last executing test programs: 2.455064691s ago: executing program 3 (id=3094): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$dupfd(r1, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5fb7700"}) syz_open_pts(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40003a0010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64=r3], 0x40}}, 0x0) 2.22077661s ago: executing program 3 (id=3099): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000080)=""/2}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.864637759s ago: executing program 3 (id=3102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)='4', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x2cb, 0x0, 0x0, 0x0) 1.863566469s ago: executing program 3 (id=3104): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = geteuid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_newroute={0x50, 0x18, 0x10, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x7, 0x0, 0x4, 0xfc, 0x3, 0x200}, [@RTA_PRIORITY={0x8, 0x6, 0x7fffffff}, @RTA_UID={0x8, 0x19, r1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0x10, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xa, 0x2, 'wpan0\x00'}}}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x94, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:faillog_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:nvram_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4080}, 0x4000811) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200300600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c000000080000000080a0000000000000000fe06e2d4c3d9080a00000006000000040000"], 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x40, 0x80, 0xd, 0x8, {{0xf, 0x4, 0x3, 0x30, 0x3c, 0x64, 0x0, 0x6b, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@generic={0x82, 0x9, "ab5461cfd50afd"}, @timestamp={0x44, 0x1c, 0x33, 0x0, 0x2, [0x4, 0x69c4fd7f, 0x7, 0x0, 0x4, 0xc]}, @end]}}}}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr=0x64010101, @multicast1, r5}, 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) unshare(0x42000000) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="1302000000000080000003000000580001800d0001007564703a73"], 0x6c}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r6, 0x0, r11, 0x0, 0x83b1, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) 1.548278695s ago: executing program 4 (id=3111): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000400), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x5, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES16, @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200"/30], 0xfdef) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020307500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250}, 0x90) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c40)=0xffffffffffffff6e) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{}, 0x0, 0x0, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a3200000000090002007379"], 0x68}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b0e200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r8, 0x80080400) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r9, 0x10d, 0xb7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.497689699s ago: executing program 4 (id=3114): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x1, 0xa, 0x0, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0xa}, 0x10}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000e40)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0xd1, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000760d00040000000005000000181100003074a4e26df55c30f2b5bd57fdd1d5a05aa3fff07eef3838cc021e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020641af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff010000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000c5d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001863000000000000000000000200000085000000520000009500000000000000"], &(0x7f0000000d00)='GPL\x00', 0x4, 0x6e, &(0x7f0000000d40)=""/110, 0x41000, 0x50, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x1, 0xa, 0x56, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)}, 0x90) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000b80)}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x2, 0x20, 0x0, 0x0, 0x400, 0xc0c80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000500), 0x4}, 0x118147, 0x800, 0x6d1, 0x1, 0x4, 0x6, 0x23, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000004c0)='\\^&%*})\x00') r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000480)=0xfffffffffffffffb) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) socketpair(0x5, 0x5, 0x80000001, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socketpair(0x4, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x200, &(0x7f00000003c0)) socketpair(0x23, 0x5, 0x0, &(0x7f0000000300)) socketpair(0x21, 0x80000, 0x2, 0x0) 1.423208405s ago: executing program 0 (id=3117): socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000fffe00008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.254542218s ago: executing program 0 (id=3119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000305000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000008000014001280090001007663616e000000028cd47b8008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 1.128758419s ago: executing program 4 (id=3120): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f0000000000)=0x54) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.008593739s ago: executing program 0 (id=3122): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xab, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001340)='./file1\x00') r1 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1/../file0\x00', 0x0) open$dir(&(0x7f00000001c0)='./file1/../file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') unshare(0x2c060000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6800000013002f6b3555", @ANYRES32=r3, @ANYBLOB="000000000000000048001a803c000a80050008"], 0x68}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x195, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_enter(r5, 0x291c, 0x0, 0x0, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x685) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) fcntl$setsig(r6, 0xa, 0x21) 871.93042ms ago: executing program 3 (id=3128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000000c0)='cq_drain_complete\x00'}, 0x10) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 631.470649ms ago: executing program 3 (id=3129): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000b) ptrace(0x10, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = getpgid(r0) ptrace$setsig(0x4203, r1, 0x7fffffff, &(0x7f00000000c0)={0x20, 0x0, 0x7f}) 528.782098ms ago: executing program 1 (id=3132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}, 0x1, 0x8848000000000000}, 0x0) 516.920538ms ago: executing program 1 (id=3133): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x1100, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 334.514563ms ago: executing program 1 (id=3138): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRES32=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbea9}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_names\x00') socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d61"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x6000, 0x0, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 333.845424ms ago: executing program 2 (id=3139): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8, 0x0) getgroups(0xffe8, 0xfffffffffffffffe) r1 = eventfd(0x7f) r2 = signalfd4(r1, &(0x7f00000001c0), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000140)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000780)="fd8a8b34cf79a0abee85b746bb0e1456a89b262ed2f1794dfac331533f72d54a19537a1de31b8345f96f23e490e0b642c1e532b5f07d194697ba7362c76e72f9976a768434339cf8bd411fbdef0b226010cb5688331fc6f980c0e7839ac568f05107eeb4") r4 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x5, &(0x7f0000002240), 0x1, 0x78b, &(0x7f0000000800)="$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") sendfile(0xffffffffffffffff, r4, &(0x7f0000000180)=0x8, 0x9) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32=r6, @ANYBLOB="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"], 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0xa, &(0x7f0000001ac0)=ANY=[@ANYBLOB="15601000ffffffff7dabe0ffffffffff18320000040000000000000000000000182600000002b154691e2c72727463127bc06dc86ea997cdeaf8e142360453b0d39ac84a3490b7ef879c5bd4f146e45d878231506f9ce1b3271b0eca01665c0aa93a297afa092ccd54c4006b877524218b8d8e37b15f2c59ca63bff63a4ee4d7e14dc3ff13b47c2c46ff7b031db267dea0f9debf287f9a3ff081a9c5d5bd0d75fb5ca701fbb8b7e794f5cba043d0d80aee180ae327a82f9456ab6011eede8d5cd99dbd567e004dd16b1ed4d7b6d82d553bdeba01f691f469ecc6f7", @ANYRES32, @ANYBLOB="00000000010000008510000003000000184b0000f9ffffff0000000000000000bd7d200010000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x7, 0xfffffc04}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1]}, 0x80) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000280)="240000001a005f0014f9e407000904000a00000074000000000e000008001b0001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000004000000ffffffff25581658fb8b0eabf2ef0e4200feff001d000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, r9, 0x1, 0x0, 0x0, {}, [{{@pci={{0xe}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000006200)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006000)=ANY=[@ANYBLOB="b4010015", @ANYRES16=r9, @ANYBLOB="000226bd7000fedbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010) socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x154, 0x10, 0x713, 0x70bd29, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd571012c}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001800)={'gre0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 314.697995ms ago: executing program 1 (id=3140): syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@multicast2}, {@local}, {@remote}, {@private=0x9000000}, {@dev}, {@private}]}]}}}}}}}, 0x0) 304.751096ms ago: executing program 1 (id=3141): sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000001000050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 244.64684ms ago: executing program 1 (id=3142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = fsopen(&(0x7f00000002c0)='rootfs\x00', 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0xf3}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x40000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shutdown(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x4, &(0x7f0000000380)=[{0xb, 0x8, 0x8c, 0x1}, {0x3, 0x3, 0x68, 0x5}, {0x1, 0x6, 0x4, 0x6}, {0x7f, 0x4, 0x1, 0x2}]}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000ade69a9ba1ac3959240000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x90) setreuid(0x0, r10) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) r11 = dup2(r7, r6) close_range(r11, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) 244.38026ms ago: executing program 2 (id=3143): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x280000}, &(0x7f0000000500)='./file0\x00', 0x18}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000340)='./file0\x00') io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 164.053547ms ago: executing program 4 (id=3144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x6000000}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x273fe2b8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4, 0x4}]}, 0x38}}, 0x0) 134.58258ms ago: executing program 4 (id=3145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x0, 0x1, "e4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x80, 0x110, 0x2, "0bbebcfaa0a545432e2fe60bde1a25b30a60a193f22d4bc5887816e2288ce0c6aae174792e974d3372c4d5415d73855d49d37351efb4415e8245a45634a85fc92681edf019c987dd0c478121a1ee93374f3b77b547d5c3066a5708149a3ce424b9f3bd88178bffcd626f4c60d1ce3efa"}], 0x80, 0x500}}], 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x9}, 0x70) 111.148432ms ago: executing program 0 (id=3146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x8848}, 0x0) 110.610262ms ago: executing program 2 (id=3147): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) shutdown(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2b, &(0x7f0000000180)={&(0x7f0000000040)={0xa8, 0x38, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x90, 0x1, 0x0, 0x1, [@typed={0x8b, 0x0, 0x0, 0x0, @uid}]}]}, 0xa8}, 0x1, 0x7400}, 0x0) 105.564642ms ago: executing program 4 (id=3148): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000000c0)=0x80, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000640), 0x0, 0x40000, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r3, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x37, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0bc5351, &(0x7f0000000200)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x7000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0x80045301, 0x0) tkill(r2, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 104.833622ms ago: executing program 0 (id=3149): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0xe0ffffff, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x4, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 17.863739ms ago: executing program 2 (id=3150): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)='4', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x342, 0x0, 0x0, 0x0) 17.121739ms ago: executing program 0 (id=3151): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000001980)=ANY=[@ANYBLOB="46040000", @ANYRES32=r1, @ANYBLOB="ff00", @ANYRES32, @ANYRES8=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000001b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000001700)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000001b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000001700)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="12ce2f26", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250500000005002e0000000000080039000200000008000300", @ANYRES32=0x0, @ANYBLOB="08002c000000000008002c00fdffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x8090) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000016c0)={@private1, 0x7, 0x0, 0x1, 0xe, 0xff, 0x6b9}, 0x20) connect$inet6(r0, &(0x7f0000001680)={0xa, 0x4e23, 0x40, @loopback, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000001680)={0xa, 0x4e23, 0x40, @loopback, 0x1}, 0x1c) socket$inet6(0xa, 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000680)={{r5}, "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"}) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket$igmp(0x2, 0x3, 0x2) tee(r8, r7, 0x100000003, 0x0) r9 = accept(r8, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000580)=0x80) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @remote}, 0x10) (async) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @remote}, 0x10) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, 0x1c) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000001c0)={r11, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r10, 0x107, 0x2, &(0x7f0000000100)={r11, 0x1, 0x3, @remote}, 0x10) sendmsg$nl_route(r9, &(0x7f0000001780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000001b80)=@can_delroute={0x184, 0x19, 0x2, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x8, 0x0, 0x0, 0x4, 0x4, "885d0ae7c872f24b80f7596f8f5cc5065fceb8289d666d5b30c54d05690312c1c023cf71269c39aae32473e796aec042075106cd2f91ffc3a878bed6429aaf0fcd9ddcc05cfdd067b9014641258d4ace00253c0c95f4dce7cc9273e677b247504062c1aacbc6d07753dc0e64eefb7b0f75b660715f22ecd446d4acb9d095c5fad88a3a15361dfeb4f9c6327001cd30663711a93c559c312c3b21ba820b40421660b7e13987b2dba424797221677c4088d42c73b9a27dcb73344d86ca061e6ac7fce603eb3e0a4f345fd65d50d19f9350dcf991083fff7a763c6c6d00bd704d0b9da83c2a45f7cad7a7d64c6da202b326f89500", 0x3, "66d5a501000000a6f8c55aa2b4007d9ee9ab323e"}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1}, {0x4, 0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "4af026a5d6a21fc9"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "b2c42abe475533e8"}, 0x1}}, @CGW_FILTER={0xc, 0xb, {{0x4}, {0x3}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x24000001) (async) sendmsg$nl_route(r9, &(0x7f0000001780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000001b80)=@can_delroute={0x184, 0x19, 0x2, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x8, 0x0, 0x0, 0x4, 0x4, "885d0ae7c872f24b80f7596f8f5cc5065fceb8289d666d5b30c54d05690312c1c023cf71269c39aae32473e796aec042075106cd2f91ffc3a878bed6429aaf0fcd9ddcc05cfdd067b9014641258d4ace00253c0c95f4dce7cc9273e677b247504062c1aacbc6d07753dc0e64eefb7b0f75b660715f22ecd446d4acb9d095c5fad88a3a15361dfeb4f9c6327001cd30663711a93c559c312c3b21ba820b40421660b7e13987b2dba424797221677c4088d42c73b9a27dcb73344d86ca061e6ac7fce603eb3e0a4f345fd65d50d19f9350dcf991083fff7a763c6c6d00bd704d0b9da83c2a45f7cad7a7d64c6da202b326f89500", 0x3, "66d5a501000000a6f8c55aa2b4007d9ee9ab323e"}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1}, {0x4, 0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "4af026a5d6a21fc9"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "b2c42abe475533e8"}, 0x1}}, @CGW_FILTER={0xc, 0xb, {{0x4}, {0x3}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x24000001) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001800), 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty}}}], 0x20}}], 0x1, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty}}}], 0x20}}], 0x1, 0x0) 16.784469ms ago: executing program 2 (id=3152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffea, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000180001fff4000000000000000200000000000009"], 0x30}}, 0x0) 0s ago: executing program 2 (id=3153): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="060000000000000000001e0000000ae6ec8fc49a931000040077010000000000000000010002000000"], 0x28}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$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") r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r2, 0x7) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000580)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}], 0x1c) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x2}}, 0x14, &(0x7f0000000080)={0x0}}, 0x20000801) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x68060200) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) kernel console output (not intermixed with test programs): ][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.758535][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.769023][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.778898][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.789333][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.799152][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.809627][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.819441][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.829962][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.839802][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.850378][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.860208][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.870706][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.880563][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.891099][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.900932][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.911404][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.927622][T10902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.943921][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.954414][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.964441][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.975196][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.985111][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.995799][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.005695][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.016312][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.026160][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.036602][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.046525][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.057067][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.066943][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.077468][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.087328][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.097782][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.107673][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.118221][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.128045][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.138552][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.148388][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.158885][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.168786][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.179262][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.190095][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.200575][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.210445][T10902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.220913][T10902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.234420][T10902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.259958][ T9574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.278410][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.291027][T10902] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.299803][T10902] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.308581][T10902] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.317374][T10902] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.329868][T10919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.420216][T11022] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2410'. [ 208.429408][T11022] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2410'. [ 208.457134][T10919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.585995][T11007] chnl_net:caif_netlink_parms(): no params data found [ 208.632701][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.639960][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.647339][T11007] bridge_slave_0: entered allmulticast mode [ 208.654465][T11007] bridge_slave_0: entered promiscuous mode [ 208.661833][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.669016][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.676374][T11007] bridge_slave_1: entered allmulticast mode [ 208.683291][T11007] bridge_slave_1: entered promiscuous mode [ 208.704547][T11007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.720635][T11007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.743228][T10919] veth0_vlan: entered promiscuous mode [ 208.757912][T11007] team0: Port device team_slave_0 added [ 208.765132][T11007] team0: Port device team_slave_1 added [ 208.783643][T11007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.790759][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.816741][T11007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.829045][T11007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.836189][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.862131][T11007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.881221][T10919] veth1_vlan: entered promiscuous mode [ 208.903382][T11007] hsr_slave_0: entered promiscuous mode [ 208.909956][T11007] hsr_slave_1: entered promiscuous mode [ 208.916249][T11007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.924629][T11007] Cannot create hsr debugfs directory [ 208.942653][T11049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'. [ 208.997197][T10919] veth0_macvtap: entered promiscuous mode [ 209.005340][T10919] veth1_macvtap: entered promiscuous mode [ 209.054342][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.064860][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.074737][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.085282][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.093289][T11055] loop1: detected capacity change from 0 to 512 [ 209.095130][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.111826][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.119021][T11055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.121657][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.121673][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.142624][T11055] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.145839][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.175935][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.185777][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.196217][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.206121][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.216584][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.226487][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.236963][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.246838][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.257363][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.267224][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.277677][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.287587][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.298027][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.308001][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.318507][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.328396][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.338946][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.348795][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.359243][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.369121][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.379583][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.396221][T10919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.405931][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.405997][T10705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.416474][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.435351][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.445836][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.455879][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.466398][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.476455][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.487071][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.496955][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.507676][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.517624][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.528113][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.538059][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.548532][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.558655][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.569360][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.579325][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.589996][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.599867][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.610372][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.620254][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.630791][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.640653][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.651152][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.661255][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.671824][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.681738][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.692290][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.702168][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.712614][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.724904][T10919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.753723][T11065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2439'. [ 209.764903][T10919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.773707][T10919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.782660][T10919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.791495][T10919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.871087][T11074] loop4: detected capacity change from 0 to 1024 [ 209.879622][T11074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.901570][T11074] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 209.920790][T11074] System zones: 0-1, 3-36 [ 209.926145][T11074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.971934][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.006109][T11087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=11087 comm=syz.2.2446 [ 210.041909][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2448'. [ 210.057741][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2447'. [ 210.157017][T11096] loop4: detected capacity change from 0 to 164 [ 210.164270][T11096] Unable to read rock-ridge attributes [ 210.186882][T11102] loop1: detected capacity change from 0 to 2048 [ 210.201410][T11102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.278991][ T9570] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.285941][T11117] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 210.294499][ T9570] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 210.312925][ T9570] EXT4-fs (loop1): This should not happen!! Data will be lost [ 210.312925][ T9570] [ 210.322596][ T9570] EXT4-fs (loop1): Total free blocks count 0 [ 210.328631][ T9570] EXT4-fs (loop1): Free/Dirty block details [ 210.334614][ T9570] EXT4-fs (loop1): free_blocks=2415919104 [ 210.340483][ T9570] EXT4-fs (loop1): dirty_blocks=16 [ 210.345604][ T9570] EXT4-fs (loop1): Block reservation details [ 210.351670][ T9570] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 210.359099][T10705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.406695][T11122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2459'. [ 210.474027][ T29] audit: type=1400 audit(1720005981.203:1069): avc: denied { listen } for pid=11126 comm="syz.1.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.508937][T11128] loop1: detected capacity change from 0 to 256 [ 210.516903][T11128] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.600518][ T29] audit: type=1400 audit(1720005981.314:1070): avc: denied { mounton } for pid=11126 comm="syz.1.2460" path="/23/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 210.939639][T11164] vhci_hcd: invalid port number 18 [ 211.033566][T11168] loop4: detected capacity change from 0 to 1024 [ 211.047262][T11168] ext4: Unknown parameter 'appraise_type' [ 211.223778][ T29] audit: type=1326 audit(1720005981.895:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11183 comm="syz.2.2482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fb81f7b99 code=0x0 [ 211.281734][T11187] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 211.288346][T11187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 211.296350][T11187] vhci_hcd vhci_hcd.0: Device attached [ 211.309764][ T29] audit: type=1400 audit(1720005981.969:1072): avc: denied { create } for pid=11183 comm="syz.2.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 211.512515][T11192] loop3: detected capacity change from 0 to 2048 [ 211.565197][ T29] audit: type=1326 audit(1720005982.209:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54797eb99 code=0x7ffc0000 [ 211.588894][ T29] audit: type=1326 audit(1720005982.209:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54797eb99 code=0x7ffc0000 [ 211.612479][ T2747] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 211.612860][ T29] audit: type=1326 audit(1720005982.209:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe54797eb99 code=0x7ffc0000 [ 211.629995][T11202] loop1: detected capacity change from 0 to 512 [ 211.643638][ T29] audit: type=1326 audit(1720005982.209:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54797eb99 code=0x7ffc0000 [ 211.643677][ T29] audit: type=1326 audit(1720005982.209:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54797eb99 code=0x7ffc0000 [ 211.643710][ T29] audit: type=1326 audit(1720005982.209:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe54797eb99 code=0x7ffc0000 [ 211.662169][T11202] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2489: corrupted in-inode xattr: invalid ea_ino [ 211.734666][T11202] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.2489: couldn't read orphan inode 15 (err -117) [ 211.747879][T11202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.763348][ T9574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.826409][ T9574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.850119][T10705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.881140][ T9574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.912999][T11210] loop4: detected capacity change from 0 to 512 [ 211.919573][T11210] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.926448][T11210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 211.941689][T11210] EXT4-fs (loop4): 1 truncate cleaned up [ 211.948256][T11210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.990446][ T9574] bridge_slave_1: left allmulticast mode [ 211.994277][T11210] netlink: 'syz.4.2492': attribute type 3 has an invalid length. [ 211.996372][ T9574] bridge_slave_1: left promiscuous mode [ 212.009872][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.024240][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.035469][ T9574] bridge_slave_0: left allmulticast mode [ 212.041261][ T9574] bridge_slave_0: left promiscuous mode [ 212.047136][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.112108][T11225] loop4: detected capacity change from 0 to 256 [ 212.125824][T11188] vhci_hcd: connection reset by peer [ 212.136202][ T9570] vhci_hcd: stop threads [ 212.140592][ T9570] vhci_hcd: release socket [ 212.145042][ T9570] vhci_hcd: disconnect device [ 212.172686][ T9574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.183759][ T9574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.196706][ T9574] bond0 (unregistering): Released all slaves [ 212.211637][T11222] loop1: detected capacity change from 0 to 512 [ 212.218913][T11222] EXT4-fs: Ignoring removed oldalloc option [ 212.226898][T11222] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2496: Parent and EA inode have the same ino 15 [ 212.239902][T11222] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2496: Parent and EA inode have the same ino 15 [ 212.254096][T11222] EXT4-fs (loop1): 1 orphan inode deleted [ 212.260361][T11222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.325027][ T9574] hsr_slave_0: left promiscuous mode [ 212.331022][ T9574] hsr_slave_1: left promiscuous mode [ 212.337069][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.344721][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.352628][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.360171][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.370984][ T9574] veth1_macvtap: left promiscuous mode [ 212.376585][ T9574] veth0_macvtap: left promiscuous mode [ 212.382185][ T9574] veth1_vlan: left promiscuous mode [ 212.387543][ T9574] veth0_vlan: left promiscuous mode [ 212.438170][T10705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.488582][ T9574] team0 (unregistering): Port device team_slave_1 removed [ 212.500020][ T9574] team0 (unregistering): Port device team_slave_0 removed [ 212.558968][T11242] __nla_validate_parse: 10 callbacks suppressed [ 212.559022][T11242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2503'. [ 212.741346][T11007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.751319][T11007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.770237][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2510'. [ 212.770449][T11007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.828985][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 212.855470][T11269] loop1: detected capacity change from 0 to 512 [ 212.869020][T11260] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 212.885211][T11269] EXT4-fs: Ignoring removed bh option [ 212.892774][T11260] bond1: (slave vcan1): Error -95 calling set_mac_address [ 212.901606][T11269] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 212.912106][T11007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.923599][T11269] EXT4-fs (loop1): 1 truncate cleaned up [ 212.932154][T11274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2514'. [ 212.941607][T11274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2514'. [ 212.942661][T11269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.046613][T11286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2520'. [ 213.060441][T11007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.080090][T10705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.102499][ T9574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.141055][T11007] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.168094][ T9574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.197951][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.205140][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.243195][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.250338][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.271964][ T9574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.286834][T11007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.304578][T11294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2524'. [ 213.332952][T11294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11294 comm=syz.4.2524 [ 213.357017][ T9574] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.377444][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2525'. [ 213.474247][T11007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.485372][ T9574] bridge_slave_1: left allmulticast mode [ 213.491100][ T9574] bridge_slave_1: left promiscuous mode [ 213.496844][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.506098][T11312] FAULT_INJECTION: forcing a failure. [ 213.506098][T11312] name failslab, interval 1, probability 0, space 0, times 0 [ 213.518929][T11312] CPU: 0 PID: 11312 Comm: syz.3.2527 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 213.529108][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 213.539182][T11312] Call Trace: [ 213.540351][T11320] usb usb1: usbfs: process 11320 (syz.4.2529) did not claim interface 0 before use [ 213.542530][T11312] [ 213.554756][T11312] dump_stack_lvl+0xf2/0x150 [ 213.559438][T11312] dump_stack+0x15/0x20 [ 213.563682][T11312] should_fail_ex+0x229/0x230 [ 213.568410][T11312] ? sidtab_sid2str_get+0xb8/0x140 [ 213.573596][T11312] __should_failslab+0x92/0xa0 [ 213.578380][T11312] should_failslab+0x9/0x20 [ 213.582913][T11312] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 213.589106][T11312] kmemdup_noprof+0x2a/0x60 [ 213.593628][T11312] sidtab_sid2str_get+0xb8/0x140 [ 213.598576][T11312] security_sid_to_context_core+0x1eb/0x2f0 [ 213.604539][T11312] security_sid_to_context+0x27/0x30 [ 213.609877][T11312] avc_audit_post_callback+0x10d/0x530 [ 213.615505][T11312] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 213.621510][T11312] common_lsm_audit+0x7d0/0xfc0 [ 213.626486][T11312] ? avc_denied+0xf1/0x110 [ 213.630929][T11312] slow_avc_audit+0xf9/0x140 [ 213.635639][T11312] avc_has_perm+0x129/0x160 [ 213.640182][T11312] selinux_bprm_creds_for_exec+0x64f/0x8d0 [ 213.646022][T11312] security_bprm_creds_for_exec+0x3a/0x70 [ 213.651835][T11312] bprm_execve+0x2d6/0xc60 [ 213.656274][T11312] ? get_arg_page+0x284/0x380 [ 213.660983][T11312] ? insert_vm_struct+0x1c0/0x210 [ 213.666049][T11312] ? copy_strings+0x46e/0x620 [ 213.670732][T11312] ? copy_string_kernel+0x26f/0x280 [ 213.675935][T11312] do_execveat_common+0x768/0x7d0 [ 213.680984][T11312] ? getname_flags+0x166/0x360 [ 213.685796][T11312] __x64_sys_execveat+0x75/0x90 [ 213.690716][T11312] x64_sys_call+0x8b2/0x2d70 [ 213.695336][T11312] do_syscall_64+0xc9/0x1c0 [ 213.699863][T11312] ? clear_bhb_loop+0x55/0xb0 [ 213.704544][T11312] ? clear_bhb_loop+0x55/0xb0 [ 213.709225][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.715136][T11312] RIP: 0033:0x7efde7366b99 [ 213.719578][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.739412][T11312] RSP: 002b:00007efde65e8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 213.747864][T11312] RAX: ffffffffffffffda RBX: 00007efde74f4f60 RCX: 00007efde7366b99 [ 213.755857][T11312] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 213.764023][T11312] RBP: 00007efde65e80a0 R08: 0000000000000000 R09: 0000000000000000 [ 213.772008][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.779990][T11312] R13: 000000000000000b R14: 00007efde74f4f60 R15: 00007ffcfe4dbf08 [ 213.787990][T11312] [ 213.794250][ T9574] bridge_slave_0: left allmulticast mode [ 213.799963][ T9574] bridge_slave_0: left promiscuous mode [ 213.805939][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.940756][ T9574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.952709][ T9574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.963362][ T9574] bond0 (unregistering): Released all slaves [ 213.986929][T11334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2533'. [ 214.064928][T11291] chnl_net:caif_netlink_parms(): no params data found [ 214.106702][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2535'. [ 214.129010][T11352] loop4: detected capacity change from 0 to 2048 [ 214.135513][ T9574] hsr_slave_0: left promiscuous mode [ 214.144050][ T9574] hsr_slave_1: left promiscuous mode [ 214.153588][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.161115][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.170960][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.178520][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.185808][T11352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.213393][ T9574] veth1_macvtap: left promiscuous mode [ 214.218991][ T9574] veth0_macvtap: left promiscuous mode [ 214.224508][ T9574] veth1_vlan: left promiscuous mode [ 214.229759][ T9574] veth0_vlan: left promiscuous mode [ 214.332236][ T9574] team0 (unregistering): Port device team_slave_1 removed [ 214.344015][ T9574] team0 (unregistering): Port device team_slave_0 removed [ 214.403678][T11352] netlink: 'syz.4.2537': attribute type 10 has an invalid length. [ 214.427374][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.431193][T11007] veth0_vlan: entered promiscuous mode [ 214.459124][T11291] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.466293][T11291] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.473743][T11291] bridge_slave_0: entered allmulticast mode [ 214.480733][T11291] bridge_slave_0: entered promiscuous mode [ 214.488109][T11007] veth1_vlan: entered promiscuous mode [ 214.495148][T11291] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.502810][T11291] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.512439][T11291] bridge_slave_1: entered allmulticast mode [ 214.519860][T11291] bridge_slave_1: entered promiscuous mode [ 214.546556][T11291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.557759][T11291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.591541][T11291] team0: Port device team_slave_0 added [ 214.599836][T11373] netlink: set zone limit has 8 unknown bytes [ 214.602916][T11291] team0: Port device team_slave_1 added [ 214.641755][T11007] veth0_macvtap: entered promiscuous mode [ 214.657816][T11291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.664934][T11291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.692080][T11291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.710841][T11291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.718113][T11291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.744311][T11291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.774764][T11007] veth1_macvtap: entered promiscuous mode [ 214.808251][T11291] hsr_slave_0: entered promiscuous mode [ 214.816817][T11291] hsr_slave_1: entered promiscuous mode [ 214.851157][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.861762][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.871823][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.882347][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.892191][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.902705][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.912569][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.923119][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.933258][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.944020][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.953889][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.964337][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.974282][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.984708][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.994634][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.005092][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.014947][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.025399][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.035320][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.045763][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.055603][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.066068][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.075946][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.086416][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.096287][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.106911][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.116880][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.127451][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.138808][T11007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.170883][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.181444][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.191365][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.201999][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.211881][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.222326][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.232241][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.242708][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.252700][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.263432][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.273734][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.284254][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.294087][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.304524][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.314368][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.324830][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.334653][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.345082][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.354904][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.365362][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.375203][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.385748][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.395651][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.406084][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.415914][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.426334][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.436226][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.446652][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.458210][T11007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.469800][T11007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.478655][T11007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.487389][T11007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.496118][T11007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.531413][T11404] loop4: detected capacity change from 0 to 512 [ 215.569737][T11404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.584403][T11404] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.609883][T11404] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 215.659254][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.680762][ T9574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.839331][ T9574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.617388][T11381] chnl_net:caif_netlink_parms(): no params data found [ 216.700626][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 216.700660][ T29] audit: type=1400 audit(1720005986.953:1152): avc: denied { watch watch_reads } for pid=11415 comm="syz.2.2556" path="/34/file0" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 217.706004][ T9574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.768892][ T9574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.790252][ T2747] vhci_hcd: vhci_device speed not set [ 218.783140][T11381] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.790286][T11381] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.803576][T11381] bridge_slave_0: entered allmulticast mode [ 218.810402][T11381] bridge_slave_0: entered promiscuous mode [ 218.817799][T11381] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.825201][T11381] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.843316][T11381] bridge_slave_1: entered allmulticast mode [ 218.853795][T11381] bridge_slave_1: entered promiscuous mode [ 218.895072][T11381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.914695][T11381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.954694][T11439] __nla_validate_parse: 4 callbacks suppressed [ 218.954708][T11439] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2563'. [ 218.970092][T11439] netlink: 'syz.2.2563': attribute type 9 has an invalid length. [ 218.977903][T11439] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2563'. [ 218.986967][T11439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2563'. [ 219.017071][ T9574] bridge_slave_1: left allmulticast mode [ 219.022899][ T9574] bridge_slave_1: left promiscuous mode [ 219.023765][T11445] loop2: detected capacity change from 0 to 128 [ 219.028656][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.051320][ T9574] bridge_slave_0: left allmulticast mode [ 219.057077][ T9574] bridge_slave_0: left promiscuous mode [ 219.062887][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.214917][ T9574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.248272][T11456] loop4: detected capacity change from 0 to 512 [ 219.258098][T11456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.297490][ T9574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.367900][T11456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.383117][ T9574] bond0 (unregistering): Released all slaves [ 219.434398][T11381] team0: Port device team_slave_0 added [ 219.445863][T11456] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.553599][T11381] team0: Port device team_slave_1 added [ 219.609972][ T9574] hsr_slave_0: left promiscuous mode [ 219.621860][ T9574] hsr_slave_1: left promiscuous mode [ 219.639501][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.647177][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.779877][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.788175][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.852672][ T9574] veth1_macvtap: left promiscuous mode [ 219.858251][ T9574] veth0_macvtap: left promiscuous mode [ 219.863918][ T9574] veth1_vlan: left promiscuous mode [ 219.869170][ T9574] veth0_vlan: left promiscuous mode [ 220.048159][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.128627][ T9574] team0 (unregistering): Port device team_slave_1 removed [ 220.143454][ T9574] team0 (unregistering): Port device team_slave_0 removed [ 220.186476][T11470] tmpfs: Bad value for 'mpol' [ 220.191303][T11291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.210463][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2572'. [ 220.221103][T11291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.255503][T11291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.266243][T11381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.273226][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.299226][T11381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.310611][T11291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.319104][T11482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2574'. [ 220.328524][T11381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.335481][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.361513][T11381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.401612][ T29] audit: type=1400 audit(1720005990.359:1153): avc: denied { setopt } for pid=11485 comm="syz.4.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.404611][T11381] hsr_slave_0: entered promiscuous mode [ 220.443063][ T29] audit: type=1400 audit(1720005990.405:1154): avc: denied { ioctl } for pid=11485 comm="syz.4.2578" path="socket:[45516]" dev="sockfs" ino=45516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.996406][T11381] hsr_slave_1: entered promiscuous mode [ 222.011336][T11381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.023548][T11381] Cannot create hsr debugfs directory [ 222.041533][T11496] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 222.114212][T11291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.110236][T11499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2582'. [ 223.159475][T11291] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.173155][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 223.200536][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.207760][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.177575][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.184694][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.225430][T11504] loop2: detected capacity change from 0 to 512 [ 224.226705][T11291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.242242][T11291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.251832][T11504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.270194][T11504] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.318506][T11515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2586'. [ 224.382268][T11291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.384072][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.393868][T11381] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.427281][T11381] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.437560][T11381] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.459692][T11381] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.540448][ T29] audit: type=1400 audit(1720005994.180:1155): avc: denied { mount } for pid=11526 comm="syz.2.2587" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 224.609711][T11381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.616778][ T29] audit: type=1400 audit(1720005994.254:1156): avc: denied { unmount } for pid=10875 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 224.647448][T11291] veth0_vlan: entered promiscuous mode [ 224.666178][T11381] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.690414][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.697544][ T9597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.709456][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.716649][ T9597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.800566][T11291] veth1_vlan: entered promiscuous mode [ 224.909351][T11291] veth0_macvtap: entered promiscuous mode [ 224.919027][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2595'. [ 224.955071][T11291] veth1_macvtap: entered promiscuous mode [ 225.014749][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.025274][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.035153][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.045677][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.055619][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.066074][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.076213][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.086853][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.096716][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.107305][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.117261][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.127837][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.137689][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.148129][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.158013][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.168520][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.178439][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.188902][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.198794][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.209243][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.219113][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.229620][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.239467][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.250008][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.259874][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.270336][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.280189][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.290634][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.344601][T11291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.359873][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.370409][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.380272][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.390724][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.400575][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.411099][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.421084][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.431576][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.441475][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.451959][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.461811][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.472353][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.482215][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.492902][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.502734][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.502755][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.502856][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.533471][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.543330][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.553838][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.563679][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.574205][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.584043][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.594684][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.604577][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.615056][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.624883][T11291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.635446][T11291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.672012][T11291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.770203][T11291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.779144][T11291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.787918][T11291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.796641][T11291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.883090][T11566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2598'. [ 225.896290][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2600'. [ 225.922870][T11381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.954098][T11572] netlink: 'syz.4.2601': attribute type 2 has an invalid length. [ 225.961971][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2601'. [ 226.098060][T11582] loop2: detected capacity change from 0 to 2048 [ 226.112667][T11582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.201578][T11381] veth0_vlan: entered promiscuous mode [ 226.228825][T11582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.246722][T11381] veth1_vlan: entered promiscuous mode [ 226.267862][T11381] veth0_macvtap: entered promiscuous mode [ 226.277316][T11381] veth1_macvtap: entered promiscuous mode [ 226.314051][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.331407][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.341902][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.351762][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.362215][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.372030][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.382682][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.392543][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.403084][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.412946][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.423460][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.433337][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.443797][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.453676][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.464395][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.474468][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.485076][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.495030][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.505518][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.515352][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.525939][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.535859][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.546419][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.556402][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.566931][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.576797][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.587264][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.597193][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.607670][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.617538][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.628124][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.647666][T11381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.686650][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.697250][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.707254][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.717739][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.727708][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.738187][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.748053][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.758526][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.768393][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.778937][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.788837][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.799316][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.809395][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.819937][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.827403][T11605] loop2: detected capacity change from 0 to 256 [ 226.829777][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.829795][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.829814][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.866884][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.876744][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.880194][T11605] FAT-fs (loop2): Directory bread(block 64) failed [ 226.887285][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.887309][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.887327][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.923993][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.926859][T11605] FAT-fs (loop2): Directory bread(block 65) failed [ 226.934427][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.950833][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.961280][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.971139][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.978457][T11605] FAT-fs (loop2): Directory bread(block 66) failed [ 226.981595][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.981614][T11381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.981637][T11381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.039489][T11605] FAT-fs (loop2): Directory bread(block 67) failed [ 227.045116][T11381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.055416][T11381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.064330][T11381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.073161][T11381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.081894][T11381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.083975][T11605] FAT-fs (loop2): Directory bread(block 68) failed [ 227.114992][T11612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2612'. [ 227.135636][T11605] FAT-fs (loop2): Directory bread(block 69) failed [ 227.142330][T11605] FAT-fs (loop2): Directory bread(block 70) failed [ 227.148894][T11605] FAT-fs (loop2): Directory bread(block 71) failed [ 227.178441][T11614] loop4: detected capacity change from 0 to 512 [ 227.183030][T11605] FAT-fs (loop2): Directory bread(block 72) failed [ 227.207424][T11616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2614'. [ 227.216622][T11616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2614'. [ 227.227692][T11605] FAT-fs (loop2): Directory bread(block 73) failed [ 227.244600][T11614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.257352][T11614] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.273071][T11625] loop3: detected capacity change from 0 to 1024 [ 227.310060][T11625] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2616'. [ 227.323993][T11625] loop3: detected capacity change from 0 to 164 [ 227.365134][T11631] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 227.373833][T11631] FAT-fs (loop2): Filesystem has been set read-only [ 227.388438][T11631] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 227.394062][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.671804][T11646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2624'. [ 230.776078][T11662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11662 comm=syz.0.2630 [ 230.926304][T11665] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2632'. [ 233.929338][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 233.961625][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 233.994799][T11722] Dead loop on virtual device ip6_vti0, fix it urgently! [ 234.002727][T11720] bond0: entered promiscuous mode [ 234.007826][T11720] bond_slave_0: entered promiscuous mode [ 234.013610][T11720] bond_slave_1: entered promiscuous mode [ 234.039087][T11720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 235.005332][T11720] bond0: left promiscuous mode [ 235.010243][T11720] bond_slave_0: left promiscuous mode [ 235.015706][T11720] bond_slave_1: left promiscuous mode [ 235.050725][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2653'. [ 235.242085][T11766] loop3: detected capacity change from 0 to 512 [ 235.252140][T11768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2667'. [ 235.292902][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 235.301871][T11737] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2654'. [ 235.310167][T11766] program syz.3.2666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.396326][T11774] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.413887][T11774] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.679952][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2675'. [ 236.810901][ T29] audit: type=1326 audit(1720006005.515:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.0.2675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04986eeb99 code=0x0 [ 236.972914][T11801] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2678'. [ 236.982060][T11801] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2678'. [ 236.991070][T11801] netlink: 'syz.1.2678': attribute type 5 has an invalid length. [ 236.998796][T11801] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2678'. [ 237.141775][ T29] audit: type=1326 audit(1720006005.644:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04986eeb99 code=0x7ffc0000 [ 237.165415][ T29] audit: type=1326 audit(1720006005.644:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04986eeb99 code=0x7ffc0000 [ 237.188974][ T29] audit: type=1326 audit(1720006005.644:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f04986eeb99 code=0x7ffc0000 [ 237.212549][ T29] audit: type=1326 audit(1720006005.644:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04986eeb99 code=0x7ffc0000 [ 237.236081][ T29] audit: type=1326 audit(1720006005.644:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04986eeb99 code=0x7ffc0000 [ 237.259742][ T29] audit: type=1400 audit(1720006005.866:1163): avc: denied { ioctl } for pid=11799 comm="syz.1.2678" path="socket:[47265]" dev="sockfs" ino=47265 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.328006][ T29] audit: type=1400 audit(1720006005.995:1164): avc: denied { execute } for pid=11820 comm="syz.1.2686" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.401919][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2701'. [ 238.415724][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2701'. [ 238.436064][T11855] bond0: entered promiscuous mode [ 238.441284][T11855] bond_slave_0: entered promiscuous mode [ 238.447465][T11855] bond_slave_1: entered promiscuous mode [ 238.454805][T11855] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.464976][T11855] bond0: left promiscuous mode [ 238.469998][T11855] bond_slave_0: left promiscuous mode [ 238.475735][T11855] bond_slave_1: left promiscuous mode [ 238.737352][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2708'. [ 239.495118][ T29] audit: type=1400 audit(1720006007.979:1165): avc: denied { append } for pid=11892 comm="syz.4.2714" name="vsock" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.518045][ T29] audit: type=1400 audit(1720006007.989:1166): avc: denied { ioctl } for pid=11892 comm="syz.4.2714" path="/dev/vsock" dev="devtmpfs" ino=232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.550448][T11900] netlink: 'syz.0.2717': attribute type 4 has an invalid length. [ 239.592509][T11900] netlink: 'syz.0.2717': attribute type 4 has an invalid length. [ 239.614191][T11899] loop2: detected capacity change from 0 to 2048 [ 239.628193][T11899] EXT4-fs: Ignoring removed orlov option [ 239.662855][T11899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.696193][T11899] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 239.769909][T11899] EXT4-fs (loop2): Remounting filesystem read-only [ 239.784270][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.829097][T11920] loop2: detected capacity change from 0 to 512 [ 239.842139][T11920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 239.856831][T11920] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.891355][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 240.020544][T11941] loop2: detected capacity change from 0 to 512 [ 240.069867][T11945] loop4: detected capacity change from 0 to 2048 [ 240.103522][T11945] Alternate GPT is invalid, using primary GPT. [ 240.106534][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2736'. [ 240.109857][T11945] loop4: p1 p2 p3 [ 240.186358][T11956] loop4: detected capacity change from 0 to 256 [ 240.200209][T11958] loop2: detected capacity change from 0 to 256 [ 240.277124][T11958] syzkaller0: entered promiscuous mode [ 240.282775][T11958] syzkaller0: entered allmulticast mode [ 240.318862][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.463311][T11976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33040 sclass=netlink_route_socket pid=11976 comm=syz.2.2746 [ 240.523454][T11969] I/O error, dev loop7, sector 4360 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 240.582160][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2748'. [ 240.608751][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2749'. [ 240.784364][T12006] loop4: detected capacity change from 0 to 1024 [ 240.798767][T12006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.810958][T12006] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.862250][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.956767][T12059] FAULT_INJECTION: forcing a failure. [ 241.956767][T12059] name failslab, interval 1, probability 0, space 0, times 0 [ 241.969592][T12059] CPU: 0 PID: 12059 Comm: syz.4.2776 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 241.979745][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 241.989804][T12059] Call Trace: [ 241.993081][T12059] [ 241.996008][T12059] dump_stack_lvl+0xf2/0x150 [ 242.000634][T12059] dump_stack+0x15/0x20 [ 242.004795][T12059] should_fail_ex+0x229/0x230 [ 242.009541][T12059] ? perf_event_alloc+0x154/0x16d0 [ 242.014671][T12059] __should_failslab+0x92/0xa0 [ 242.019440][T12059] should_failslab+0x9/0x20 [ 242.023972][T12059] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 242.029857][T12059] perf_event_alloc+0x154/0x16d0 [ 242.034810][T12059] __se_sys_perf_event_open+0x837/0x2170 [ 242.040463][T12059] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 242.046133][T12059] ? __fget_files+0x1da/0x210 [ 242.050816][T12059] __x64_sys_perf_event_open+0x67/0x80 [ 242.056288][T12059] x64_sys_call+0x1909/0x2d70 [ 242.060975][T12059] do_syscall_64+0xc9/0x1c0 [ 242.065503][T12059] ? clear_bhb_loop+0x55/0xb0 [ 242.070191][T12059] ? clear_bhb_loop+0x55/0xb0 [ 242.074967][T12059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.080869][T12059] RIP: 0033:0x7f2dc6eb0b99 [ 242.085314][T12059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.105072][T12059] RSP: 002b:00007f2dc6132048 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 242.113535][T12059] RAX: ffffffffffffffda RBX: 00007f2dc703ef60 RCX: 00007f2dc6eb0b99 [ 242.121516][T12059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 242.129497][T12059] RBP: 00007f2dc61320a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.137575][T12059] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 242.145609][T12059] R13: 000000000000000b R14: 00007f2dc703ef60 R15: 00007ffecf9f5888 [ 242.153584][T12059] [ 242.224297][T12078] __nla_validate_parse: 4 callbacks suppressed [ 242.224315][T12078] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2784'. [ 242.301495][T12089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2788'. [ 242.432737][T12097] loop2: detected capacity change from 0 to 512 [ 242.441561][T12097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.454205][T12097] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.466869][T12097] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 242.484563][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.513452][T12104] usb usb5: usbfs: process 12104 (syz.4.2795) did not claim interface 0 before use [ 242.655637][T12113] loop2: detected capacity change from 0 to 512 [ 242.662796][T12113] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 242.714526][T12113] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 242.715876][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2800'. [ 242.787156][T12120] loop4: detected capacity change from 0 to 512 [ 242.799856][T12120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.812522][T12120] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.843037][T12120] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2801: corrupted inode contents [ 242.850405][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2802'. [ 242.859216][T12120] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #19: comm syz.4.2801: mark_inode_dirty error [ 242.879690][T12120] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2801: corrupted inode contents [ 242.892873][T12120] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #19: comm syz.4.2801: mark_inode_dirty error [ 242.905085][T12120] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #19: comm syz.4.2801: mark inode dirty (error -117) [ 242.920974][T12120] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 242.948251][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.042208][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2803'. [ 243.084795][T12141] can: request_module (can-proto-0) failed. [ 243.104968][T12141] loop4: detected capacity change from 0 to 2048 [ 243.105152][T12144] loop2: detected capacity change from 0 to 736 [ 243.118226][T12144] iso9660: Bad value for 'mode' [ 243.123297][T12141] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 243.133077][T12141] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 243.148041][T12141] EXT4-fs (loop4): failed to initialize system zone (-117) [ 243.148806][T12149] loop3: detected capacity change from 0 to 256 [ 243.155321][T12141] EXT4-fs (loop4): mount failed [ 243.170292][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 243.170310][ T29] audit: type=1400 audit(1720006011.385:1176): avc: denied { write } for pid=12143 comm="syz.2.2809" name="file0" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.199096][ T29] audit: type=1326 audit(1720006011.385:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12143 comm="syz.2.2809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fb81f7b99 code=0x0 [ 243.276945][T12154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2812'. [ 243.291614][T12159] loop3: detected capacity change from 0 to 512 [ 243.296164][ T29] audit: type=1400 audit(1720006011.496:1178): avc: denied { mounton } for pid=12143 comm="syz.2.2809" path="/105/file0" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.342308][T12161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2809'. [ 243.352035][T12161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.360514][ T29] audit: type=1400 audit(1720006011.551:1179): avc: denied { append } for pid=12143 comm="syz.2.2809" name="file0" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.405413][T12163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2815'. [ 243.433039][T12165] loop4: detected capacity change from 0 to 764 [ 243.952114][T12182] FAULT_INJECTION: forcing a failure. [ 243.952114][T12182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.965265][T12182] CPU: 0 PID: 12182 Comm: syz.0.2823 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 243.975518][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 243.985598][T12182] Call Trace: [ 243.988904][T12182] [ 243.991853][T12182] dump_stack_lvl+0xf2/0x150 [ 243.996495][T12182] dump_stack+0x15/0x20 [ 244.000842][T12182] should_fail_ex+0x229/0x230 [ 244.000887][T12182] should_fail+0xb/0x10 [ 244.000980][T12182] should_fail_usercopy+0x1a/0x20 [ 244.001075][T12182] _copy_from_user+0x1e/0xd0 [ 244.001116][T12182] copy_msghdr_from_user+0x54/0x2a0 [ 244.001151][T12182] __sys_sendmmsg+0x22a/0x500 [ 244.001264][T12182] __x64_sys_sendmmsg+0x57/0x70 [ 244.001293][T12182] x64_sys_call+0xa87/0x2d70 [ 244.001328][T12182] do_syscall_64+0xc9/0x1c0 [ 244.001405][T12182] ? clear_bhb_loop+0x55/0xb0 [ 244.001504][T12182] ? clear_bhb_loop+0x55/0xb0 [ 244.001535][T12182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.001567][T12182] RIP: 0033:0x7f04986eeb99 [ 244.001585][T12182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.001685][T12182] RSP: 002b:00007f0497970048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 244.001727][T12182] RAX: ffffffffffffffda RBX: 00007f049887cf60 RCX: 00007f04986eeb99 [ 244.001743][T12182] RDX: 03fffffffffffe36 RSI: 0000000020001e00 RDI: 0000000000000003 [ 244.001758][T12182] RBP: 00007f04979700a0 R08: 0000000000000000 R09: 0000000000000000 [ 244.001772][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.001785][T12182] R13: 000000000000000b R14: 00007f049887cf60 R15: 00007ffe004b89d8 [ 244.001802][T12182] [ 244.226456][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2826'. [ 244.512033][T12210] loop4: detected capacity change from 0 to 512 [ 244.529843][T12210] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.568198][T12210] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #17: comm syz.4.2833: iget: bad i_size value: -6917529027641081756 [ 244.583881][T12210] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2833: couldn't read orphan inode 17 (err -117) [ 244.607357][T12210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.621637][T12210] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2833'. [ 244.678687][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.716677][T12230] loop3: detected capacity change from 0 to 512 [ 245.453361][T12263] xt_limit: Overflow, try lower: 16384/524288 [ 245.461511][ T29] audit: type=1400 audit(1720006013.480:1180): avc: denied { bind } for pid=12262 comm="syz.0.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 246.040211][T12291] x_tables: ip_tables: osf match: only valid for protocol 6 [ 246.063412][T12291] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ï£žßä“X\x§ÃãEµ [ 246.105945][T12297] loop4: detected capacity change from 0 to 512 [ 246.127846][T12297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.140646][T12297] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.175263][T12297] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2862: corrupted inode contents [ 246.191170][T12297] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #19: comm syz.4.2862: mark_inode_dirty error [ 246.202916][T12297] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2862: corrupted inode contents [ 246.215064][T12297] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #19: comm syz.4.2862: mark_inode_dirty error [ 246.232302][T12297] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #19: comm syz.4.2862: mark inode dirty (error -117) [ 246.245296][T12297] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 246.266912][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.476260][T12334] loop4: detected capacity change from 0 to 512 [ 246.493799][T12334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.506583][T12334] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.533164][T12334] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2876: corrupted inode contents [ 246.545364][T12334] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #19: comm syz.4.2876: mark_inode_dirty error [ 246.556987][T12334] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2876: corrupted inode contents [ 246.571731][T12334] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #19: comm syz.4.2876: mark_inode_dirty error [ 246.584063][T12334] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #19: comm syz.4.2876: mark inode dirty (error -117) [ 246.596944][T12334] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 246.616557][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.825296][ T29] audit: type=1400 audit(1720006014.754:1181): avc: denied { override_creds } for pid=12350 comm="syz.0.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 246.879001][T12363] loop4: detected capacity change from 0 to 512 [ 246.907178][T12363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.922310][T12363] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.950442][T12363] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2887: corrupted inode contents [ 246.963176][T12363] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #19: comm syz.4.2887: mark_inode_dirty error [ 246.978335][T12363] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2887: corrupted inode contents [ 246.982511][T12375] netlink: 'syz.2.2888': attribute type 15 has an invalid length. [ 246.991066][T12363] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #19: comm syz.4.2887: mark_inode_dirty error [ 246.998245][T12375] netlink: 'syz.2.2888': attribute type 18 has an invalid length. [ 247.011141][T12363] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #19: comm syz.4.2887: mark inode dirty (error -117) [ 247.030843][T12363] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 247.051386][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.194183][T12380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12380 comm=syz.3.2893 [ 247.885835][T12398] vhci_hcd: invalid port number 0 [ 247.906269][T12406] SET target dimension over the limit! [ 247.927594][T12411] loop2: detected capacity change from 0 to 512 [ 247.946518][T12411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.962124][T12411] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.983504][T12409] pimreg: entered allmulticast mode [ 247.993031][T12411] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #19: comm syz.2.2902: corrupted inode contents [ 248.008057][T12411] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #19: comm syz.2.2902: mark_inode_dirty error [ 248.019932][T12411] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #19: comm syz.2.2902: corrupted inode contents [ 248.032333][T12411] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #19: comm syz.2.2902: mark_inode_dirty error [ 248.044533][T12411] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #19: comm syz.2.2902: mark inode dirty (error -117) [ 248.057415][T12411] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -117) [ 248.095614][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.263294][T12440] netlink: 'syz.3.2912': attribute type 10 has an invalid length. [ 248.279607][T12440] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.289051][T12440] bond0: (slave team0): Enslaving as an active interface with an up link [ 248.320084][T12440] __nla_validate_parse: 10 callbacks suppressed [ 248.320106][T12440] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2912'. [ 248.405845][T12449] netlink: 'syz.3.2913': attribute type 3 has an invalid length. [ 248.427265][ T9574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.451040][T12451] loop3: detected capacity change from 0 to 512 [ 248.504678][ T9574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.542417][T12430] chnl_net:caif_netlink_parms(): no params data found [ 248.589252][ T9574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.659948][ T9574] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.737451][T12430] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.744631][T12430] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.752142][T12430] bridge_slave_0: entered allmulticast mode [ 248.759087][T12430] bridge_slave_0: entered promiscuous mode [ 248.766807][T12430] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.773961][T12430] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.781813][T12430] bridge_slave_1: entered allmulticast mode [ 248.788650][T12430] bridge_slave_1: entered promiscuous mode [ 248.819443][T12430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.849484][T12430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.897041][ T9574] bridge_slave_1: left allmulticast mode [ 248.902851][ T9574] bridge_slave_1: left promiscuous mode [ 248.908552][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.948166][ T9574] bridge_slave_0: left allmulticast mode [ 248.954001][ T9574] bridge_slave_0: left promiscuous mode [ 248.959771][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.245378][ T9574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.273508][ T9574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.299713][ T9574] bond0 (unregistering): Released all slaves [ 249.326373][T12430] team0: Port device team_slave_0 added [ 249.346044][T12430] team0: Port device team_slave_1 added [ 249.393534][T12430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.400558][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.426528][T12430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.546892][T12430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.553991][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.580046][T12430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.801874][ T9574] hsr_slave_0: left promiscuous mode [ 249.812187][ T9574] hsr_slave_1: left promiscuous mode [ 249.833472][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.841241][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.859182][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.866832][ T9574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.897243][ T9574] veth1_macvtap: left promiscuous mode [ 249.902786][ T9574] veth0_macvtap: left promiscuous mode [ 249.908418][ T9574] veth1_vlan: left promiscuous mode [ 249.913751][ T9574] veth0_vlan: left promiscuous mode [ 250.067368][ T9574] team0 (unregistering): Port device team_slave_1 removed [ 250.098103][ T9574] team0 (unregistering): Port device team_slave_0 removed [ 250.174656][T12474] netlink: 'syz.3.2918': attribute type 8 has an invalid length. [ 250.203874][T12430] hsr_slave_0: entered promiscuous mode [ 250.210528][T12430] hsr_slave_1: entered promiscuous mode [ 250.218563][T12488] loop2: detected capacity change from 0 to 512 [ 250.240695][T12488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.258665][T12488] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.291786][T12488] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #19: comm syz.2.2927: corrupted inode contents [ 250.304089][T12488] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #19: comm syz.2.2927: mark_inode_dirty error [ 250.315640][T12488] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #19: comm syz.2.2927: corrupted inode contents [ 250.328012][T12488] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #19: comm syz.2.2927: mark_inode_dirty error [ 250.340356][T12488] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #19: comm syz.2.2927: mark inode dirty (error -117) [ 250.353934][T12488] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -117) [ 250.373098][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.652608][T12430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.667278][T12430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.694195][T12430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.741624][T12430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.820406][T12430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.845888][T12430] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.863768][T12518] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2935'. [ 250.884457][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.891668][ T9598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.931553][T12430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.942022][T12430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.956944][ T29] audit: type=1326 audit(1720006018.520:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz.2.2935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fb81f7b99 code=0x0 [ 250.991788][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.998992][ T9596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.097942][T12430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.119290][T12532] loop4: detected capacity change from 0 to 512 [ 251.156821][T12532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.178182][T12532] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.190845][T12430] veth0_vlan: entered promiscuous mode [ 251.202472][T12430] veth1_vlan: entered promiscuous mode [ 251.214225][T12532] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2939: corrupted inode contents [ 251.224955][T12430] veth0_macvtap: entered promiscuous mode [ 251.234460][T12430] veth1_macvtap: entered promiscuous mode [ 251.242093][T12532] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #19: comm syz.4.2939: mark_inode_dirty error [ 251.247578][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.264054][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.273979][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.284500][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.294451][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.302763][T12532] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2939: corrupted inode contents [ 251.304896][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.326558][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.337106][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.340699][T12532] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #19: comm syz.4.2939: mark_inode_dirty error [ 251.346932][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.346951][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.346968][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.346984][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.399591][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.410033][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.419965][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.430539][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.440547][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.450997][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.454565][T12532] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #19: comm syz.4.2939: mark inode dirty (error -117) [ 251.460825][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.483840][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.487940][T12532] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 251.493679][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.513215][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.523069][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.533610][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.543476][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.554101][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.564002][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.574467][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.584332][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.594766][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.611529][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.622930][T12430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.636830][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.647354][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.657258][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.667786][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.677733][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.688425][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.698374][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.709002][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.718881][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.729421][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.739344][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.749810][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.759830][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.770362][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.780249][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.790757][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.800637][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.811099][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.820919][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.831386][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.841313][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.851769][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.861870][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.872353][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.882324][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.892791][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.902640][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.913094][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.923009][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.933535][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.961739][T12430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.976521][T12430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.985552][T12430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.994397][T12430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.003958][T12430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.264704][T12574] loop3: detected capacity change from 0 to 512 [ 253.377943][T12638] loop4: detected capacity change from 0 to 164 [ 253.475103][T12654] loop4: detected capacity change from 0 to 512 [ 253.496534][T12654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.515864][T12654] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.555793][T12654] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2976: corrupted inode contents [ 253.572252][T12654] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #19: comm syz.4.2976: mark_inode_dirty error [ 253.585950][T12654] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.2976: corrupted inode contents [ 253.596401][T12676] loop3: detected capacity change from 0 to 128 [ 253.603830][T12654] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #19: comm syz.4.2976: mark_inode_dirty error [ 253.616500][T12654] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #19: comm syz.4.2976: mark inode dirty (error -117) [ 253.631092][T12654] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 253.656823][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.683618][T12681] loop3: detected capacity change from 0 to 128 [ 253.730114][T12681] FAULT_INJECTION: forcing a failure. [ 253.730114][T12681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.743248][T12681] CPU: 1 PID: 12681 Comm: syz.3.2993 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 253.753492][T12681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 253.763611][T12681] Call Trace: [ 253.766894][T12681] [ 253.769915][T12681] dump_stack_lvl+0xf2/0x150 [ 253.774522][T12681] dump_stack+0x15/0x20 [ 253.778721][T12681] should_fail_ex+0x229/0x230 [ 253.783495][T12681] should_fail+0xb/0x10 [ 253.787737][T12681] should_fail_usercopy+0x1a/0x20 [ 253.792773][T12681] strncpy_from_user+0x25/0x270 [ 253.797633][T12681] ? should_failslab+0x9/0x20 [ 253.802333][T12681] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 253.807975][T12681] getname_flags+0xb4/0x360 [ 253.812554][T12681] user_path_at_empty+0x2c/0x120 [ 253.817543][T12681] __se_sys_chdir+0x4f/0x150 [ 253.822165][T12681] __x64_sys_chdir+0x1f/0x30 [ 253.826838][T12681] x64_sys_call+0x2b05/0x2d70 [ 253.831565][T12681] do_syscall_64+0xc9/0x1c0 [ 253.836144][T12681] ? clear_bhb_loop+0x55/0xb0 [ 253.840836][T12681] ? clear_bhb_loop+0x55/0xb0 [ 253.845558][T12681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.851555][T12681] RIP: 0033:0x7fd560d82b99 [ 253.856043][T12681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.875684][T12681] RSP: 002b:00007fd560004048 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 253.884117][T12681] RAX: ffffffffffffffda RBX: 00007fd560f10f60 RCX: 00007fd560d82b99 [ 253.892124][T12681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 253.900107][T12681] RBP: 00007fd5600040a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.908175][T12681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.916169][T12681] R13: 000000000000000b R14: 00007fd560f10f60 R15: 00007ffe6189dc98 [ 253.924235][T12681] [ 253.995874][T12693] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2998'. [ 254.059190][T12702] 9pnet_fd: Insufficient options for proto=fd [ 254.068318][T12702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3001'. [ 254.111403][T12705] loop2: detected capacity change from 0 to 512 [ 254.147225][T12705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.162881][T12705] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.199858][T12705] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #19: comm syz.2.3002: corrupted inode contents [ 254.212103][T12705] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #19: comm syz.2.3002: mark_inode_dirty error [ 254.228220][T12705] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #19: comm syz.2.3002: corrupted inode contents [ 254.243554][T12705] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #19: comm syz.2.3002: mark_inode_dirty error [ 254.255983][T12705] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #19: comm syz.2.3002: mark inode dirty (error -117) [ 254.274112][T12705] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -117) [ 254.299942][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.482568][T12734] tipc: Started in network mode [ 254.487553][T12734] tipc: Node identity ac1414aa, cluster identity 4711 [ 254.495195][T12734] tipc: Enabled bearer , priority 10 [ 254.501891][T12734] tipc: Disabling bearer [ 254.573944][T12740] loop1: detected capacity change from 0 to 512 [ 254.615996][T12740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.633760][T12740] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.676659][T12740] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #19: comm syz.1.3014: corrupted inode contents [ 254.693956][T12740] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #19: comm syz.1.3014: mark_inode_dirty error [ 254.721237][T12740] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #19: comm syz.1.3014: corrupted inode contents [ 254.743553][T12740] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #19: comm syz.1.3014: mark_inode_dirty error [ 254.755835][T12740] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #19: comm syz.1.3014: mark inode dirty (error -117) [ 254.800075][T12740] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 254.841963][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.866263][T12756] loop2: detected capacity change from 0 to 512 [ 254.934755][T12756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.963900][T12756] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.994999][T12762] loop1: detected capacity change from 0 to 512 [ 255.002879][T12762] EXT4-fs: quotafile must be on filesystem root [ 255.009314][T12751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3019'. [ 255.029096][T10875] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.093903][ T29] audit: type=1400 audit(1720006022.369:1183): avc: denied { mount } for pid=12766 comm="syz.3.3025" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 255.116499][ T29] audit: type=1400 audit(1720006022.378:1184): avc: denied { unmount } for pid=11381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 255.179975][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3029'. [ 255.209878][T12783] loop1: detected capacity change from 0 to 512 [ 255.250244][T12783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.268220][T12783] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.317301][T12783] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #19: comm syz.1.3031: corrupted inode contents [ 255.347056][T12783] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #19: comm syz.1.3031: mark_inode_dirty error [ 255.364917][T12783] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #19: comm syz.1.3031: corrupted inode contents [ 255.382303][T12783] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #19: comm syz.1.3031: mark_inode_dirty error [ 255.394994][T12783] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #19: comm syz.1.3031: mark inode dirty (error -117) [ 255.413028][T12783] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 255.434351][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.540691][T12820] loop1: detected capacity change from 0 to 128 [ 255.588052][T12826] bond0: entered promiscuous mode [ 255.593192][T12826] bond_slave_0: entered promiscuous mode [ 255.599172][T12826] bond_slave_1: entered promiscuous mode [ 255.607808][T12826] team0: entered promiscuous mode [ 255.613038][T12826] team_slave_0: entered promiscuous mode [ 255.619109][T12826] team_slave_1: entered promiscuous mode [ 255.633047][T12826] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 255.637593][T12828] loop1: detected capacity change from 0 to 256 [ 255.640944][T12826] Cannot create hsr debugfs directory [ 255.666586][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3049'. [ 255.697788][ T29] audit: type=1400 audit(1720006022.941:1185): avc: denied { append } for pid=12835 comm="syz.4.3051" name="pfkey" dev="proc" ino=4026535674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 255.760427][ T29] audit: type=1400 audit(1720006023.006:1186): avc: denied { ioctl } for pid=12841 comm="syz.0.3055" path="socket:[50891]" dev="sockfs" ino=50891 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 255.767701][T12845] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3056'. [ 255.795351][T12845] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3056'. [ 255.996677][T12860] pim6reg: entered allmulticast mode [ 256.003751][T12860] macvlan1: entered allmulticast mode [ 256.009303][T12860] veth1_vlan: entered allmulticast mode [ 256.036586][ T29] audit: type=1400 audit(1720006023.255:1187): avc: denied { connect } for pid=12861 comm="syz.3.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.422506][T12878] loop1: detected capacity change from 0 to 128 [ 256.468387][T12877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.498849][T12871] loop2: detected capacity change from 0 to 32768 [ 256.557696][T12871] loop2: p1 p3 < p5 p6 > [ 256.565197][T12885] Cannot find add_set index 0 as target [ 256.628869][T12871] loop2: detected capacity change from 0 to 256 [ 256.765314][T12909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=12909 comm=syz.2.3073 [ 256.774554][T12911] syzkaller1: entered promiscuous mode [ 256.783287][T12911] syzkaller1: entered allmulticast mode [ 257.036356][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 257.047058][T12952] macvtap0: entered promiscuous mode [ 257.053330][T12952] macvtap0: left promiscuous mode [ 257.076012][T12954] loop4: detected capacity change from 0 to 512 [ 257.438932][ T29] audit: type=1326 audit(1720006024.538:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.462649][ T29] audit: type=1326 audit(1720006024.538:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.486218][ T29] audit: type=1326 audit(1720006024.538:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.509794][ T29] audit: type=1326 audit(1720006024.538:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.533422][ T29] audit: type=1326 audit(1720006024.538:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.557075][ T29] audit: type=1326 audit(1720006024.538:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.580687][ T29] audit: type=1326 audit(1720006024.538:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.605804][ T29] audit: type=1326 audit(1720006024.667:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.629371][ T29] audit: type=1326 audit(1720006024.667:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.643676][T12984] loop4: detected capacity change from 0 to 512 [ 257.653011][ T29] audit: type=1326 audit(1720006024.667:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.4.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc6eb0b99 code=0x7ffc0000 [ 257.690257][T12984] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.3103: corrupted in-inode xattr: invalid ea_ino [ 257.691649][T12980] hugetlbfs: Bad value 'p' for mount option 'size' [ 257.691649][T12980] [ 257.713380][T12984] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3103: couldn't read orphan inode 15 (err -117) [ 257.730164][T12984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.824082][T12997] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3104'. [ 257.833216][T12997] tipc: Enabling of bearer rejected, failed to enable media [ 257.843843][T10919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.953992][T13007] loop1: detected capacity change from 0 to 256 [ 258.028581][T13012] netlink: 'syz.1.3112': attribute type 21 has an invalid length. [ 258.052388][T13012] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3112'. [ 258.080688][T13016] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.089344][T13016] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.107150][T13016] bridge0: entered allmulticast mode [ 258.156620][T13020] netlink: 'syz.1.3116': attribute type 1 has an invalid length. [ 258.199835][T13016] bridge_slave_1: left allmulticast mode [ 258.207192][T13016] bridge_slave_1: left promiscuous mode [ 258.213909][T13016] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.237568][T13016] bridge_slave_0: left allmulticast mode [ 258.243707][T13016] bridge_slave_0: left promiscuous mode [ 258.251823][T13016] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.380580][T13032] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 258.395643][T13032] bond1: (slave vcan1): Error -95 calling set_mac_address [ 258.565019][T13052] loop1: detected capacity change from 0 to 512 [ 258.586209][T13052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 258.598992][T13052] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.628201][T12430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 259.041682][T13078] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 259.051193][T13078] team0: Device ipvlan2 is already an upper device of the team interface [ 259.184126][T13095] loop2: detected capacity change from 0 to 2048 [ 259.191318][T13095] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 259.201125][T13095] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 259.213982][T13095] EXT4-fs (loop2): failed to initialize system zone (-117) [ 259.221283][T13095] EXT4-fs (loop2): mount failed [ 259.269589][T13095] netlink: 'syz.2.3139': attribute type 27 has an invalid length. [ 259.453557][T13118] netlink: 'syz.0.3149': attribute type 1 has an invalid length. [ 259.470104][T13121] netlink: set zone limit has 8 unknown bytes [ 259.497560][T13128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13128 comm=syz.0.3151 [ 259.497585][T13129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13129 comm=syz.0.3151 [ 259.522294][T13132] __nla_validate_parse: 5 callbacks suppressed [ 259.522313][T13132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3152'. [ 259.524037][T13127] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 259.555608][T13134] loop2: detected capacity change from 0 to 512 [ 259.562877][T13134] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 259.566574][T13127] veth0_to_bridge: entered promiscuous mode [ 259.612027][T13127] ================================================================== [ 259.620155][T13127] BUG: KCSAN: data-race in fib_table_lookup / fib_table_lookup [ 259.627734][T13127] [ 259.630055][T13127] read to 0xffff888128986592 of 1 bytes by task 13128 on cpu 1: [ 259.637688][T13127] fib_table_lookup+0x32c/0xd50 [ 259.642558][T13127] ip_route_output_key_hash_rcu+0x3a1/0x12d0 [ 259.648640][T13127] ip_route_output_flow+0x76/0x120 [ 259.653781][T13127] udp_sendmsg+0xe5d/0x12f0 [ 259.658303][T13127] udpv6_sendmsg+0x774/0x1590 [ 259.662999][T13127] inet6_sendmsg+0xaf/0xd0 [ 259.667422][T13127] __sock_sendmsg+0x8b/0x180 [ 259.672030][T13127] ____sys_sendmsg+0x312/0x410 [ 259.676800][T13127] __sys_sendmmsg+0x269/0x500 [ 259.681490][T13127] __x64_sys_sendmmsg+0x57/0x70 [ 259.686349][T13127] x64_sys_call+0xa87/0x2d70 [ 259.690954][T13127] do_syscall_64+0xc9/0x1c0 [ 259.695472][T13127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.701377][T13127] [ 259.703701][T13127] write to 0xffff888128986592 of 1 bytes by task 13127 on cpu 0: [ 259.711418][T13127] fib_table_lookup+0x355/0xd50 [ 259.716286][T13127] ip_route_output_key_hash_rcu+0x3a1/0x12d0 [ 259.722277][T13127] ip_route_output_flow+0x76/0x120 [ 259.727394][T13127] udp_sendmsg+0xe5d/0x12f0 [ 259.731911][T13127] udpv6_sendmsg+0x774/0x1590 [ 259.736603][T13127] inet6_sendmsg+0xaf/0xd0 [ 259.741023][T13127] __sock_sendmsg+0x8b/0x180 [ 259.745626][T13127] ____sys_sendmsg+0x312/0x410 [ 259.750396][T13127] __sys_sendmmsg+0x269/0x500 [ 259.755083][T13127] __x64_sys_sendmmsg+0x57/0x70 [ 259.759941][T13127] x64_sys_call+0xa87/0x2d70 [ 259.764545][T13127] do_syscall_64+0xc9/0x1c0 [ 259.769063][T13127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.774972][T13127] [ 259.777292][T13127] value changed: 0x00 -> 0x01 [ 259.781966][T13127] [ 259.784287][T13127] Reported by Kernel Concurrency Sanitizer on: [ 259.790430][T13127] CPU: 0 PID: 13127 Comm: syz.0.3151 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 259.800585][T13127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 259.810659][T13127] ================================================================== [ 259.825473][T13126] veth0_to_bridge: left promiscuous mode