7bfe04625dc80ef50dea3f0c806d1b492197d5acc74967cdd79147520c40f0ab74429f7bbe41985e4b8d6e35"], 0x34}, 0x1, 0xba01, 0x0, 0x200440c0}, 0x0) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) write(r8, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23) recvmmsg(r8, &(0x7f0000004900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/192, 0xc0}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000000)=""/26, 0x1a}], 0x2, &(0x7f0000003b80)=""/107, 0x6b}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2d, 0x0, &(0x7f0000004a40)={0x0, 0x3938700}) socketpair(0x15, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) 693.485674ms ago: executing program 3 (id=2619): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x101, 0x0, 0x7, 0x0, 0x0}) (fail_nth: 8) 496.63339ms ago: executing program 3 (id=2620): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071122900070000009500000000000000da3af6ff425ca50d8996e057d8d61e8a6dfa8ab6f3e8d041a4525a61b3982308bbc1fa5c6d17dbb6bc0b2f85c53729ed99acd5415a112350c1179a94b95971fe103438f94b8ca9a6e5cd0d6865c95489fdd1037cdb719ef6b87143af17048b018f3b1fa3fc3ce9e70385a5376a93e77098ea21ea8f0cbad1cbad8e16c3e6143ebe63cb6e02ec4d7a471291afdcc73a7163f27e3c9f4d61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0, 0x0, 0xd88d02a0}, 0x38) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='consume_skb\x00', r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='consume_skb\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f00000002c0)="68f502b113d4684dc140ceafcc8db3f394d5f030690a4173b2e84651dd1a1e9e081fd349fccf0a552ae4c5ed4ad9542fdbf62b1863a8bfde949b0e710e5481e553263af3530b31e7da79888117cdc41761a67d314183622e78d1bdde21625ae01177884c40ee90dbe2a78d65a2c71878c60f09b3007573a2967df149046a5dff92aee7744aadf59d30e77a3352e00545e4a08d2cb6ce9409f13a7df7b129f0640203c1211630683dcf980be1ed5e849f8fa2b1ea08a4c894bc82fd1d60511effa45470d5211efb1d9f122da4020ed9a77b6a3b07ae7e7767f9f996f127841c75fa5e352d99da1954db69592295fdc1a793fa6303169a", &(0x7f00000004c0)=""/207, 0x4}, 0x20) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)=ANY=[]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2a020480) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 435.393285ms ago: executing program 1 (id=2621): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = dup2(r1, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000140)=ANY=[], 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) close(r6) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200000900ffffb703000008000000b704000000000000850000008300000018110000400b32f6569fe4bf69501e87495b632d8d2c4936ceaae67e68b61494acc10dd85cb637fca12fa10360d6a9f3a912648341ec476cd8e026e63538622a1dd9ce182b27585ea01b894e3cdc6fc4a5e19182a334f7b759b03d955b7b667d63265f2926b1a9a8a02a2cb2d68e8650ee234b27408ceca0e34baa32004861442857c370f606cae044f6b8cf7500645e0743fc71d5", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgid() 398.576368ms ago: executing program 1 (id=2622): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000640)="b9ff03076944268cb89e14f088a847e0ffff00124000632f77fbac141416e0e0020a94029f03", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480140001800c0001006e6f747261636b00040002801c0001800a00010071756575650000000c00028006000140000000000900010073797a30000000000900020073797a3200000000140000001104010000000000000000000000000a"], 0x88}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480140001800c0001006e6f747261636b00040002801c0001800a00010071756575650000000c00028006000140000000000900010073797a30000000000900020073797a3200000000140000001104010000000000000000000000000a"], 0x88}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000000)={'hsr0\x00', 0x401}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1901) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r6, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000000)={&(0x7f0000006b40), 0xc, &(0x7f0000006c00)={0x0, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 334.564863ms ago: executing program 3 (id=2623): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000100)={[{@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, 0x17ffffd, 0x0) (async) fallocate(r2, 0x0, 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e0, 0x8000000000000001}, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3227, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x40, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$sock_ifreq(r4, 0xf2, &(0x7f0000000100)={'wlan0\x00', @ifru_names='wg0\x00'}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000400ffffffffffff0180c2000000bbbbbbb9bbbbaaaaaaaaaabb"]) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 211.913243ms ago: executing program 3 (id=2624): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x18000, &(0x7f0000000540)={[], [{@subj_role={'subj_role', 0x3d, ']).&}](+}*'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6erspan\x00'}}]}, 0xfd, 0xb8e, &(0x7f00000017c0)="$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") chdir(&(0x7f0000000200)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x44, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x47, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62fa926f35cb5b22f3f83917018e5535d9d693"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x7c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x95, 0xe, 0x8, 0x9, 0x0, 0x0, 0x8, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x6}, 0x80041, 0x4, 0x7, 0x9, 0x5, 0xe2e8, 0xa, 0x0, 0xfffffff7, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000000180c2000386dd6001010000161100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020200000000000030b00afe4e7000"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000020000000000008001e0001000000"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 154.681448ms ago: executing program 0 (id=2625): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) (async) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000480), 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18007d00030000000000000000000000850000006d000000b7000000ffff8bff95655eb35501952f51688840bb71825d6ac205c21b12dfe924c07a136ab2f8c4d5b16058d3e2c471a5499719339e57ef0dbede9182b99a03a283616d18feb0ff926a4dea3a21eedce394941ad50682516e957edc263090fe309c7f73f5080ac9a51d1b57fe67913e5b6f81b7c0febd6915713fca9b11988226fd8bd75a0b56575a1b337cf76dff48218b8e35f79e3ec24141d48d5b1d281153c23b322e3b4cdf4fff33263174c4258cbc3d9aa7343a9d61c20cdf6061fee31b148c5c5269b0cc38b2783f248eb6ece99aea3612464d18ac77cbf4c71abf76d6512e479b9e4e12750218dd9271383ea552036ed5d7272e42ddb6300e44ad016792c13d0746b25efe3fcb7e95a8eaa566dd4f4c9298296e732383a0466feb47b12e24e97c007f945c6de5f2465ea75ddbe2482fee158d6c6c9ba7d3d7e2a0c3e2c94dd8f1374dfab9acabfb6a2c6d993e47e72d59b7d588d0c526223fb64ce7f740ebc56bb6fdbab3e9257ee999492d98a733389f71c8d3c1b8a8d07aa453e0781d4394465af8cde39cfc65d4eaa1e78ea9978ea263fed8ff9d68c44aba89e67d22ca6ae858ca0c8949e5fcc159047bd01efbb45b21bdaf3bde99d5c0e07ac8d66ab15342e16eb737cd7cd320edabb20ed36e25401f8063c0b7ab8cc47ac1289f90a1fae1d3798bc502f7414bc1eac8fde8a148f85a78ce531c6fb7ab70f7739617ff0b0b30a1bc78922f57cddaf1bf9543fdf39fc32b9fed370356ae7c902f0d9dcbff7c89b58b2ee5e063b108ae1f61636e7c1423337e7a8ff73c415418e45f7c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x90) (async) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) (async) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r1}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) socket$nl_route(0x10, 0x3, 0x0) (async) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x1}}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r8, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) syz_open_dev$tty1(0xc, 0x4, 0x3) 54.758556ms ago: executing program 0 (id=2626): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7c8b000000000000180a74b64869000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3}, 0x90) 45.603187ms ago: executing program 3 (id=2627): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_io_uring_setup(0x222c, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 43.500247ms ago: executing program 0 (id=2628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) 1.9523ms ago: executing program 0 (id=2629): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) recvfrom(r1, 0x0, 0x0, 0x10002, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4090, 0xffa, 0x12, 0x0}, &(0x7f0000000000)=0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf25120000008ab622f11b05001300010000", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 3 (id=2630): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000000060fd906300003a00ff01000000000000000000000000000100000000008e55000000ffffac1414aa1e520b4c951ee12e"], 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x4109240, 0x12) fcntl$setlease(r1, 0x400, 0x1) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) kernel console output (not intermixed with test programs): .569838][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.579767][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.590359][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.591086][T10598] loop4: detected capacity change from 0 to 512 [ 159.600287][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.616916][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.625828][T10598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.626828][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.645612][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.655438][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.657096][T10598] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2019: bg 0: block 248: padding at end of block bitmap is not set [ 159.665851][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.665869][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.665882][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.665897][T10480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.665957][T10480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.667816][T10480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.683031][T10598] Quota error (device loop4): write_blk: dquota write failed [ 159.704056][T10480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.710858][T10598] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 159.710879][T10598] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2019: Failed to acquire dquot type 1 [ 159.721333][T10480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.775904][T10598] EXT4-fs (loop4): 1 truncate cleaned up [ 159.784531][T10480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.791797][T10598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.798835][T10480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.811358][T10598] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.853136][T10604] loop3: detected capacity change from 0 to 1024 [ 159.868622][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2019'. [ 159.877853][T10608] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 159.879684][T10604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.910719][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'. [ 159.922958][T10105] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 159.936273][T10105] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 159.945512][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.011631][T10617] loop1: detected capacity change from 0 to 128 [ 160.017324][ T29] audit: type=1400 audit(2000001118.988:2044): avc: granted { setsecparam } for pid=10614 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 160.030509][T10617] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.051685][T10617] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.105555][T10480] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.123052][T10621] team0: Device vlan2 is already an upper device of the team interface [ 160.174334][T10625] loop1: detected capacity change from 0 to 512 [ 160.197726][T10625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.210630][T10625] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.213269][T10632] loop4: detected capacity change from 0 to 512 [ 160.230846][ T29] audit: type=1400 audit(2000001119.208:2045): avc: denied { setattr } for pid=10620 comm="syz.1.2025" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 160.256776][T10480] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.258811][T10105] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.277052][ T9750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.289140][T10632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.302449][T10632] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.338711][ T9750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.356792][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.398139][ T9750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.471362][ T9750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.484259][T10661] loop4: detected capacity change from 0 to 1024 [ 160.491162][T10661] EXT4-fs: test_dummy_encryption option not supported [ 160.541558][T10657] lo speed is unknown, defaulting to 1000 [ 160.556591][ T9750] bridge_slave_1: left allmulticast mode [ 160.562257][ T9750] bridge_slave_1: left promiscuous mode [ 160.567978][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.574167][T10671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=10671 comm=syz.1.2035 [ 160.588447][ T9750] bridge_slave_0: left allmulticast mode [ 160.594109][ T9750] bridge_slave_0: left promiscuous mode [ 160.599883][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.641602][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'. [ 160.696598][ T9750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.707419][ T9750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.717555][ T9750] bond0 (unregistering): Released all slaves [ 160.775119][T10657] chnl_net:caif_netlink_parms(): no params data found [ 160.806891][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.813968][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.821307][T10657] bridge_slave_0: entered allmulticast mode [ 160.827800][T10657] bridge_slave_0: entered promiscuous mode [ 160.835103][T10657] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.842148][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.849368][T10657] bridge_slave_1: entered allmulticast mode [ 160.856048][T10657] bridge_slave_1: entered promiscuous mode [ 160.863813][ T9750] hsr_slave_0: left promiscuous mode [ 160.869819][ T9750] hsr_slave_1: left promiscuous mode [ 160.875703][ T9750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.883118][ T9750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.890732][ T9750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.898157][ T9750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.907346][ T9750] veth1_macvtap: left promiscuous mode [ 160.912834][ T9750] veth0_macvtap: left promiscuous mode [ 160.918421][ T9750] veth1_vlan: left promiscuous mode [ 160.993970][ T9750] team0 (unregistering): Port device team_slave_1 removed [ 161.007409][ T9750] team0 (unregistering): Port device team_slave_0 removed [ 161.057133][T10684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2037'. [ 161.074374][T10657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.088216][T10657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.109825][T10657] team0: Port device team_slave_0 added [ 161.116643][T10657] team0: Port device team_slave_1 added [ 161.134219][T10657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.141273][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.167276][T10657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.178715][T10657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.185735][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.211650][T10657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.243055][T10657] hsr_slave_0: entered promiscuous mode [ 161.250953][T10657] hsr_slave_1: entered promiscuous mode [ 161.256997][T10657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.264921][T10657] Cannot create hsr debugfs directory [ 161.270613][T10690] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.277863][T10690] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.331035][T10702] loop4: detected capacity change from 0 to 512 [ 161.337883][T10702] /dev/loop4: Can't open blockdev [ 161.409857][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 161.419456][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 161.429204][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 161.438200][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 161.448604][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 161.557402][T10727] loop1: detected capacity change from 0 to 512 [ 161.563891][T10727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.571268][T10727] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 161.680691][T10657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 161.689283][T10657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 161.698709][T10657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 161.708190][T10657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 161.769584][T10657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.784099][T10657] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.805216][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.812329][ T9741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.842727][T10657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.853254][T10657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.871136][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.878229][ T9741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.970983][T10657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.043154][T10657] veth0_vlan: entered promiscuous mode [ 162.051883][T10657] veth1_vlan: entered promiscuous mode [ 162.068126][T10657] veth0_macvtap: entered promiscuous mode [ 162.076578][T10657] veth1_macvtap: entered promiscuous mode [ 162.087198][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.098029][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.107936][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.118765][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.128642][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.139133][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.149017][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.159552][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.169394][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.179847][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.189652][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.200157][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.209977][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.220404][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.232340][T10657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.248053][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.258562][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.268464][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.279013][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.288842][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.299260][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.309127][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.319570][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.329472][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.339954][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.349769][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.360192][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.370095][T10657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.380528][T10657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.392823][T10657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.401506][T10657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.410344][T10657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.419177][T10657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.427964][T10657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.542654][T10774] __nla_validate_parse: 60 callbacks suppressed [ 162.542670][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 162.585105][T10776] loop3: detected capacity change from 0 to 512 [ 162.592699][T10776] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 162.602219][T10776] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 162.612790][T10776] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2061: bg 0: block 18: invalid block bitmap [ 162.628573][T10776] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 162.638417][T10776] EXT4-fs (loop3): 1 truncate cleaned up [ 162.644581][T10776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.656893][T10776] ext2 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.669379][T10776] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.2061: lblock 0 mapped to illegal pblock 3 (length 1) [ 162.683923][T10779] bond0: option ad_select: unable to set because the bond device is up [ 162.700726][T10776] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.2061: lblock 0 mapped to illegal pblock 3 (length 1) [ 163.094295][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2065'. [ 163.103543][T10799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2065'. [ 163.136173][T10803] netlink: 'syz.0.2066': attribute type 2 has an invalid length. [ 163.262397][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.273153][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.421231][T10657] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.456305][T10811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2069'. [ 163.470476][ T35] IPVS: starting estimator thread 0... [ 163.477978][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 163.486899][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 163.546932][T10817] netlink: 'syz.3.2071': attribute type 8 has an invalid length. [ 163.574564][T10814] IPVS: using max 2880 ests per chain, 144000 per kthread [ 163.642395][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 163.642409][ T29] audit: type=1400 audit(2000001122.618:2053): avc: denied { connect } for pid=10819 comm="syz.3.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.849812][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2077'. [ 163.861450][T10840] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2077'. [ 163.871030][T10840] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2077'. [ 163.882793][T10840] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2077'. [ 164.035712][T10847] loop1: detected capacity change from 0 to 256 [ 164.043309][T10847] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.085982][ T35] IPVS: starting estimator thread 0... [ 164.087833][T10850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.103601][T10847] loop1: detected capacity change from 256 to 64 [ 164.107734][T10853] FAT-fs (loop1): Directory bread(block 44) failed [ 164.116704][T10853] FAT-fs (loop1): Directory bread(block 40) failed [ 164.123257][T10853] FAT-fs (loop1): Directory bread(block 41) failed [ 164.130109][T10853] FAT-fs (loop1): Directory bread(block 42) failed [ 164.136920][T10853] FAT-fs (loop1): Directory bread(block 36) failed [ 164.143019][T10855] 9pnet_fd: Insufficient options for proto=fd [ 164.146036][T10847] FAT-fs (loop1): Directory bread(block 40) failed [ 164.156185][T10847] FAT-fs (loop1): Directory bread(block 41) failed [ 164.162751][T10847] FAT-fs (loop1): Directory bread(block 42) failed [ 164.169294][T10847] FAT-fs (loop1): Directory bread(block 36) failed [ 164.175963][T10851] IPVS: using max 2688 ests per chain, 134400 per kthread [ 164.183309][T10847] FAT-fs (loop1): Directory bread(block 40) failed [ 164.438076][T10860] lo speed is unknown, defaulting to 1000 [ 164.853463][T10877] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 164.860914][T10877] macvlan2: entered allmulticast mode [ 164.866395][T10877] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 164.875729][T10877] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 164.882900][T10877] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 164.944830][T10881] loop4: detected capacity change from 0 to 128 [ 164.952759][T10881] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.965064][T10881] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.999647][T10881] EXT4-fs (loop4): shut down requested (0) [ 165.012356][ T6917] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.030373][T10884] loop4: detected capacity change from 0 to 256 [ 165.220004][T10889] loop4: detected capacity change from 0 to 2048 [ 165.840206][ T9750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.889705][ T9750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.940562][ T9750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.959677][T10892] lo speed is unknown, defaulting to 1000 [ 166.008593][ T9750] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.022434][T10892] chnl_net:caif_netlink_parms(): no params data found [ 166.067992][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.075188][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.082492][T10892] bridge_slave_0: entered allmulticast mode [ 166.088996][T10892] bridge_slave_0: entered promiscuous mode [ 166.096370][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.103461][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.110820][T10892] bridge_slave_1: entered allmulticast mode [ 166.117454][T10892] bridge_slave_1: entered promiscuous mode [ 166.139538][ T9750] bridge_slave_1: left allmulticast mode [ 166.145265][ T9750] bridge_slave_1: left promiscuous mode [ 166.150844][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.160054][ T9750] bridge_slave_0: left allmulticast mode [ 166.165756][ T9750] bridge_slave_0: left promiscuous mode [ 166.171446][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.211869][ T29] audit: type=1400 audit(2000001125.188:2054): avc: denied { accept } for pid=10915 comm="syz.0.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 166.247536][ T9750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.257943][ T9750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.268204][ T9750] bond0 (unregistering): Released all slaves [ 166.277399][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.290333][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.311243][T10892] team0: Port device team_slave_0 added [ 166.317742][T10892] team0: Port device team_slave_1 added [ 166.332122][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.339182][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.365084][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.376760][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.383707][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.409716][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.427856][ T9750] hsr_slave_0: left promiscuous mode [ 166.433552][ T9750] hsr_slave_1: left promiscuous mode [ 166.439502][ T9750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.447101][ T9750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.455862][ T9750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.463303][ T9750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.473443][ T9750] veth1_macvtap: left promiscuous mode [ 166.479013][ T9750] veth0_macvtap: left promiscuous mode [ 166.484643][ T9750] veth1_vlan: left promiscuous mode [ 166.490021][ T9750] veth0_vlan: left promiscuous mode [ 166.578417][T10931] usb usb1: usbfs: process 10931 (syz.0.2100) did not claim interface 3 before use [ 166.632076][ T9750] team0 (unregistering): Port device team_slave_1 removed [ 166.643910][ T9750] team0 (unregistering): Port device team_slave_0 removed [ 166.689911][T10931] vlan2: entered promiscuous mode [ 166.716837][T10892] hsr_slave_0: entered promiscuous mode [ 166.723694][T10892] hsr_slave_1: entered promiscuous mode [ 166.730021][T10892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.737717][T10892] Cannot create hsr debugfs directory [ 166.810287][T10927] lo speed is unknown, defaulting to 1000 [ 166.838395][T10952] tipc: Enabling of bearer rejected, failed to enable media [ 166.927077][T10927] chnl_net:caif_netlink_parms(): no params data found [ 166.983582][T10927] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.990790][T10927] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.000250][T10927] bridge_slave_0: entered allmulticast mode [ 167.009092][T10927] bridge_slave_0: entered promiscuous mode [ 167.045001][T10927] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.052160][T10927] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.062636][T10927] bridge_slave_1: entered allmulticast mode [ 167.070002][T10927] bridge_slave_1: entered promiscuous mode [ 167.099855][T10927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.110698][T10927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.130474][ T9750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.146602][T10959] netlink: 'syz.0.2104': attribute type 1 has an invalid length. [ 167.156523][T10927] team0: Port device team_slave_0 added [ 167.163400][T10927] team0: Port device team_slave_1 added [ 167.187680][T10927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.194694][T10927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.220969][T10927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.236276][ T9750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.250733][T10927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.257732][T10927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.283699][T10927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.307322][T10892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.316539][T10892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.331122][T10892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.346638][ T9750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.360138][T10927] hsr_slave_0: entered promiscuous mode [ 167.366324][T10927] hsr_slave_1: entered promiscuous mode [ 167.372365][T10927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.380141][T10927] Cannot create hsr debugfs directory [ 167.385649][T10892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.407821][ T9750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.490721][ T9750] bridge_slave_1: left allmulticast mode [ 167.496525][ T9750] bridge_slave_1: left promiscuous mode [ 167.502218][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.514004][ T9750] bridge_slave_0: left allmulticast mode [ 167.519768][ T9750] bridge_slave_0: left promiscuous mode [ 167.525503][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.637356][ T9750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.647714][ T9750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.658242][ T9750] bond0 (unregistering): Released all slaves [ 167.706787][T10892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.725457][T10892] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.736711][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.743851][ T9739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.757573][ T9743] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.764671][ T9743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.799967][ T9750] hsr_slave_0: left promiscuous mode [ 167.805804][ T9750] hsr_slave_1: left promiscuous mode [ 167.811688][ T9750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.819216][ T9750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.830533][ T9750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.838180][ T9750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.848642][ T9750] veth1_macvtap: left promiscuous mode [ 167.854194][ T9750] veth0_macvtap: left promiscuous mode [ 167.859891][ T9750] veth1_vlan: left promiscuous mode [ 167.865142][ T9750] veth0_vlan: left promiscuous mode [ 167.955271][ T9750] team0 (unregistering): Port device team_slave_1 removed [ 167.968587][ T9750] team0 (unregistering): Port device team_slave_0 removed [ 168.053061][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.113640][T10892] veth0_vlan: entered promiscuous mode [ 168.122436][T10892] veth1_vlan: entered promiscuous mode [ 168.138578][T10892] veth0_macvtap: entered promiscuous mode [ 168.146910][T10892] veth1_macvtap: entered promiscuous mode [ 168.157087][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.167704][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.177539][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.188037][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.197988][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.208424][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.218291][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.228851][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.228870][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.249188][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.249206][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.269436][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.271093][T10892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.297482][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.308051][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.318134][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.318150][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.318192][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.318205][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.318224][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.318310][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.318324][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.318335][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.318348][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.318362][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.320778][T10892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.432218][T10892] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.440982][T10892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.449718][T10892] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.458536][T10892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.498103][T10927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.529438][T10927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.540674][T10927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.567581][T10927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.581595][T11018] __nla_validate_parse: 4 callbacks suppressed [ 168.581610][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2092'. [ 168.584424][ T9750] IPVS: stop unused estimator thread 0... [ 168.646923][T10927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.659811][T10927] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.670083][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.677307][ T9741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.693687][T11028] loop3: detected capacity change from 0 to 256 [ 168.700014][T11032] loop1: detected capacity change from 0 to 512 [ 168.700206][T11032] ext4: Unknown parameter 'smackfsfloor' [ 168.713363][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.720468][ T9741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.743956][T10927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.754421][T10927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.770578][T11028] Process accounting resumed [ 168.804658][T11028] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 168.814983][T11028] FAT-fs (loop3): Filesystem has been set read-only [ 168.836310][T11028] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 168.844331][T11045] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2113'. [ 168.877790][T10927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.896754][T11044] Cannot find add_set index 0 as target [ 168.986595][T11057] autofs4:pid:11057:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 169.000636][T11057] autofs4:pid:11057:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 169.015333][T10927] veth0_vlan: entered promiscuous mode [ 169.027951][T10927] veth1_vlan: entered promiscuous mode [ 169.053091][T10927] veth0_macvtap: entered promiscuous mode [ 169.063245][T10927] veth1_macvtap: entered promiscuous mode [ 169.074108][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.084730][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.094616][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.105211][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.115449][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.125998][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.135991][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.146674][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.156553][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.167345][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.177201][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.187637][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.197598][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.208046][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.221133][T10927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.232972][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.243666][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.253517][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.264018][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.274150][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.284709][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.294567][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.305011][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.314962][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.325436][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.335255][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.345764][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.355637][T10927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.366097][T10927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.386509][T10927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.405513][T10927] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.414361][T10927] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.423434][T10927] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.432174][T10927] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.470154][T11061] loop4: detected capacity change from 0 to 128 [ 169.481835][T11061] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.496080][T11061] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.549851][T11061] netlink: 'syz.4.2132': attribute type 1 has an invalid length. [ 169.565629][ T6917] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.663277][T11084] loop4: detected capacity change from 0 to 1024 [ 169.679664][T11089] loop1: detected capacity change from 0 to 512 [ 169.688027][T11089] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 169.698956][T11089] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 169.700144][T11084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.714256][T11089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.733498][T11089] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 3: comm syz.1.2129: lblock 0 mapped to illegal pblock 3 (length 1) [ 169.749022][T11089] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2129: error -117 reading directory block [ 169.802823][T11089] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 3: comm syz.1.2129: lblock 0 mapped to illegal pblock 3 (length 1) [ 169.831597][T11089] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2129: error -117 reading directory block [ 169.852004][T11098] can: request_module (can-proto-0) failed. [ 169.944309][T11112] loop3: detected capacity change from 0 to 512 [ 169.956891][T11112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.971447][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.985543][T11112] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.037197][T10657] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.066857][ T29] audit: type=1400 audit(2000001129.048:2055): avc: denied { create } for pid=11120 comm="syz.4.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 170.118774][ T29] audit: type=1400 audit(2000001129.098:2056): avc: denied { getopt } for pid=11120 comm="syz.4.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.173944][T11122] loop4: detected capacity change from 0 to 4096 [ 170.184692][T11122] ext4: Unknown parameter 'func' [ 170.261342][T11131] netlink: 'syz.3.2138': attribute type 21 has an invalid length. [ 170.269233][T11131] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2138'. [ 170.520804][T10892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.594408][T11186] loop1: detected capacity change from 0 to 1024 [ 170.609949][T11192] netlink: 'syz.3.2150': attribute type 29 has an invalid length. [ 170.632081][T11186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.669083][T11203] loop3: detected capacity change from 0 to 1024 [ 170.686376][T11203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.699180][T11203] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.744869][ T29] audit: type=1400 audit(2000001129.728:2057): avc: denied { ioctl } for pid=11202 comm="syz.3.2154" path="socket:[38106]" dev="sockfs" ino=38106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.753776][T11214] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 170.806022][T10657] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.821555][T11223] loop3: detected capacity change from 0 to 256 [ 170.827992][T11223] vfat: Bad value for 'uid' [ 170.832496][T11223] vfat: Bad value for 'uid' [ 170.858535][T11226] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 170.868016][ T29] audit: type=1400 audit(2000001129.848:2058): avc: denied { relabelto } for pid=11224 comm="syz.0.2167" name="file0" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 170.895099][ T29] audit: type=1400 audit(2000001129.848:2059): avc: denied { associate } for pid=11224 comm="syz.0.2167" name="file0" dev="tmpfs" ino=304 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lib_t:s0" [ 170.923226][T10892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.945209][ T29] audit: type=1400 audit(2000001129.918:2060): avc: denied { unlink } for pid=10418 comm="syz-executor" name="file0" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 171.078929][ T29] audit: type=1326 audit(2000001130.058:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.0.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 171.135090][ T29] audit: type=1326 audit(2000001130.088:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.0.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 171.158761][ T29] audit: type=1326 audit(2000001130.088:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.0.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 171.182333][ T29] audit: type=1326 audit(2000001130.088:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.0.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 171.312006][T11182] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.360446][T11246] unsupported nla_type 10272 [ 171.370420][T11182] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.418192][T11258] loop4: detected capacity change from 0 to 256 [ 171.418227][T11182] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.529117][T11182] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.587992][T11251] lo speed is unknown, defaulting to 1000 [ 171.628484][T11182] bridge_slave_1: left allmulticast mode [ 171.634234][T11182] bridge_slave_1: left promiscuous mode [ 171.639933][T11182] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.649408][T11182] bridge_slave_0: left allmulticast mode [ 171.655186][T11182] bridge_slave_0: left promiscuous mode [ 171.660942][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.746037][T11276] sctp: [Deprecated]: syz.2.2169 (pid 11276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.746037][T11276] Use struct sctp_sack_info instead [ 171.778112][T11182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.788745][T11182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.798732][T11182] bond0 (unregistering): Released all slaves [ 171.833725][T11251] chnl_net:caif_netlink_parms(): no params data found [ 171.866939][T11251] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.874155][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.881426][T11251] bridge_slave_0: entered allmulticast mode [ 171.889027][T11251] bridge_slave_0: entered promiscuous mode [ 171.895983][T11251] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.903022][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.910355][T11251] bridge_slave_1: entered allmulticast mode [ 171.916925][T11251] bridge_slave_1: entered promiscuous mode [ 171.924778][T11182] hsr_slave_0: left promiscuous mode [ 171.930359][T11182] hsr_slave_1: left promiscuous mode [ 171.936293][T11182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.943702][T11182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.951366][T11182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.958778][T11182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.968151][T11182] veth1_macvtap: left promiscuous mode [ 171.973618][T11182] veth0_macvtap: left promiscuous mode [ 171.979180][T11182] veth1_vlan: left promiscuous mode [ 171.984407][T11182] veth0_vlan: left promiscuous mode [ 172.012182][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88810cecb000: rx timeout, send abort [ 172.020523][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88810cecb200: rx timeout, send abort [ 172.028888][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88810cecb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.043309][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88810cecb200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.114021][T11182] team0 (unregistering): Port device team_slave_1 removed [ 172.125018][T11182] team0 (unregistering): Port device team_slave_0 removed [ 172.175659][T11251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.186445][T11251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.207238][T11251] team0: Port device team_slave_0 added [ 172.213452][T11251] team0: Port device team_slave_1 added [ 172.229252][T11251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.236316][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.262371][T11251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.276343][T11251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.283392][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.309470][T11251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.338361][T11251] hsr_slave_0: entered promiscuous mode [ 172.344411][T11251] hsr_slave_1: entered promiscuous mode [ 172.350549][T11251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.358306][T11251] Cannot create hsr debugfs directory [ 172.386862][T11304] loop4: detected capacity change from 0 to 4096 [ 172.393431][T11304] EXT4-fs: Ignoring removed nobh option [ 172.399062][T11304] EXT4-fs: Ignoring removed i_version option [ 172.406841][T11304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.497365][T11182] IPVS: stop unused estimator thread 0... [ 172.606477][T11313] pimreg: entered allmulticast mode [ 172.699364][T11251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.711191][T11251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.719756][T11251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.742969][T11251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.767000][T11251] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.774104][T11251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.781522][T11251] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.788715][T11251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.801496][T11315] xt_CT: No such helper "syz0" [ 172.852561][T11251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.864447][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.874537][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.889880][T11251] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.901493][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.908603][T11179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.925470][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.932559][T11178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.953176][T11251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.963616][T11251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.998257][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 173.011704][T11323] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.020529][T11323] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.029492][T11323] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.038430][T11323] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.049508][T11323] vxlan0: entered promiscuous mode [ 173.117982][T11251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.219089][T11251] veth0_vlan: entered promiscuous mode [ 173.231508][T11251] veth1_vlan: entered promiscuous mode [ 173.248992][T11251] veth0_macvtap: entered promiscuous mode [ 173.258964][T11251] veth1_macvtap: entered promiscuous mode [ 173.266093][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.270922][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.285625][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.295536][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.306001][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.315872][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.326329][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.336272][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.347014][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.357120][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.367587][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.377412][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.387942][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.397771][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.408221][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.420240][T11251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.451651][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.462175][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.472190][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.482686][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.492758][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.503169][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.513116][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.523636][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.533614][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.544072][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.553939][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.564418][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.574299][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.584942][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.597503][T11251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.606389][T11251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.615170][T11251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.623863][T11251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.632647][T11251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.780187][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2162'. [ 173.847911][T11363] netlink: 'syz.3.2187': attribute type 12 has an invalid length. [ 173.855827][T11363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2187'. [ 173.873546][T11363] loop3: detected capacity change from 0 to 512 [ 173.891718][T11363] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2187: corrupted in-inode xattr: invalid ea_ino [ 173.914337][T11363] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2187: couldn't read orphan inode 15 (err -117) [ 173.927816][T11363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.950683][T11363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=11363 comm=syz.3.2187 [ 173.963707][T11363] netlink: 'syz.3.2187': attribute type 13 has an invalid length. [ 174.009757][T11363] gretap0: refused to change device tx_queue_len [ 174.016861][T11363] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.046076][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.081864][T11389] loop3: detected capacity change from 0 to 1024 [ 174.098129][T11389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.238833][T11410] macvlan0: entered allmulticast mode [ 174.244476][T11410] veth1_vlan: entered allmulticast mode [ 174.254036][T11410] pim6reg: entered allmulticast mode [ 174.338196][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.633731][T11422] lo speed is unknown, defaulting to 1000 [ 175.034353][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'. [ 175.059164][T11454] loop3: detected capacity change from 0 to 512 [ 175.066422][T11454] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 175.078867][T11453] loop3: detected capacity change from 0 to 512 [ 175.124929][T11461] loop1: detected capacity change from 0 to 1024 [ 175.137056][T11461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.163839][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 175.163852][ T29] audit: type=1400 audit(2000001134.138:2433): avc: denied { setattr } for pid=11464 comm="syz.0.2214" name="PACKET" dev="sockfs" ino=39452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.287673][ T29] audit: type=1326 audit(2000001134.268:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.341809][ T29] audit: type=1326 audit(2000001134.298:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.365399][ T29] audit: type=1326 audit(2000001134.308:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.388908][ T29] audit: type=1326 audit(2000001134.308:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.412519][ T29] audit: type=1326 audit(2000001134.308:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.436522][ T29] audit: type=1326 audit(2000001134.308:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.460297][ T29] audit: type=1326 audit(2000001134.308:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.484023][ T29] audit: type=1326 audit(2000001134.308:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.507550][ T29] audit: type=1326 audit(2000001134.308:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cde0b99f9 code=0x7ffc0000 [ 175.582167][T10892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.733940][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 175.749225][T11505] lo speed is unknown, defaulting to 1000 [ 175.758495][T11509] loop3: detected capacity change from 0 to 256 [ 175.765374][T11509] msdos: Bad value for 'gid' [ 175.770080][T11509] msdos: Bad value for 'gid' [ 176.598008][T11547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2239'. [ 176.608044][T11547] loop1: detected capacity change from 0 to 128 [ 176.615860][T11547] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.629159][T11547] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.675254][T10892] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.731916][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2242'. [ 176.740979][T11556] lo speed is unknown, defaulting to 1000 [ 176.966727][T11575] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 177.060588][T11583] loop3: detected capacity change from 0 to 1024 [ 177.076322][T11583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.589515][T11590] loop1: detected capacity change from 0 to 512 [ 177.607440][T11590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.622882][T11590] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.635588][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.687245][T10892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.689201][T11594] loop3: detected capacity change from 0 to 512 [ 177.705940][T11594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.718590][T11594] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.764756][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.788379][ C0] vcan0: j1939_tp_rxtimer: 0xffff888114f36000: rx timeout, send abort [ 177.796654][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888114f36000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.849922][T11598] loop3: detected capacity change from 0 to 1024 [ 177.866975][T11598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.891169][T11606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2255'. [ 178.104855][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.600468][T11643] loop3: detected capacity change from 0 to 512 [ 178.610590][T11643] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 178.618847][T11643] EXT4-fs (loop3): orphan cleanup on readonly fs [ 178.628015][T11643] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2266: Failed to acquire dquot type 1 [ 178.641173][T11643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2266: bg 0: block 40: padding at end of block bitmap is not set [ 178.657237][T11643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 178.666462][T11643] EXT4-fs (loop3): 1 truncate cleaned up [ 178.672777][T11643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.688960][T11643] program syz.3.2266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.708224][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.803544][T11652] netlink: 'syz.3.2268': attribute type 66 has an invalid length. [ 179.454821][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'. [ 180.345160][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 180.345175][ T29] audit: type=1400 audit(2000001139.328:2811): avc: denied { connect } for pid=11693 comm="syz.4.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.098821][T11726] loop4: detected capacity change from 0 to 1024 [ 188.137952][T11726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.162224][T11719] lo speed is unknown, defaulting to 1000 [ 188.166200][T11726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.214622][T11745] loop3: detected capacity change from 0 to 2048 [ 188.226912][T11745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.246349][T11179] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.256791][T11179] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.280082][T11719] chnl_net:caif_netlink_parms(): no params data found [ 188.294043][T11755] netlink: 'syz.0.2303': attribute type 5 has an invalid length. [ 188.301869][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'. [ 188.321219][T11758] loop4: detected capacity change from 0 to 4096 [ 188.327914][T11758] ext4: Unknown parameter 'subj_role' [ 188.336227][T11179] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.346657][T11179] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.358314][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.394256][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.401470][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.410138][T11719] bridge_slave_0: entered allmulticast mode [ 188.416987][T11719] bridge_slave_0: entered promiscuous mode [ 188.424301][T11719] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.431652][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.440288][T11719] bridge_slave_1: entered allmulticast mode [ 188.446662][T11719] bridge_slave_1: entered promiscuous mode [ 188.456815][T11179] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.467264][T11179] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.481277][T11765] lo speed is unknown, defaulting to 1000 [ 188.508578][T11771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.509029][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.529434][ T29] audit: type=1326 audit(2000001147.508:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50eef99f9 code=0x7ffc0000 [ 188.554959][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.569159][T11771] loop4: detected capacity change from 0 to 512 [ 188.574099][ T29] audit: type=1326 audit(2000001147.548:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fa50eef99f9 code=0x7ffc0000 [ 188.598993][ T29] audit: type=1326 audit(2000001147.548:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50eef99f9 code=0x7ffc0000 [ 188.622554][ T29] audit: type=1326 audit(2000001147.548:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa50eef99f9 code=0x7ffc0000 [ 188.646155][ T29] audit: type=1326 audit(2000001147.548:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50eef99f9 code=0x7ffc0000 [ 188.669685][ T29] audit: type=1326 audit(2000001147.548:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa50eef99f9 code=0x7ffc0000 [ 188.693525][ T29] audit: type=1326 audit(2000001147.548:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa50eef9a33 code=0x7ffc0000 [ 188.716817][ T29] audit: type=1326 audit(2000001147.548:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa50eef84df code=0x7ffc0000 [ 188.740144][ T29] audit: type=1326 audit(2000001147.548:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa50eef9a87 code=0x7ffc0000 [ 188.763596][ T29] audit: type=1326 audit(2000001147.548:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11770 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa50eef8390 code=0x7ffc0000 [ 188.791273][T11179] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.801621][T11179] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.813039][T11771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.825664][T11771] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.863519][T11786] loop3: detected capacity change from 0 to 512 [ 188.863592][T11719] team0: Port device team_slave_0 added [ 188.875858][T11786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.878493][T11719] team0: Port device team_slave_1 added [ 188.930613][T11786] EXT4-fs (loop3): 1 truncate cleaned up [ 188.936825][T11786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.966395][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.004391][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.011446][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.037434][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.051886][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.058930][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.085006][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.107816][T11179] bridge_slave_1: left allmulticast mode [ 189.113485][T11179] bridge_slave_1: left promiscuous mode [ 189.119201][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.137820][T11179] bridge_slave_0: left allmulticast mode [ 189.143485][T11179] bridge_slave_0: left promiscuous mode [ 189.149297][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.159332][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.270990][T11179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.281506][T11179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.306829][T11179] bond0 (unregistering): Released all slaves [ 189.328488][T11824] loop3: detected capacity change from 0 to 1024 [ 189.350030][T11824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.352162][T11719] hsr_slave_0: entered promiscuous mode [ 189.368228][T11824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.372633][T11829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.392723][T11719] hsr_slave_1: entered promiscuous mode [ 189.404325][T11719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.416966][T11719] Cannot create hsr debugfs directory [ 189.435797][T11829] loop4: detected capacity change from 0 to 512 [ 189.470404][T11179] hsr_slave_0: left promiscuous mode [ 189.479249][T11829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.495587][T11829] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.539100][T11179] hsr_slave_1: left promiscuous mode [ 189.546520][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.557282][T11179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.564883][T11179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.623291][T11849] loop3: detected capacity change from 0 to 1024 [ 189.632938][T11179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.640445][T11179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.657243][T11179] veth1_macvtap: left promiscuous mode [ 189.662763][T11179] veth0_macvtap: left promiscuous mode [ 189.668329][T11179] veth1_vlan: left promiscuous mode [ 189.673583][T11179] veth0_vlan: left promiscuous mode [ 189.686074][T11849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.799068][T11179] team0 (unregistering): Port device team_slave_1 removed [ 189.814763][T11179] team0 (unregistering): Port device team_slave_0 removed [ 189.863502][T11839] netlink: 'syz.2.2329': attribute type 4 has an invalid length. [ 189.894233][T11845] netlink: 'syz.4.2330': attribute type 5 has an invalid length. [ 189.902027][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 190.014156][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.109608][T11870] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2338'. [ 190.118942][T11870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=11870 comm=syz.4.2338 [ 190.138601][T11877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=11877 comm=syz.3.2335 [ 190.170182][T11879] loop4: detected capacity change from 0 to 1024 [ 190.193777][T11879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.211535][T11879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.255199][T11719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.265564][T11719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.283441][T11889] netlink: 'syz.0.2344': attribute type 5 has an invalid length. [ 190.291316][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 190.300276][T11719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.315294][T11719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.329472][T11893] loop4: detected capacity change from 0 to 1024 [ 190.355907][T11893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.361839][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.396628][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.436699][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.443892][ T9741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.466783][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.473948][ T9741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.501178][T11719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.511763][T11719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.571691][T11719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.595282][T11923] loop3: detected capacity change from 0 to 1024 [ 190.611232][T11923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.623953][T11923] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.656710][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.661801][T11719] veth0_vlan: entered promiscuous mode [ 190.684930][T11719] veth1_vlan: entered promiscuous mode [ 190.719547][T11938] netlink: 'syz.0.2356': attribute type 5 has an invalid length. [ 190.727444][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 190.741543][T11719] veth0_macvtap: entered promiscuous mode [ 190.749363][T11943] FAULT_INJECTION: forcing a failure. [ 190.749363][T11943] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 190.749714][T11719] veth1_macvtap: entered promiscuous mode [ 190.762539][T11943] CPU: 1 UID: 0 PID: 11943 Comm: syz.3.2358 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 190.778966][T11943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 190.782463][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.789068][T11943] Call Trace: [ 190.789076][T11943] [ 190.789082][T11943] dump_stack_lvl+0xf2/0x150 [ 190.789113][T11943] dump_stack+0x15/0x20 [ 190.789136][T11943] should_fail_ex+0x229/0x230 [ 190.799614][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.802865][T11943] should_fail+0xb/0x10 [ 190.802889][T11943] should_fail_usercopy+0x1a/0x20 [ 190.805836][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.810362][T11943] _copy_from_user+0x1e/0xd0 [ 190.814515][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.819147][T11943] move_addr_to_kernel+0x82/0x120 [ 190.828938][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.833073][T11943] __sys_connect+0x74/0x1c0 [ 190.838085][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.848452][T11943] __x64_sys_connect+0x41/0x50 [ 190.848474][T11943] x64_sys_call+0x2220/0x2d60 [ 190.853042][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.862798][T11943] do_syscall_64+0xc9/0x1c0 [ 190.867939][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.867954][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.878328][T11943] ? clear_bhb_loop+0x55/0xb0 [ 190.878356][T11943] ? clear_bhb_loop+0x55/0xb0 [ 190.882829][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.892594][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.897366][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.901985][T11943] RIP: 0033:0x7f52e51099f9 [ 190.912377][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.916836][T11943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.926719][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.936996][T11943] RSP: 002b:00007f52e3d87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 190.941659][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.946308][T11943] RAX: ffffffffffffffda RBX: 00007f52e52a5f80 RCX: 00007f52e51099f9 [ 190.946329][T11943] RDX: 0000000000000010 RSI: 0000000020000400 RDI: 0000000000000003 [ 190.946375][T11943] RBP: 00007f52e3d87090 R08: 0000000000000000 R09: 0000000000000000 [ 190.946389][T11943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.946401][T11943] R13: 0000000000000000 R14: 00007f52e52a5f80 R15: 00007ffdcde43338 [ 190.960591][T11719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.962031][T11943] [ 190.973915][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.991856][T11945] loop4: detected capacity change from 0 to 1024 [ 191.006352][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.006374][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.025403][T11945] EXT4-fs (loop4): invalid inodes per group: 0 [ 191.025403][T11945] [ 191.096360][T11953] loop3: detected capacity change from 0 to 4096 [ 191.097163][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.105177][T11953] ext4: Unknown parameter 'subj_role' [ 191.113090][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.164298][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.174115][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.184562][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.194656][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.205079][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.214895][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.225560][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.235416][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.245914][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.259086][T11719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.279103][T11719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.288082][T11719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.296912][T11719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.305690][T11719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.335252][T11958] loop3: detected capacity change from 0 to 512 [ 191.337048][T11960] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 191.444757][T11971] FAULT_INJECTION: forcing a failure. [ 191.444757][T11971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.458052][T11971] CPU: 0 UID: 0 PID: 11971 Comm: syz.0.2369 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 191.468819][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 191.478885][T11971] Call Trace: [ 191.482215][T11971] [ 191.485216][T11971] dump_stack_lvl+0xf2/0x150 [ 191.489817][T11971] dump_stack+0x15/0x20 [ 191.494003][T11971] should_fail_ex+0x229/0x230 [ 191.498758][T11971] should_fail+0xb/0x10 [ 191.502963][T11971] should_fail_usercopy+0x1a/0x20 [ 191.507997][T11971] _copy_to_user+0x1e/0xa0 [ 191.512505][T11971] simple_read_from_buffer+0xa0/0x110 [ 191.517952][T11971] proc_fail_nth_read+0xfc/0x140 [ 191.522951][T11971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.528564][T11971] vfs_read+0x1a2/0x6e0 [ 191.532767][T11971] ? __rcu_read_unlock+0x4e/0x70 [ 191.537714][T11971] ? __fget_files+0x1da/0x210 [ 191.542474][T11971] ksys_read+0xeb/0x1b0 [ 191.546729][T11971] __x64_sys_read+0x42/0x50 [ 191.551245][T11971] x64_sys_call+0x27d3/0x2d60 [ 191.556053][T11971] do_syscall_64+0xc9/0x1c0 [ 191.560565][T11971] ? clear_bhb_loop+0x55/0xb0 [ 191.565253][T11971] ? clear_bhb_loop+0x55/0xb0 [ 191.569955][T11971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.575920][T11971] RIP: 0033:0x7f0cde0b843c [ 191.580339][T11971] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 191.600022][T11971] RSP: 002b:00007f0cdcd37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.608467][T11971] RAX: ffffffffffffffda RBX: 00007f0cde255f80 RCX: 00007f0cde0b843c [ 191.616518][T11971] RDX: 000000000000000f RSI: 00007f0cdcd370a0 RDI: 0000000000000004 [ 191.624761][T11971] RBP: 00007f0cdcd37090 R08: 0000000000000000 R09: 0000000000000000 [ 191.632747][T11971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.637234][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811508aa00: rx timeout, send abort [ 191.640712][T11971] R13: 0000000000000000 R14: 00007f0cde255f80 R15: 00007ffcdcd8c028 [ 191.640733][T11971] [ 191.737303][T11992] netlink: 'syz.0.2376': attribute type 5 has an invalid length. [ 191.745248][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 192.098414][T12037] loop4: detected capacity change from 0 to 4096 [ 192.106552][T12039] netlink: 'syz.0.2388': attribute type 5 has an invalid length. [ 192.114308][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 192.119049][T12037] ext4: Unknown parameter 'subj_role' [ 192.148927][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811508aa00: abort rx timeout. Force session deactivation [ 192.187896][T12047] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2392'. [ 192.199533][T12041] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2389' sets config #1 [ 192.219802][T12041] netlink: 'syz.2.2389': attribute type 2 has an invalid length. [ 192.227709][T12041] netlink: 'syz.2.2389': attribute type 8 has an invalid length. [ 192.235525][T12041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2389'. [ 192.345791][T12066] loop3: detected capacity change from 0 to 1024 [ 192.383773][T12071] loop1: detected capacity change from 0 to 4096 [ 192.390588][T12071] ext4: Unknown parameter 'subj_role' [ 192.401498][T12066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.415637][T12077] netlink: 'syz.4.2402': attribute type 1 has an invalid length. [ 192.449293][T12077] bond0: entered promiscuous mode [ 192.467771][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 192.484267][T12077] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 192.497125][T12077] bond0: (slave ip6gretap1): making interface the new active one [ 192.505101][T12077] ip6gretap1: entered promiscuous mode [ 192.511952][T12077] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 192.523044][T12077] bond0: left promiscuous mode [ 192.528084][T12077] ip6gretap1: left promiscuous mode [ 192.533527][T12077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.560772][T12077] loop4: detected capacity change from 0 to 1024 [ 192.584759][T12077] EXT4-fs: Ignoring removed nobh option [ 192.605410][T12077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.635113][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811508ba00: rx timeout, send abort [ 192.660295][T12117] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 3, id = 0 [ 192.697969][T12122] loop1: detected capacity change from 0 to 1024 [ 192.704732][T12122] ext4: Unknown parameter 'memory.events' [ 192.715325][T12120] lo speed is unknown, defaulting to 1000 [ 192.730419][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.746311][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.761231][T12132] random: crng reseeded on system resumption [ 192.788567][T12133] loop1: detected capacity change from 0 to 512 [ 192.806726][T12133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.820991][T12133] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.848400][T11719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.883913][T12151] loop1: detected capacity change from 0 to 136 [ 192.988901][T12163] loop1: detected capacity change from 0 to 764 [ 193.002169][T12163] rock: directory entry would overflow storage [ 193.008454][T12163] rock: sig=0x4654, size=5, remaining=4 [ 193.044468][T12174] loop4: detected capacity change from 0 to 1024 [ 193.057185][T12174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.085235][T12174] program syz.4.2432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.133662][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.133716][T12189] hsr0: entered promiscuous mode [ 193.147681][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811508ba00: abort rx timeout. Force session deactivation [ 193.175086][T12189] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.187260][T12189] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 193.213285][T12189] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 193.217593][T12193] loop3: detected capacity change from 0 to 4096 [ 193.225792][T12189] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 193.233580][T12193] ext4: Unknown parameter 'subj_role' [ 193.286366][T12205] loop3: detected capacity change from 0 to 256 [ 193.332643][T12216] loop4: detected capacity change from 0 to 1024 [ 193.343846][T12220] validate_nla: 4 callbacks suppressed [ 193.343860][T12220] netlink: 'syz.2.2437': attribute type 10 has an invalid length. [ 193.359058][T12220] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.362534][T12216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.427731][T12228] netlink: 'syz.2.2446': attribute type 5 has an invalid length. [ 193.435578][T12228] __nla_validate_parse: 4 callbacks suppressed [ 193.435601][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'. [ 193.528492][T12234] FAULT_INJECTION: forcing a failure. [ 193.528492][T12234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.541681][T12234] CPU: 1 UID: 0 PID: 12234 Comm: syz.2.2448 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 193.552530][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 193.562641][T12234] Call Trace: [ 193.565971][T12234] [ 193.568946][T12234] dump_stack_lvl+0xf2/0x150 [ 193.573534][T12234] dump_stack+0x15/0x20 [ 193.577684][T12234] should_fail_ex+0x229/0x230 [ 193.582365][T12234] should_fail+0xb/0x10 [ 193.586516][T12234] should_fail_usercopy+0x1a/0x20 [ 193.591720][T12234] _copy_from_user+0x1e/0xd0 [ 193.596303][T12234] usbdev_ioctl+0xabe/0x3e10 [ 193.600950][T12234] ? do_vfs_ioctl+0x99e/0x1560 [ 193.605706][T12234] ? selinux_file_ioctl+0x2f7/0x380 [ 193.610983][T12234] ? __fget_files+0x1da/0x210 [ 193.615659][T12234] ? __pfx_usbdev_ioctl+0x10/0x10 [ 193.620673][T12234] __se_sys_ioctl+0xd3/0x150 [ 193.625366][T12234] __x64_sys_ioctl+0x43/0x50 [ 193.629948][T12234] x64_sys_call+0x15cc/0x2d60 [ 193.634623][T12234] do_syscall_64+0xc9/0x1c0 [ 193.639167][T12234] ? clear_bhb_loop+0x55/0xb0 [ 193.643863][T12234] ? clear_bhb_loop+0x55/0xb0 [ 193.648540][T12234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.654440][T12234] RIP: 0033:0x7fa2b4ee99f9 [ 193.658939][T12234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.678623][T12234] RSP: 002b:00007fa2b3b61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.687112][T12234] RAX: ffffffffffffffda RBX: 00007fa2b5085f80 RCX: 00007fa2b4ee99f9 [ 193.695076][T12234] RDX: 0000000020000140 RSI: 00000000c0185500 RDI: 0000000000000003 [ 193.703094][T12234] RBP: 00007fa2b3b61090 R08: 0000000000000000 R09: 0000000000000000 [ 193.711056][T12234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.719016][T12234] R13: 0000000000000000 R14: 00007fa2b5085f80 R15: 00007fffee237d08 [ 193.727010][T12234] [ 193.832006][T12249] 9pnet: p9_errstr2errno: server reported unknown error ¥Š [ 193.891945][T12255] netlink: 'syz.2.2457': attribute type 5 has an invalid length. [ 193.895619][T12253] loop1: detected capacity change from 0 to 4096 [ 193.899744][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 193.910864][T12253] ext4: Unknown parameter 'subj_role' [ 193.921333][T11251] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 193.928976][T11251] FAT-fs (loop3): Filesystem has been set read-only [ 193.933665][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 193.946112][T11251] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 193.978748][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 193.978823][ T29] audit: type=1326 audit(2000001664.955:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.1.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.008689][ T29] audit: type=1326 audit(2000001664.955:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.1.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.032387][ T29] audit: type=1326 audit(2000001664.955:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.1.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.055896][ T29] audit: type=1326 audit(2000001664.955:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.1.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.079429][ T29] audit: type=1326 audit(2000001664.955:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.1.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.102929][ T29] audit: type=1326 audit(2000001664.955:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.1.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.126429][ T29] audit: type=1326 audit(2000001664.955:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.1.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.149931][ T29] audit: type=1326 audit(2000001664.955:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.1.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.176964][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.202348][T12262] 9pnet: Could not find request transport: fd’ Å [ 194.212124][ T29] audit: type=1400 audit(2000001665.195:2917): avc: denied { connect } for pid=12261 comm="syz.4.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.244096][T12265] FAULT_INJECTION: forcing a failure. [ 194.244096][T12265] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 194.257520][T12265] CPU: 0 UID: 0 PID: 12265 Comm: syz.1.2462 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 194.268279][T12265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 194.278330][T12265] Call Trace: [ 194.281603][T12265] [ 194.284576][T12265] dump_stack_lvl+0xf2/0x150 [ 194.289179][T12265] dump_stack+0x15/0x20 [ 194.293411][T12265] should_fail_ex+0x229/0x230 [ 194.298153][T12265] should_fail_alloc_page+0xfd/0x110 [ 194.303507][T12265] __alloc_pages_noprof+0x109/0x360 [ 194.308725][T12265] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 194.314104][T12265] alloc_pages_noprof+0xe1/0x100 [ 194.319071][T12265] get_free_pages_noprof+0xc/0x30 [ 194.324095][T12265] do_proc_control+0x174/0x850 [ 194.328897][T12265] ? should_fail_ex+0xd7/0x230 [ 194.333704][T12265] usbdev_ioctl+0x1bbf/0x3e10 [ 194.338375][T12265] ? do_vfs_ioctl+0x99e/0x1560 [ 194.343222][T12265] ? selinux_file_ioctl+0x2f7/0x380 [ 194.348447][T12265] ? __fget_files+0x1da/0x210 [ 194.353141][T12265] ? __pfx_usbdev_ioctl+0x10/0x10 [ 194.358154][T12265] __se_sys_ioctl+0xd3/0x150 [ 194.362806][T12265] __x64_sys_ioctl+0x43/0x50 [ 194.367441][T12265] x64_sys_call+0x15cc/0x2d60 [ 194.372184][T12265] do_syscall_64+0xc9/0x1c0 [ 194.376726][T12265] ? clear_bhb_loop+0x55/0xb0 [ 194.381490][T12265] ? clear_bhb_loop+0x55/0xb0 [ 194.386208][T12265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.392140][T12265] RIP: 0033:0x7fbe3f3099f9 [ 194.396601][T12265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.416200][T12265] RSP: 002b:00007fbe3df87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.424600][T12265] RAX: ffffffffffffffda RBX: 00007fbe3f4a5f80 RCX: 00007fbe3f3099f9 [ 194.432576][T12265] RDX: 0000000020000140 RSI: 00000000c0185500 RDI: 0000000000000003 [ 194.440535][T12265] RBP: 00007fbe3df87090 R08: 0000000000000000 R09: 0000000000000000 [ 194.448565][T12265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.456555][T12265] R13: 0000000000000000 R14: 00007fbe3f4a5f80 R15: 00007ffcd5823a48 [ 194.464518][T12265] [ 194.493068][T11179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.559605][T12275] FAULT_INJECTION: forcing a failure. [ 194.559605][T12275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.572790][T12275] CPU: 0 UID: 0 PID: 12275 Comm: syz.1.2466 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 194.583565][T12275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 194.593764][T12275] Call Trace: [ 194.597046][T12275] [ 194.599969][T12275] dump_stack_lvl+0xf2/0x150 [ 194.604569][T12275] dump_stack+0x15/0x20 [ 194.608829][T12275] should_fail_ex+0x229/0x230 [ 194.613507][T12275] should_fail+0xb/0x10 [ 194.617710][T12275] should_fail_usercopy+0x1a/0x20 [ 194.622730][T12275] _copy_to_user+0x1e/0xa0 [ 194.627299][T12275] simple_read_from_buffer+0xa0/0x110 [ 194.632669][T12275] proc_fail_nth_read+0xfc/0x140 [ 194.637600][T12275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.643151][T12275] vfs_read+0x1a2/0x6e0 [ 194.647366][T12275] ? __rcu_read_unlock+0x4e/0x70 [ 194.652311][T12275] ? __fget_files+0x1da/0x210 [ 194.657043][T12275] ksys_read+0xeb/0x1b0 [ 194.661198][T12275] __x64_sys_read+0x42/0x50 [ 194.665724][T12275] x64_sys_call+0x27d3/0x2d60 [ 194.670397][T12275] do_syscall_64+0xc9/0x1c0 [ 194.674899][T12275] ? clear_bhb_loop+0x55/0xb0 [ 194.679638][T12275] ? clear_bhb_loop+0x55/0xb0 [ 194.684314][T12275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.690200][T12275] RIP: 0033:0x7fbe3f30843c [ 194.694669][T12275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 194.714328][T12275] RSP: 002b:00007fbe3df87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.722739][T12275] RAX: ffffffffffffffda RBX: 00007fbe3f4a5f80 RCX: 00007fbe3f30843c [ 194.730699][T12275] RDX: 000000000000000f RSI: 00007fbe3df870a0 RDI: 0000000000000005 [ 194.738658][T12275] RBP: 00007fbe3df87090 R08: 0000000000000000 R09: 0000000000000000 [ 194.746616][T12275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.754575][T12275] R13: 0000000000000000 R14: 00007fbe3f4a5f80 R15: 00007ffcd5823a48 [ 194.762598][T12275] [ 194.801389][T12289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2471'. [ 194.813812][T11179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.858394][T11179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.882537][T12278] lo speed is unknown, defaulting to 1000 [ 194.900013][ T29] audit: type=1326 audit(2000001665.875:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 194.952786][T12309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.974203][T11179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.003942][T12278] chnl_net:caif_netlink_parms(): no params data found [ 195.029123][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2477'. [ 195.068768][T12307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21016 sclass=netlink_route_socket pid=12307 comm=syz.0.2477 [ 195.083735][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.090859][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.098777][T12278] bridge_slave_0: entered allmulticast mode [ 195.105749][T12278] bridge_slave_0: entered promiscuous mode [ 195.114197][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.121447][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.128883][T12278] bridge_slave_1: entered allmulticast mode [ 195.135404][T12278] bridge_slave_1: entered promiscuous mode [ 195.166656][T12329] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 195.185693][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.196902][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.225825][T12278] team0: Port device team_slave_0 added [ 195.234795][T12278] team0: Port device team_slave_1 added [ 195.249654][T11179] bridge_slave_1: left allmulticast mode [ 195.255375][T11179] bridge_slave_1: left promiscuous mode [ 195.261276][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.271296][T11179] bridge_slave_0: left allmulticast mode [ 195.277045][T11179] bridge_slave_0: left promiscuous mode [ 195.282791][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.296865][T12342] loop1: detected capacity change from 0 to 512 [ 195.317449][T12342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.337754][T12342] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.389491][T11179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.401086][T11179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.411552][T11179] bond0 (unregistering): Released all slaves [ 195.442299][T12342] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #20: comm syz.1.2489: corrupted inode contents [ 195.458268][T12278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.465265][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.491348][T12278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.501973][T12342] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #20: comm syz.1.2489: mark_inode_dirty error [ 195.519590][T12342] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #20: comm syz.1.2489: corrupted inode contents [ 195.531673][T12342] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #20: comm syz.1.2489: mark_inode_dirty error [ 195.545403][T12342] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #20: comm syz.1.2489: mark inode dirty (error -117) [ 195.561311][T12363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.572105][T12342] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 195.592809][T12278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.599808][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.625811][T12278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.652960][T11719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.687122][T12278] hsr_slave_0: entered promiscuous mode [ 195.708751][T12278] hsr_slave_1: entered promiscuous mode [ 195.717713][T12278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.729595][T12278] Cannot create hsr debugfs directory [ 195.739631][T11179] hsr_slave_0: left promiscuous mode [ 195.755176][T11179] hsr_slave_1: left promiscuous mode [ 195.762306][T11179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.769826][T11179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.778314][T11179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.785916][T11179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.795784][T11179] veth1_macvtap: left promiscuous mode [ 195.801263][T11179] veth0_macvtap: left promiscuous mode [ 195.806994][T11179] veth1_vlan: left promiscuous mode [ 195.812421][T11179] veth0_vlan: left promiscuous mode [ 195.886520][T12406] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.937239][T11179] team0 (unregistering): Port device team_slave_1 removed [ 195.948202][T11179] team0 (unregistering): Port device team_slave_0 removed [ 196.259742][T12436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.404004][T12278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.436170][T12278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.454892][T12438] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2520'. [ 196.464076][T12278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.487425][T12278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.590407][T12278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.621248][T12278] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.654059][T11177] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.661201][T11177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.688573][T11177] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.695699][T11177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.845814][T12278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.940443][T12458] loop1: detected capacity change from 0 to 256 [ 197.013568][T12278] veth0_vlan: entered promiscuous mode [ 197.053510][T12464] loop1: detected capacity change from 0 to 1024 [ 197.061258][T12278] veth1_vlan: entered promiscuous mode [ 197.081401][T12278] veth0_macvtap: entered promiscuous mode [ 197.090942][T12278] veth1_macvtap: entered promiscuous mode [ 197.099341][T12464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.112406][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.123046][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.133063][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.134804][T12464] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.143578][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.162313][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.172766][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.182638][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.193175][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.203073][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.213547][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.223431][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.233925][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.243766][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.254203][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.267351][T12278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.276063][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.286520][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.296425][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.306864][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.316697][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.327125][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.337025][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.347467][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.357359][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.367813][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.377659][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.388096][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.397931][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.408403][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.421204][T12278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.436920][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2528'. [ 197.455848][T12278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.464630][T12278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.473383][T12278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.473494][T12475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.482166][T12278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.507944][T12473] loop1: detected capacity change from 0 to 4096 [ 197.516616][T12473] ext4: Unknown parameter 'subj_role' [ 197.616644][T12486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.678609][T12495] loop4: detected capacity change from 0 to 1024 [ 197.697264][T12499] loop3: detected capacity change from 0 to 1024 [ 197.705034][T12495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.718853][T12499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.733349][T12495] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.742665][T12499] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.766411][T12278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.820563][T12509] loop3: detected capacity change from 0 to 4096 [ 197.833583][T12509] ext4: Unknown parameter 'subj_role' [ 197.854879][T12512] loop4: detected capacity change from 0 to 256 [ 197.954761][T12517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2544'. [ 197.967345][T12517] loop3: detected capacity change from 0 to 512 [ 197.973956][T12517] EXT4-fs (loop3): bad block size 8192 [ 198.382932][T12522] loop3: detected capacity change from 0 to 4096 [ 198.392005][T12522] ext4: Unknown parameter 'subj_role' [ 198.508365][T12536] loop3: detected capacity change from 0 to 512 [ 198.515130][T12536] ext4: Unknown parameter 'appraise_type' [ 198.523480][T12536] loop3: detected capacity change from 0 to 256 [ 198.556947][T12536] FAT-fs (loop3): codepage cp866 not found [ 198.659399][T12553] loop1: detected capacity change from 0 to 4096 [ 198.666038][T12553] ext4: Unknown parameter 'subj_role' [ 198.690352][T12556] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2559'. [ 198.759181][T12556] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2559'. [ 198.903202][T12565] loop4: detected capacity change from 0 to 1764 [ 199.379039][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 199.379052][ T29] audit: type=1400 audit(2000001670.355:3022): avc: denied { unmount } for pid=12278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 199.416249][T12623] loop3: detected capacity change from 0 to 128 [ 199.426577][T12624] loop4: detected capacity change from 0 to 512 [ 199.438539][T12624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.471557][T12624] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2582: bg 0: block 144: padding at end of block bitmap is not set [ 199.572404][ T6917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.754072][ T29] audit: type=1400 audit(2000001670.725:3023): avc: denied { create } for pid=12651 comm="syz.0.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.797986][T12656] loop4: detected capacity change from 0 to 1024 [ 199.819390][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2594'. [ 199.828886][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2594'. [ 199.839883][T12656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.852891][T12656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.894395][T12578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.956934][T12670] loop4: detected capacity change from 0 to 512 [ 199.968413][T12670] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 199.999431][T12669] loop3: detected capacity change from 0 to 4096 [ 200.006553][T12669] ext4: Unknown parameter 'subj_role' [ 200.033945][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2598'. [ 200.116972][ T29] audit: type=1326 audit(2000001671.095:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz.1.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 200.149970][ T29] audit: type=1326 audit(2000001671.115:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz.1.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 200.173565][ T29] audit: type=1326 audit(2000001671.115:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz.1.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 200.197127][ T29] audit: type=1326 audit(2000001671.115:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz.1.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 200.220671][ T29] audit: type=1326 audit(2000001671.115:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz.1.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 200.244190][ T29] audit: type=1326 audit(2000001671.115:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz.1.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 200.267780][ T29] audit: type=1326 audit(2000001671.115:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz.1.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 200.291271][ T29] audit: type=1326 audit(2000001671.115:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12690 comm="syz.1.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f3099f9 code=0x7ffc0000 [ 200.358616][T12697] loop3: detected capacity change from 0 to 2048 [ 200.380924][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 200.465047][T12697] loop3: p1 < > p4 [ 200.469656][T12697] loop3: p4 size 8388608 extends beyond EOD, truncated [ 200.505351][T12700] loop1: detected capacity change from 0 to 1024 [ 200.531340][T12702] loop3: detected capacity change from 0 to 128 [ 200.538235][T12702] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.539003][T12700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.565267][T12702] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.575673][T12700] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.682523][T12707] lo speed is unknown, defaulting to 1000 [ 200.819593][T12708] syzkaller0: entered promiscuous mode [ 200.825176][T12708] syzkaller0: entered allmulticast mode [ 201.444133][T12725] FAULT_INJECTION: forcing a failure. [ 201.444133][T12725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.457321][T12725] CPU: 1 UID: 0 PID: 12725 Comm: syz.3.2619 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 201.468089][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 201.478184][T12725] Call Trace: [ 201.481459][T12725] [ 201.484454][T12725] dump_stack_lvl+0xf2/0x150 [ 201.489061][T12725] dump_stack+0x15/0x20 [ 201.493299][T12725] should_fail_ex+0x229/0x230 [ 201.498091][T12725] should_fail+0xb/0x10 [ 201.502256][T12725] should_fail_usercopy+0x1a/0x20 [ 201.507306][T12725] _copy_from_user+0x1e/0xd0 [ 201.511970][T12725] kstrtouint_from_user+0x76/0xe0 [ 201.517002][T12725] proc_fail_nth_write+0x4f/0x160 [ 201.522042][T12725] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.527714][T12725] vfs_write+0x28b/0x900 [ 201.532060][T12725] ? __fget_files+0x1da/0x210 [ 201.536847][T12725] ksys_write+0xeb/0x1b0 [ 201.541123][T12725] __x64_sys_write+0x42/0x50 [ 201.545727][T12725] x64_sys_call+0x27dd/0x2d60 [ 201.550420][T12725] do_syscall_64+0xc9/0x1c0 [ 201.554940][T12725] ? clear_bhb_loop+0x55/0xb0 [ 201.559693][T12725] ? clear_bhb_loop+0x55/0xb0 [ 201.564447][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.570343][T12725] RIP: 0033:0x7f210b0884df [ 201.574758][T12725] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 201.594517][T12725] RSP: 002b:00007f2109d07030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 201.602964][T12725] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f210b0884df [ 201.610935][T12725] RDX: 0000000000000001 RSI: 00007f2109d070a0 RDI: 0000000000000004 [ 201.618917][T12725] RBP: 00007f2109d07090 R08: 0000000000000000 R09: 0000000000000000 [ 201.626945][T12725] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 201.635113][T12725] R13: 0000000000000000 R14: 00007f210b225f80 R15: 00007ffc10cb5b88 [ 201.643118][T12725] [ 201.816079][T12736] loop3: detected capacity change from 0 to 2048 [ 201.850916][T12736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.877493][T12735] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.948904][T12278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.052765][T12747] loop3: detected capacity change from 0 to 4096 [ 202.064946][T12747] ext4: Unknown parameter 'subj_role' [ 202.167983][T12767] ================================================================== [ 202.176095][T12767] BUG: KCSAN: data-race in mas_wr_modify / mtree_range_walk [ 202.183384][T12767] [ 202.185698][T12767] write to 0xffff888104173610 of 8 bytes by task 12763 on cpu 0: [ 202.193497][T12767] mas_wr_modify+0x155c/0x3c90 [ 202.198272][T12767] mas_wr_store_entry+0x250/0x390 [ 202.203304][T12767] mas_store_prealloc+0x151/0x2b0 [ 202.208330][T12767] vma_expand+0x57f/0x660 [ 202.212666][T12767] mmap_region+0x80c/0x1620 [ 202.217167][T12767] do_mmap+0x72a/0xb70 [ 202.221235][T12767] vm_mmap_pgoff+0x133/0x290 [ 202.225827][T12767] ksys_mmap_pgoff+0xd0/0x340 [ 202.230502][T12767] x64_sys_call+0x1884/0x2d60 [ 202.235194][T12767] do_syscall_64+0xc9/0x1c0 [ 202.239705][T12767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.245604][T12767] [ 202.247919][T12767] read to 0xffff888104173610 of 8 bytes by task 12767 on cpu 1: [ 202.255545][T12767] mtree_range_walk+0x1b4/0x460 [ 202.260389][T12767] mas_walk+0x16e/0x320 [ 202.264554][T12767] lock_vma_under_rcu+0x84/0x260 [ 202.269495][T12767] exc_page_fault+0x150/0x650 [ 202.274186][T12767] asm_exc_page_fault+0x26/0x30 [ 202.279034][T12767] [ 202.281344][T12767] value changed: 0x00007f2109cc5fff -> 0x00007f2109ca4fff [ 202.288445][T12767] [ 202.290761][T12767] Reported by Kernel Concurrency Sanitizer on: [ 202.296898][T12767] CPU: 1 UID: 0 PID: 12767 Comm: syz.3.2630 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 202.307668][T12767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 202.317735][T12767] ================================================================== [ 203.187216][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!