last executing test programs: 17.379927015s ago: executing program 3 (id=897): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x100, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x5, {0xf1, 0x69}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xb8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xa4, 0x6, [@m_ife={0xa0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c}]}, {0x4d, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7"}, {0xc}, {0xc}}}]}]}}]}, 0x100}}, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x5}, {0x6}]}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x9, r4, 0xfffffffffffffffb) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) socket(0x0, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/217, 0xd9}], 0x1) sendto(r5, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000a, 0x2010, r3, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000005c0)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000880)=""/226, &(0x7f0000000580)=0xe2) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r9, &(0x7f0000000540)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1, &(0x7f0000000340)=""/54, 0x36}, 0x0) 17.164505673s ago: executing program 3 (id=899): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffb, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fb80)={0x0, [], 0x0, "cbae00ccb770cd"}) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) (fail_nth: 20) 16.793696062s ago: executing program 3 (id=901): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9beb010018000000000000002200000018000000080000000700000001000084ff6bb7678f00d8633e9a883ac8d6f14ad91831b717f8c54a629224e8c6702b05e0199c3350bcb0ee8c80f4d09d20d167c24956c18983c7541d415999"], &(0x7f00000001c0)=""/4096, 0x38, 0x1000, 0x1}, 0x20) socket$inet6(0xa, 0x3, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) mkdir(&(0x7f00000012c0)='./file0\x00', 0x2) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x3, 0x80000000, 0x4, 0xfffffffb}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x30000014}, 0x20008010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000800020000000000"], 0x1c}}, 0x0) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x70, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x0]}}, {{0x1c, 0x1, {0xd, 0x0, 0x10}}, {0x4}}]}]}, 0x70}}, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/bus\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001280)) epoll_create1(0x0) socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x6, 0x0, 0x3) mremap(&(0x7f0000912000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00003c7000/0x4000)=nil) madvise(&(0x7f00004d5000/0x2000)=nil, 0x2000, 0xa) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000001300)={0x60002013}) unshare(0x5c000000) getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) 16.617279606s ago: executing program 3 (id=902): mkdir(0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r3 = epoll_create1(0x0) r4 = syz_io_uring_setup(0x723a, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r7 = syz_open_procfs$namespace(0x0, &(0x7f00000010c0)='ns/pid\x00') preadv(r7, &(0x7f0000001100)=[{&(0x7f00000000c0)=""/4085, 0xfffffecf}, {&(0x7f00000013c0)=""/234, 0xea}], 0x2, 0x1ffff000, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x9f7, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x320e, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000400)={0x20000004}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f0000000540)=""/189, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x90) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x71, 0x101301) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r10, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 9.852701293s ago: executing program 0 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x90) 9.827639415s ago: executing program 0 (id=978): eventfd2(0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x80}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30}, {0x6, 0x0, 0x0, 0xfffffff9}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r1) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000d001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}}, 0x0) 9.724149474s ago: executing program 0 (id=979): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="ea81b05a8bc4d6b23a3570deb7295b2fe62d0b1cc58075254783665ffb459e0e6941391d5b58783d6090927a3763f65bb7443e23f447bbc728bffa7524c0d8ab2616f71232782555a5b1686e496d7e31f24b0deede72f86675fd99a4ac2a47153939e2ae375aa139e1692c8bae71bbd9afe6056d1973ca7cd50fd68498ac08b1df053c24744f878705e66d5334d9e9e74049f814680c1422507bbeab94f35459cd8db613ace63d0135194c453ad151a5a343e0a7e89475fa0e2ea2f370e74aaea1080f5e4cd121a036a78068982cf0baf56979333c4e055db5331dfcfdae728d9ea5d41732aaae05196bfeb8ef2973f7abce10f1fbda58ce7ca341adeb5e620e5ae743b0d1b36b95fec863beece67e2c4cbdf22d1f071e0a6369274cffa329e86b78548d726f32ce81aa3b6cd86e0116cefb216156f04f56456f417005bcc069b6ef448635884de0d1e6dad861788f47db99d7d950e07ef1f2133b95c2baf24fa602718b9f6af66f2ded90f169782b92683551135d96013742f249044d032a82a55894cb7ea1bb546c78c558e2e91a87d48a71ac38802a5821d6ab7525a982667e5757424b139e44721e90789b0017c3e7c132a3fe9a5ee1c6dc672ec4ff2dfb81ee9ec519560b18e139a525a6241ead5a3ad300978187a3dc6f06f0da63fb9f4b8fe5a613a5b11c5fdbd47128f01d5c8266f026c85f2d9a6762ddd6098d54056bec36cf00fd83f902ff8f9c2b21afbe468d82a68462be285cb9d7a8ae7f96ac4b382d5c05154faf8233f337f3bca1b0a726cd2bca454236144b3b5f8fe0368d84f137cf8b686628aa3cce59e329e4926aacd495f62fed9c4b43520ff589257ac98bf3639d2693b92763f1f2bf1dead87cb11e370b158f3df2944d8c36078694d3a252ad6bd5d462c7d46c8167435fe1c7e47b89133969e41467ede918ba95409dcb9ca4255dd5d00a8a44f4e2a3db75b18b4636b5447a14410cc23da3e21551fdca6f69fd9fd4404af268159f7fd9dce2865cb838e3d2e128b7bd3ed1aed5feb2975e47501e098c894ac23bc9c44a3be844a34eb327c801981d8669657c4aeae938799d0c056162b3b4a717a75b33f7494c931e6375f79128a5f2ff8475d051c656ebce78a603f5d0dc2170d49f3a8b15c56b6aab0a7304e39f30f1e665493f567b3dffd6794a5ba112032a8902d8e25b94e232a9e436e2ccebe9bab845373e7aad5da54961c4eb64af023ff574b57137bbb9136abc30f6224eaff196e8065651d13f90a63ee311e72e0025fa381e5490f403a99ebb2c19d20945723d27ad15d10b6ab012601a3bcaef404f62a80270d975a5ec84a34fc8e3462007afd5f381772317e5a0abb3a802d2fd2bb5ce757e864fdecd00fed6163294f7b619c9027f357752da59f4373f59ed10a027eb36a988234497c77b772a6335bfe8e44b2ac8934086ef62526c3b1f299621697c4032ab1bdb78376be6283e1ae26b17d456b4e6e711ac756f8ed8cbcdca9823a3222b8b99578250ff49e065d6ccfcd3d03e851afb6c7f0f5c27d2dfb81158e203c2cca547a2055f0313b1be7ee80db8de0844ce9263e22f2cdd39e15b8714dc67037eccfc53e108078a21a53c57b0be8b2001aa6518be28b96bb3291686a2ae3799ad7d1efd09d5e874f75c238e8f0631c5a245c7c38f1204e4d655a063299b21ba17c1a6a161dffffd657e1cfe35d88722cbfcccd84213175c762bd539df2499ad7033955a23fa30e9a63c4f5e34333b634821d9fc49a3d4619eeb9f155ef978abc964b0006614c2d84ba746d7295bbd2cd37525c769f59d4c82b4a82aa28bbfc0dc54d9763c34dc67ad47e26639047fcd3dfc1b84d9170bab311ba73081ebf1b1393b429f49904851b690890b9b47f8a1d5c3e9e1a7a1598cd32a271195c11d0b27c9be4a1fa7d85dc0f0662276d42ceeab051fe4af0bc165c66565969069ebd6519062b0c75826be06ded45b0c89adb8cad4b8cbcb870bfd5afdc7ad2c4ff81636c616d0c3c99cbe4f5359076c08f777ef29bb1ed3832044160a604d1792de13213728f96c7349e7b0c13e5a1b6ed36034c41e4beac3a4eb6215815cf3aa8df95a87b5e042fe440d7fc4dbc7cfc72af0ff4172260061de41d1d43d74596c518ff33d25829a05cfed33a831125285a78e7cd5cf6113c62efda33ae7953ad15d2d06481a114c0c44662fc8d4afd9777f4137ff6bbe16e7e8846980450d1b0879fe548cdae984d7ee22dec6125d4a4aed70e6b08e1df93ec887aaa4a12933877ea22af90781a9231884ef09ea0ff6e1ebe69f6750aeac7213137de987878bf3145f9ac7e1971c1af2e9a4e147d1ad64c09fbc39a10f2537e6ff89d3a96d7eafacd843642b3b1ccbd1eb6231c9c480fc8e7e31323295df1ff06f9d0864b2ea70cac41d37cbc17ed797d10294f36e06f59a23e2b39a0a29995182c80c4953378372512c31180053f24dc6919e6c311a7eca8fa4c09f7308fc6af737954b7e750661d76d1d3f7cfce9d6d69ef462cd7b8b32f4d5ba01b4949fe9a543d30c5aae743fbe4f2376304113c4947cc0391d6ec2f4292ad2215d256469ba920501b4d37325ef74cd5a8eb947d08ec1b8df7941576bc21f2d89248c59398c0e7edb7057c3f6b6d596b1f432bc16142ef17bcb84f1b451174fc07076466f9b3897338c9bb6a2c73a78dd8ce288d9c15b5f4fc18c0bc1525bb54bbaaf28c624044b11c9bc9e16f9dbffd9eb9f6e889c9012df45b47751829b2d45d3dc7557a5168a425f859e08b548ef7c523cb87db05f032adb86175f76c93c1b7acc3f3c5e37682a83d7f1ccecb3446462634f5757619c6755dde43b3d25e4fde3875fefa8c3584b998113950155ba90633ca5baba4a919db8866d7d5101283c13ff1c2dece0fe427a5f5a9e542bfdb46e27de869a66822e27c882d474826d6e61f3e6ff26a9fd1c2cc7fcbc4eb0dfb2635b6972e97f6dccd07cfd632431e6f45aef9788a263fe2d38e692e65fff44b0232a5b466c353f902ef5fe51738ca4f7c4ba60baba4f1687b59de21fba9a32600d7dbaad9f630d460d031af7d9c7a637f474cb0d4241a06d6bc9060915df369fd0929d4ba4ea16a95c14a90ffca9691dd22967f53240313c13cd32197b7ba3afeef6f5f946ae009939417085a71c989e28c54fccfa9ae78bb6cf9b76f93daad43895be29e13f7e39d8e89791882555548a99494fe12b0b0ae60589bc7fa1512019af594b52d98d1ccc951091c633885070822d1458c3af43882951319a88cce9bbea97ed3081d46d4870f97d8107c608dd0779604fa6b0d565aa3bd300a59b6dc25341ac90c5162f37ab928b600e5053bb60c660aa7fcbec42d7ddd5d1427163f044c56d2796c5cba8c31986bb1901f945c213018a3f41993fa235bca09603d439d87ff5377a8834f578910b498dbb8f8672e7753fa465c11980280a6ca72134f03b4559cefb211aaec235c82943685b2b29cb295923c587001f0a60e4935b5d4f8f407c2424bcfdc004818431ca3c132535659032dee28d35efe338bf1ffa2580b19e11275ae9a817c190eed2af896483605be22e2c5148f576fe916c88fe40f3f821e6dff30b50bf5d560c58ade624fc8e06ff61dc1ceda26b9ec5d9b6afdb8c2800de735ced8bca9f88c7fad7a447b6fb27f52598ac5844393ce530c66c286b2d5fd0c2eb0e05b249e678f9e5a27ef52242e96fe911afb14a4093e11b9eb390611b81ab3b1c8373af552ed7f97e84620c72b24e26d8402b02626eb2b9cd6f212349ae680c6e6962c176a93f0e0564c81fd7a59e3496b4fbf234e0bb283f1febefe4d0f5ad71353d17e44c3b539b7c2487c4e7bccd285a0141a894c86ef48c858770375f98b4f37cfe707dec888b1f18b049facb3bab729aa2233b1f632b4990e0e204f43f24ef9050e7bdff6556ee994cbfe153c8c854711dcba6cd084e59f620ac00cd45d6ad5c9e85fb3bd5a6d16a5bee5427112f1e1df277d187fb5cd51af2884dae6276552e12f045e27254d8a0dcf4fb785be7a45a66168205a5acdcdc74240834a4d18440dccbc50b851af6c2b47c40fccdf6f40a3c06661a4a05bb2e4f6d95c2fc06de45c1db07c7696b0e36bd7574445b7fa4adc4e0f0b7a3e33a6ffafaa233229320b0257fe47578c1ab769a84985518e1d4149d95774eda7cc7b709cb686bb564cd5f8e7d94ef0b7cfb80b1508e4fc09ab30d1bedb58facb68bc0eaf5eb7d8299d01e1bc864adc9673a4f9988fa77a032f396b2bb1013f05dc4f897a68174536fa1ea2bad6cc8daf3b1bb775622a959013e70b95b5364219a4729dea58edc74e27716a6e6f4ea35637983c24a052392ccd6cc66ff6a8e9633f561aad71279e30ef0239e76a99bc30f820a8083ba2b90efac45114bb065dc97d5893fee1c556103ff66eb54e8318e0a303d3857533585ecc6fb3f6e374d0ac60eeee39b5c34071eb55260485f14006f024a344ece71dfeaa849e387b5bd7645f837369ce9d032e64944358cdbc75bea993596ef1f3adf7ad85aed0bafaae1a12cd8d66b4784631e931efb168f5df15971e9faf33a517d641517a0215eb08dbf0c5d9b33fcca6c440d626249c4af0e311998339c431156c2c4d280897a1d7b38885d9847f007e50a95b50c5bfb1f195426e3cf3d44b60b076b931e0c699508fadea1a0484bd01a8f3e56540696a7ff9dbecfedc5625b04cee3b9bf3bae62dec1e901f4f9aa9ed78649d53ce4ecf21ab64ba6aba5a34e2555a89346d9960dc60c9f63ed8577f9508080fc2dcf4a16bccb3021492041e41eb6741d319121f180e80051e93925980b334865813ba90df4db306add38c26d63263ba7ca32cf5a71d68af4d282fd31e83518bb39296927124fe5d52c311444b8d641b05ab891807438c70e599f24c30c64bbb425b21635c4d863e1551667147a5828cf246130da63ad87c1578fb637585baad7f3a7e9c81b9cf5cad20f77574911f1d2435200689248a01393d5d066a57773e95165fef2df26af22e2309c09e8ba1e334b84aad69be00b30af37a9f91ad867f911b3fb7512047a90f12f970c6ace9c59440a95435d8b5ea8c4d943e4f5d4ecfe8124e878c918108289ee704bd1cb1cfb914df8dc4fdeaee34c2c1af6bdc640d441b3a1700078c817ba102ed1fb8ef03a5781336bb003f40fc7d7fdb5c796cc1b04257c5755f96cc39bef5cb864e2ffaf64ebca4040ea3ddb42efb1a57c5449da1d73cd9269f4e00a788dad8d20947a2a06e98e46bee7d925c348877647b73c2d0443e9208aa476ff66acd5aab0d35ffa235d0020fbd3c7477cb24a6f332faa89178376314965f8bc102501952200a48d5ea964600d13d42c66bbe0a93e9355275e1f1a5c532c7d3702b310afe07dd260f4010fe0940bff858d29b400277cd81949dae19b2f0dca0623ea89265e30f0071b706389341e6116c3eef903507730ffa309baa3757623914407ea99a7baa66d87fb4264b15276a8ca7af55655668129578c6c113075c27e2091e225fd285a5ee0aa49aa6bde19695f05e049603ae54540ee2832096ed2e2d429320284ab4f8c56b3885a183efb60bc468d343eaeb73c9350dde4f68c90e880e53ed6fb24e790b3b381949f0957ce90ef87fd0ea191a8f950ff4a11ef092246042da52cbcd56dbf263469098bf55f388b45e1ddf838e036cc6af4fc2c3da47f3e20ae956ed675bbe7dee707d35aca3e0d57e9ca3bbbdeb6c8d077aff3e8005d7bff98808043b0dff09f8e941a3ad7d727771c149b32f7120b36d4b9", 0x1000}, 0x68) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r0, r1, &(0x7f00000010c0)=0xfff, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000001100)=0x9) (async) r2 = socket$inet6(0xa, 0x800, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001240)={'gre0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x4, 0xa, {{0x38, 0x4, 0x0, 0x1, 0xe0, 0x66, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x23}, {[@cipso={0x86, 0x1f, 0x0, [{0x0, 0x7, "48dbe8ded2"}, {0x2, 0xc, "c2c8440e8f5e8819ac49"}, {0x2, 0x6, "f3c9112a"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0x6, [{@private=0xa010100, 0x7}, {@multicast2, 0x3a}]}, @generic={0x83, 0xe, "fa5650ef06e484d66b69a893"}, @generic={0x44, 0xd, "77c44e0ce27b99f9e16782"}, @cipso={0x86, 0x18, 0x2, [{0x1, 0x6, "15bc42c9"}, {0x5, 0xc, "3ddd7565547a0ffc32f9"}]}, @timestamp_addr={0x44, 0x1c, 0x1d, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x1ff}, {@multicast1}, {@loopback, 0x200}]}, @timestamp_prespec={0x44, 0x2c, 0x26, 0x3, 0x4, [{@local, 0x8001}, {@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb7}, {@multicast1, 0x7}]}, @ssrr={0x89, 0x17, 0xbe, [@remote, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000001280)={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8001, 0xfffe, 0x2bb7, 0x100, 0x8001, 0x200, r3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001380)={'veth0_to_bridge\x00', 0x0}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000013c0)={0x0, @remote, @private}, &(0x7f0000001400)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'tunl0\x00', &(0x7f0000001440)={'syztnl2\x00', r3, 0x8000, 0x7, 0x0, 0xe, {{0x13, 0x4, 0x0, 0x8, 0x4c, 0x65, 0x0, 0x2, 0x2f, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0xf, 0xe4, [@local, @multicast1, @loopback]}, @ssrr={0x89, 0x27, 0xdb, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @remote, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @broadcast, @remote]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000001800)={&(0x7f0000001300), 0xc, &(0x7f00000017c0)={&(0x7f0000001580)={0x20c, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000) (async) ioctl$sock_ifreq(r2, 0x891f, &(0x7f0000001840)={'team_slave_0\x00', @ifru_mtu=0xb437}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '--%$]'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x14010}, 0x20000000) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000019c0), 0x4) (async) pread64(r4, &(0x7f0000001a00)=""/108, 0x6c, 0xcb) (async) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r11, &(0x7f0000001c40)={0xc, 0x8, 0xfa00, {&(0x7f0000001ac0)}}, 0x10) r12 = syz_open_pts(0xffffffffffffffff, 0xc4041) ioctl$KDGKBENT(r12, 0x4b46, &(0x7f0000001c80)={0x1, 0x62, 0x328e}) (async) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000001cc0)="eef15bc716af7d9301a5e370dc811370b711d9fd2dc8eaa8ac14afd4ba5023c6953e545ff0e2f66eb59f2f9a7931bfc12d7f003e91772540dac6a17d6c9e6239bfc404dadc80cf54207ffb") (async) connect$packet(0xffffffffffffffff, &(0x7f0000001d40)={0x11, 0xf7, r9, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) (async) listen(r1, 0x0) (async) r13 = eventfd(0x4) write$eventfd(r13, 0xfffffffffffffffe, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000001d80)) 8.875007072s ago: executing program 0 (id=988): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000008c0)='wchan\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 8.797011969s ago: executing program 0 (id=990): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x20008100, &(0x7f0000000040)="8d5d9cfa0922033ba05d9a5c332ccc5504a3b81960e3e17507b656", 0x1b, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000380)="a91fabc58753b817a4b0c2b5315cdeeacf1b05d8fd1087406af96b56000d79f66a3b4ae5f1fedf2945fcfb864c8cb7eb260d8a4b90ddbea49b06c129f6bb54020844862531b300d5b49af54fa267792277fad6bd678bf04aa8a5634bd8af98e98b0ed684731194661818ec9576b2aef16847cb39e0aa8d79040d8c4e6cda0faf") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp6}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0)=0x5, 0x4) memfd_secret(0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000000000011000000670000002001000000000000", @ANYRES32=0x0, @ANYBLOB="629779816d530d"], 0x28}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 8.634352792s ago: executing program 0 (id=993): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) syslog(0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x108) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) io_uring_setup(0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0x2cc4, 0x0, 0x1, 0x1ff, 0x0, "5f330000a90100f9"}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r8, @ANYBLOB="fd00000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180000000000050017"], 0x50}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000100d00"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000040010000000000000000000000645b6048a2e4931133f6d9919fd48557d76811cd874f3c077bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"], 0x80}}, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) socket$inet(0x2, 0xa, 0xc45) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000140), &(0x7f00000010c0)}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000104"], 0x78) close(r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 7.589664906s ago: executing program 2 (id=1005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000740)=[{}, {}], 0x1f4, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x60240) 7.275756572s ago: executing program 2 (id=1007): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x9c, r0, 0x1}, 0x9c}}, 0x0) (fail_nth: 2) 7.092405977s ago: executing program 2 (id=1011): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141142, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x4052, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r1, 0xffffe000) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001c000000090a000000000000000000000000000008000a400000000014000000100001000000000000000000090000000af2b67b95edd0e9c8756eb010342fd621f38c786d333e57626edf20d86c3cc03813782aaf99dacc9ac32669bc3bb215b6f96f8173b9b0ccb4619c556d995a54b38add388f9f347c23cbdc8380cb287d88d7ede631cd3e966d35c702f0ad7fd7b6440c509946a000904155d8"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@data_ordered}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@delalloc}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000200)={0x0, 0x0}) syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r5, r5], 0x2}, 0x58) r6 = syz_clone(0x80400, &(0x7f0000000340)="d72dc5165d459b9bed422351f1f90a8bed48e74633db5bcf09692ed8a3f25ad2c721c89b88abe71119ea9dda7ece32dc8ecaf19aea2e1a401fa767a2ef8c495a6e6d019a9041f9e4ab8d81d8b9c422b970423d14960f28ee6543e13d34932062c13b471e4191d17fef83d4903f1ea298d4d5c86ce831e745eb06e6e3ed120ed372bb034e5f3fe59e91bdf1855f379b89e5e3cf270fe4f4bc636a151da7bd3e5ffe696198c8d40ea9ea5a3fc5c8cd7cec8c4febd44c6af7680960edfdf71cba63cf50bab9cf2bdccbb7e17bde37962a3833f7f178fd34f0494e4a58b07b6da2b61ca48662ba53728e099bee81fe631a70f7650efb113835c120a838918602", 0xfe, &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000a40)="0bdb3f4c78f859f1bd32bc66b901e8c465350d71f0bc0b459d7d7dbf58cd6b6fe1e4cc224c82fe37acfaeddc0e8487618f70a67ea39aff77fec52b3854d1b22646ae10cc48198ffd6cf7e82048bdfe013947a9ac08b20c0d1f669b7a2009ac057e0787ad3a017315c683457b878a58864338770a1e5e244719e93f581dcc3c95e316b144c64d9db6c5eaf85c9a319f66ca01b63393cee1eb7282764c92c00ed204dee8716abc96bb39") syz_open_procfs(r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x7d, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 6.732651276s ago: executing program 2 (id=1016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x728, 0x0, 0x270, 0xffffffff, 0x588, 0x588, 0x658, 0x658, 0xffffffff, 0x658, 0x658, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x75}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bond\x00', {0x8, 0x8, 0x50, 0x4df5, 0xb4, 0x4, 0x3f3, 0x5, 0x80, 0x8}, {0x2}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@loopback, @icmp_id=0x67, @gre_key=0x1}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0x0, 0xff000000, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'gre0\x00', 'macvlan0\x00', {}, {}, 0x2f, 0xf, 0x1, 0x4a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x4, 0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'rose0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x62, 0x3, 0xe, 0x74}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x2473, [0x2, 0xd3c7], 0x8, 0x2, 0x3, [@rand_addr=' \x01\x00', @empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @remote, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x2d, "1d9a977c3c7aba2f54276e2ce2870bb6ed9a6d171338791be784042d327c"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000001c0)={{0x700, 0x1, 0x65}, './file0\x00'}) write$binfmt_script(r4, &(0x7f00000008c0)={'#! ', './file0', [{0x20, '#\x934\x85\x1e\x99-H\x89\x85\xf0Vf.\xdbQ\xb9\x8f\t\xf9\xb4\x85\xa5\xc9\x86\x06\xd6@\"\"\xea\xfb\xc9\x9d\xaf\xc3\xa1\xd82x\tH(\x0e\x0fl\x9c^\xd7\x0e\x8e\xba\x01\x1fu\x18\xb0\xe4\x1f\xe5>b\x8a\xc3^\x9f\xacR\xd2\x1e\x89=K\xd6\xf5\xb6\x04\xde\xcc%\xa5\xaf\xfe\x8e\xaa<>\x97?U4\xf3h_\xfd+\"g$\xfb\x8e\x94Ep\x94\r3\xa7\\\xc0\b\xdb\xf4x\xe3\x1a\xea\x99Wr7\xc8\x98\x1a\xac\x98\xd9\x95\x89\xb4\xf8\\\xbf\xffAIJPW&Iu\x01\xcf\xa37\x9f1v\xb2\x9d-\xdf\x8f\xee\xae\xdag\x8eQ~\a\x84\b6p\\\xed\x81\xea\xf7\x97x\xf2i\x12\x94\xb6\x84p\fx4\xd3\xe7\xe6\x81\xef\xad\x9a\x85\x02Z}\xbca\xe1\xf1\xc8\x9dm\xbc\x9b\x97CR\xdbxx\x97\x85\xd1\x19\x18S\xc0\xa0 \xfb\xea\xbc\x00\xcf\x04\x1cj\x19\xf8\x82c\xee\x13\xfc3k\xc0\b]\xd4<('}, {0x20, 'vcan0\x00'}], 0xa, "35096c7f4444d61def37d1ec"}, 0x110) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r7 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) 5.628628315s ago: executing program 2 (id=1028): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f0000000280)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@fat=@discard}, {@utf8no}, {@uni_xlateno}, {@fat=@nfs}, {@shortname_mixed}, {@shortname_lower}, {@fat=@errors_continue}, {@shortname_winnt}, {@shortname_lower}, {@numtail}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x0) (fail_nth: 3) 3.890151106s ago: executing program 4 (id=1044): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x20008100, &(0x7f0000000040)="8d5d9cfa0922033ba05d9a5c332ccc5504a3b81960e3e17507b656", 0x1b, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000380)="a91fabc58753b817a4b0c2b5315cdeeacf1b05d8fd1087406af96b56000d79f66a3b4ae5f1fedf2945fcfb864c8cb7eb260d8a4b90ddbea49b06c129f6bb54020844862531b300d5b49af54fa267792277fad6bd678bf04aa8a5634bd8af98e98b0ed684731194661818ec9576b2aef16847cb39e0aa8d79040d8c4e6cda0faf") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp6}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0)=0x5, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00'}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 3.652139245s ago: executing program 4 (id=1045): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x8, 0x0, 0xfd, @tick, {}, {0xe}, @addr}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10, &(0x7f0000001440), 0xfe, 0x244, &(0x7f0000000780)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001900), 0x208e280) fallocate(r2, 0x10, 0x0, 0x2353) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r3, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSABS20(r3, 0x401845e0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x89901) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffc, 0xfffffffffffffcec, 0x6b, @buffer={0x0, 0x0, &(0x7f0000000200)=""/38}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x14, 0x0, 0x0}) getpgrp(0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="440000002000010000000000000000000a00000000000000000000001400110076657468305f746f5f687372000000001400030076", @ANYRES32=r7, @ANYRESOCT=r7, @ANYRES16=0x0, @ANYBLOB="ce670f3edbdf2ec2d22bb54a26df3cd09fc341a220df89f3051f1aa9b39c7b613caab5ea362488324943a9456a82a56e034498af0bf0eb4c36c78912f7f601dcee9d2e42e6fe3d99914f27b4663e18af4ec4f77bc9682bc9f8c62599e43bdc652291f373685e632ac3b6a155b985bdd51039b1b25d2ff41e1a9a73f483975c9ed485a80a0393e5fc5975d01c37e858d3572b05277fc79143b5643721f0cd9ba6bfef0f194921d6fbec5244e03f82deae27768c50d71f800dac763621c8e96e582edf044fe6953eee", @ANYRES32=r7, @ANYRES64=r6, @ANYRESOCT], 0x44}}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x1300000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2, 0x5}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x4, 0x39, 0xc769f24c96bbae7f, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r8, 0x0, 0xa002a0}, 0x38) 1.795810585s ago: executing program 4 (id=1051): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="6e2eaeef82682d62fc659189ad063567cd0c2545392cdef0278977ceb28277d1564d583e149c894359bb17f71524861ca7e206ccc71a80e8d0e9dc7ef82940d726d5bbe7", @ANYBLOB="0000000000000000b7080000000000007b", @ANYBLOB, @ANYBLOB="0000000000000000b7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)=ANY=[@ANYBLOB='$', @ANYRESDEC], 0x68}}, 0x45) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$isdn(0x22, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) unshare(0x22020600) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') setns(r6, 0x0) unshare(0x42000000) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000140)=""/191) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0xc0d0) 1.758212088s ago: executing program 1 (id=1052): symlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000040)='./file2\x00') mkdir(&(0x7f00000004c0)='./file2\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x80) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x121000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) getrlimit(0x6, &(0x7f0000000240)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x8, 0x2, 0x8, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x8, 0x3, 0x435}}) unshare(0x6c060000) r4 = open_tree(r3, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') close(r4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f80000001a5aedf8571ea4c4e8000000fe8000000000000000000000000000aafe800000000000000000000000000000000109d44e220000000000006e084d9b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000003c0000000000000000000000000000000000000001000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000450200000000000000000000000000000200030000000000000000000800160000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x0) 1.403844197s ago: executing program 3 (id=1017): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r4}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x7000000) 1.132635468s ago: executing program 4 (id=1053): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x400300}}], 0x30}], 0x1, 0x0) 1.098254701s ago: executing program 4 (id=1054): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x100, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x1}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xb8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xa4, 0x6, [@m_ife={0xa0, 0x2, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}]}, {0x4d, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7"}, {0xc}, {0xc}}}]}]}}]}, 0x100}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x3, 0x9) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4680, 0x0) write$vga_arbiter(r2, &(0x7f0000000100)=@unlock_all, 0xb) setsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002900)=[{{&(0x7f0000000900)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) r3 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x82) openat$incfs(r3, &(0x7f0000000340)='.pending_reads\x00', 0x10142, 0x29) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040004) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000a140309000000000000000008000100000000000800030001"], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000001040)) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x114}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 531.826977ms ago: executing program 1 (id=1055): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb110018"], 0x0, 0x36, 0x0, 0x1}, 0x20) r0 = io_uring_setup(0x1694, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0xc, 0x6, 0x948, 0x738, 0x438, 0x438, 0x438, 0x738, 0x878, 0x878, 0x878, 0x80a, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) 453.658443ms ago: executing program 3 (id=1056): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_dev$usbfs(&(0x7f0000000000), 0x32, 0x18000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) socket$kcm(0x2, 0xa, 0x2) socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0x0, 0x0, 0x9, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0), 0x105080, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) unlinkat(r2, &(0x7f0000000380)='./file2\x00', 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) truncate(&(0x7f0000000340)='./file2\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x8000000d) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000200)={{0x1, 0x3, 0xe68, 0x1, 0x4}, 0x8, 0xc, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x0, 0x8000, 0x10000}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="e7611edbaa5a04b280eb6cc34e5740660000", @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf250100000008000800e0000001050002000a00000a004e220000080008000a0101010400050006000a004e210000000000"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x20004014) 452.756923ms ago: executing program 4 (id=1057): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xf28b0393b688fe18, &(0x7f0000000040)={[{@init_itable_val={'init_itable', 0x3d, 0x44a}}, {@nombcache}, {@jqfmt_vfsold}, {@acl}]}, 0x1, 0x51d, &(0x7f0000000500)="$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") r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x800, 0x0, 0x103, 0x4}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x18) r6 = socket$key(0xf, 0x3, 0x2) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2) process_vm_readv(0x0, 0x0, 0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000001a020100f00000f800d564d000083d0600", @ANYRES8=0x0], 0x24}}, 0x0) r7 = gettid() recvfrom$rxrpc(r3, &(0x7f0000000400)=""/237, 0xed, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r4, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) rename(&(0x7f0000000200)='./file0\x00', 0x0) 368.35759ms ago: executing program 1 (id=1058): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x90}, [@ldst={0x7}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./bus\x00', 0x100) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0) pread64(r1, &(0x7f0000000240)=""/160, 0xa0, 0x0) poll(&(0x7f00000000c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007ffb) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}, 0x1, 0x2}, 0x0) r9 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0x10000, &(0x7f0000000480)={[{@nobarrier}], [{@euid_gt}, {@fowner_lt}]}, 0xfd, 0x448, &(0x7f0000000d00)="$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") r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r11 = socket(0x1e, 0x1, 0x0) connect$tipc(r11, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x5, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x10000}, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r11, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r11, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/168, 0xa8}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x0, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3c}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000001180)={{r8}, 0x0, 0x4, @unused=[0x7ff, 0xe1ac, 0x8000000000000001, 0x6], @subvolid=0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 310.088234ms ago: executing program 2 (id=1029): perf_event_open(0x0, 0x0, 0x200001, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setpgid(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) keyctl$get_persistent(0x5, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) bind$bt_hci(r5, &(0x7f0000002340)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x12, r0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x84, 0x0, &(0x7f0000000080)) 80.476223ms ago: executing program 1 (id=1059): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x34, 0x21, 0x1, 0x0, 0x9000000, "", [@nested={0x24, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev}]}]}, 0x34}], 0x1}, 0x0) 548.97碌s ago: executing program 1 (id=1060): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1000000009148307"], 0x10}, 0x1, 0xffffff7f0000a6ff}, 0x0) 0s ago: executing program 1 (id=1061): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x200088d0}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback}}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x28, r12}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="fc060000", @ANYRES16=r3, @ANYBLOB="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"], 0x6fc}, 0x1, 0x0, 0x0, 0x4040}, 0x44800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) kernel console output (not intermixed with test programs): 5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.957881][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.016137][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.023120][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.049037][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.154050][ T5896] hsr_slave_0: entered promiscuous mode [ 75.160076][ T5896] hsr_slave_1: entered promiscuous mode [ 75.183508][ T5896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.191058][ T5896] Cannot create hsr debugfs directory [ 75.220337][ T5944] netlink: 56 bytes leftover after parsing attributes in process `syz.0.646'. [ 75.231687][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 75.423059][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.430186][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.463705][ T5915] bridge_slave_0: entered allmulticast mode [ 75.480363][ T5915] bridge_slave_0: entered promiscuous mode [ 75.549334][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.556509][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.596125][ T5915] bridge_slave_1: entered allmulticast mode [ 75.615283][ T5915] bridge_slave_1: entered promiscuous mode [ 75.635989][ T5959] vhci_hcd: invalid port number 117 [ 75.641202][ T5959] vhci_hcd: default hub control req: d35f v6f63 i0075 l29812 [ 75.727053][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.767755][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.812618][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 75.812631][ T29] audit: type=1400 audit(1720371996.987:730): avc: denied { setopt } for pid=5960 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.814580][ T5915] team0: Port device team_slave_0 added [ 75.847273][ T5915] team0: Port device team_slave_1 added [ 75.948274][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.955238][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.981196][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.195358][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.248687][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.255672][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.281589][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.334875][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.368144][ T5968] loop0: detected capacity change from 0 to 128 [ 76.397792][ T5915] hsr_slave_0: entered promiscuous mode [ 76.416455][ T5915] hsr_slave_1: entered promiscuous mode [ 76.429584][ T5915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.437273][ T5915] Cannot create hsr debugfs directory [ 76.446160][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.516532][ T5973] 9pnet_virtio: no channels available for device [ 76.526642][ T5973] loop0: detected capacity change from 0 to 164 [ 76.536171][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.567861][ T5896] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.599914][ T5896] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.630473][ T5896] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.657809][ T5896] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.771464][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.789131][ T28] bridge_slave_1: left allmulticast mode [ 76.794855][ T28] bridge_slave_1: left promiscuous mode [ 76.800702][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.834228][ T28] bridge_slave_0: left allmulticast mode [ 76.839873][ T28] bridge_slave_0: left promiscuous mode [ 76.845498][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.996051][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.023728][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.054320][ T28] bond0 (unregistering): Released all slaves [ 77.067032][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.082124][ T5978] netlink: 56 bytes leftover after parsing attributes in process `syz.4.655'. [ 77.111562][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.118637][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.164550][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.171656][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.185964][ T29] audit: type=1400 audit(1720371998.367:731): avc: denied { mounton } for pid=5980 comm="syz.0.657" path="/23/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 77.219291][ T5981] loop0: detected capacity change from 0 to 2048 [ 77.256452][ T28] hsr_slave_0: left promiscuous mode [ 77.263164][ T28] hsr_slave_1: left promiscuous mode [ 77.274279][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.281681][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.299439][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.306966][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.326008][ T29] audit: type=1326 audit(1720371998.507:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b09a15bd9 code=0x7ffc0000 [ 77.349265][ T29] audit: type=1326 audit(1720371998.507:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b09a15bd9 code=0x7ffc0000 [ 77.357606][ T5989] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.372902][ T28] veth1_macvtap: left promiscuous mode [ 77.385342][ T28] veth0_macvtap: left promiscuous mode [ 77.390829][ T28] veth1_vlan: left promiscuous mode [ 77.396069][ T28] veth0_vlan: left promiscuous mode [ 77.413469][ T29] audit: type=1326 audit(1720371998.507:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b09a14610 code=0x7ffc0000 [ 77.436694][ T29] audit: type=1326 audit(1720371998.537:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b09a15bd9 code=0x7ffc0000 [ 77.459885][ T29] audit: type=1326 audit(1720371998.537:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b09a15bd9 code=0x7ffc0000 [ 77.483117][ T29] audit: type=1326 audit(1720371998.537:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b09a15bd9 code=0x7ffc0000 [ 77.506390][ T29] audit: type=1326 audit(1720371998.537:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b09a15bd9 code=0x7ffc0000 [ 77.529577][ T29] audit: type=1326 audit(1720371998.537:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b09a15bd9 code=0x7ffc0000 [ 77.688452][ T28] team0 (unregistering): Port device team_slave_1 removed [ 77.700372][ T28] team0 (unregistering): Port device team_slave_0 removed [ 77.811048][ T6001] xt_CONNSECMARK: invalid mode: 0 [ 77.825520][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.863266][ T5915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.902506][ T5915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.932757][ T6007] FAULT_INJECTION: forcing a failure. [ 77.932757][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 77.945456][ T6007] CPU: 0 PID: 6007 Comm: syz.4.664 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 77.955444][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 77.965490][ T6007] Call Trace: [ 77.968827][ T6007] [ 77.971752][ T6007] dump_stack_lvl+0xf2/0x150 [ 77.976447][ T6007] dump_stack+0x15/0x20 [ 77.980654][ T6007] should_fail_ex+0x229/0x230 [ 77.985338][ T6007] ? kvmalloc_node_noprof+0x72/0x170 [ 77.990627][ T6007] __should_failslab+0x92/0xa0 [ 77.995396][ T6007] should_failslab+0x9/0x20 [ 77.999924][ T6007] __kmalloc_node_noprof+0xa8/0x380 [ 78.005132][ T6007] kvmalloc_node_noprof+0x72/0x170 [ 78.010273][ T6007] alloc_netdev_mqs+0x99/0x8b0 [ 78.015093][ T6007] ? __pfx_vlan_setup+0x10/0x10 [ 78.019940][ T6007] rtnl_create_link+0x233/0x680 [ 78.024802][ T6007] rtnl_newlink+0xe10/0x1690 [ 78.029396][ T6007] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 78.035690][ T6007] ? _raw_spin_unlock+0x26/0x50 [ 78.040600][ T6007] ? __mutex_lock+0x221/0x8e0 [ 78.045273][ T6007] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.050304][ T6007] rtnetlink_rcv_msg+0x85e/0x910 [ 78.055250][ T6007] ? __rcu_read_unlock+0x4e/0x70 [ 78.060376][ T6007] ? mod_objcg_state+0x39b/0x4e0 [ 78.065311][ T6007] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 78.070766][ T6007] ? xas_load+0x3ae/0x3d0 [ 78.075096][ T6007] ? kmem_cache_free+0xd8/0x280 [ 78.080083][ T6007] ? nlmon_xmit+0x51/0x60 [ 78.084411][ T6007] ? __kfree_skb+0x102/0x150 [ 78.088993][ T6007] ? consume_skb+0x57/0x180 [ 78.093488][ T6007] ? nlmon_xmit+0x51/0x60 [ 78.097818][ T6007] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 78.103094][ T6007] ? __dev_queue_xmit+0xb21/0x1e50 [ 78.108291][ T6007] ? ref_tracker_free+0x3a5/0x410 [ 78.113369][ T6007] netlink_rcv_skb+0x12c/0x230 [ 78.118155][ T6007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.123607][ T6007] rtnetlink_rcv+0x1c/0x30 [ 78.128011][ T6007] netlink_unicast+0x58d/0x660 [ 78.132795][ T6007] netlink_sendmsg+0x5ca/0x6e0 [ 78.137619][ T6007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.142970][ T6007] __sock_sendmsg+0x140/0x180 [ 78.147639][ T6007] ____sys_sendmsg+0x312/0x410 [ 78.152542][ T6007] __sys_sendmsg+0x1e9/0x280 [ 78.157152][ T6007] __x64_sys_sendmsg+0x46/0x50 [ 78.161937][ T6007] x64_sys_call+0xb25/0x2d70 [ 78.166559][ T6007] do_syscall_64+0xc9/0x1c0 [ 78.171053][ T6007] ? clear_bhb_loop+0x55/0xb0 [ 78.175792][ T6007] ? clear_bhb_loop+0x55/0xb0 [ 78.180519][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.186409][ T6007] RIP: 0033:0x7ff9333f8bd9 [ 78.190808][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.210405][ T6007] RSP: 002b:00007ff93267a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.218884][ T6007] RAX: ffffffffffffffda RBX: 00007ff933586f60 RCX: 00007ff9333f8bd9 [ 78.226841][ T6007] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 78.234872][ T6007] RBP: 00007ff93267a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.242902][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.250910][ T6007] R13: 000000000000000b R14: 00007ff933586f60 R15: 00007fff81080148 [ 78.258898][ T6007] [ 78.267491][ T5915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.298526][ T5915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.400376][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.427094][ T5896] veth0_vlan: entered promiscuous mode [ 78.450158][ T6017] netlink: 56 bytes leftover after parsing attributes in process `syz.0.666'. [ 78.468085][ T5896] veth1_vlan: entered promiscuous mode [ 78.486108][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.517432][ T5896] veth0_macvtap: entered promiscuous mode [ 78.535855][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.542918][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.551833][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.558931][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.600854][ T5896] veth1_macvtap: entered promiscuous mode [ 78.628927][ T5915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.630226][ T6038] loop0: detected capacity change from 0 to 256 [ 78.639334][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.728764][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.739276][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.749232][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.759732][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.769559][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.780041][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.789856][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.800292][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.810166][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.820649][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.874427][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.929534][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.940129][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.950024][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.960486][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.970314][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.980734][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.991070][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.001686][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.011505][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.022030][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.025889][ T6045] loop0: detected capacity change from 0 to 2048 [ 79.049477][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.058391][ T5896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.067225][ T5896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.075929][ T5896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.084662][ T5896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.141742][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.350991][ T5370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.397161][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.423377][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 79.621039][ T5915] veth0_vlan: entered promiscuous mode [ 79.745217][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.752494][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.765519][ T6048] bridge_slave_0: entered allmulticast mode [ 79.879508][ T6048] bridge_slave_0: entered promiscuous mode [ 79.906355][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.913512][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.928771][ T6097] vhci_hcd: invalid port number 117 [ 79.934095][ T6097] vhci_hcd: default hub control req: d35f v6f63 i0075 l29812 [ 79.958996][ T6048] bridge_slave_1: entered allmulticast mode [ 79.988821][ T6048] bridge_slave_1: entered promiscuous mode [ 80.037482][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.044925][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.065513][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.073043][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.129252][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.141402][ T5915] veth1_vlan: entered promiscuous mode [ 80.164072][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.201228][ T6048] team0: Port device team_slave_0 added [ 80.211498][ T6048] team0: Port device team_slave_1 added [ 80.236430][ T5915] veth0_macvtap: entered promiscuous mode [ 80.256120][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.263069][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.290019][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.334468][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.341418][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.367416][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.381367][ T5915] veth1_macvtap: entered promiscuous mode [ 80.399052][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.409610][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.419466][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.430000][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.439837][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.450251][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.460059][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.470541][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.480447][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.490991][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.502859][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.533277][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.543912][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.553709][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.564239][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.574073][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.584671][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.594701][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.605253][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.615061][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.625479][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.675421][ T6115] FAULT_INJECTION: forcing a failure. [ 80.675421][ T6115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.688497][ T6115] CPU: 0 PID: 6115 Comm: syz.0.683 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 80.698472][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.708566][ T6115] Call Trace: [ 80.711833][ T6115] [ 80.714751][ T6115] dump_stack_lvl+0xf2/0x150 [ 80.719342][ T6115] dump_stack+0x15/0x20 [ 80.723493][ T6115] should_fail_ex+0x229/0x230 [ 80.728261][ T6115] should_fail+0xb/0x10 [ 80.732483][ T6115] should_fail_usercopy+0x1a/0x20 [ 80.737495][ T6115] strncpy_from_user+0x25/0x270 [ 80.742344][ T6115] strncpy_from_bpfptr+0x38/0x60 [ 80.747327][ T6115] bpf_prog_load+0x868/0x1060 [ 80.751997][ T6115] __sys_bpf+0x463/0x7a0 [ 80.756249][ T6115] __x64_sys_bpf+0x43/0x50 [ 80.760658][ T6115] x64_sys_call+0x2655/0x2d70 [ 80.765343][ T6115] do_syscall_64+0xc9/0x1c0 [ 80.769908][ T6115] ? clear_bhb_loop+0x55/0xb0 [ 80.774572][ T6115] ? clear_bhb_loop+0x55/0xb0 [ 80.779236][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.785150][ T6115] RIP: 0033:0x7f3b09a15bd9 [ 80.789674][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.809344][ T6115] RSP: 002b:00007f3b08c97048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.817898][ T6115] RAX: ffffffffffffffda RBX: 00007f3b09ba3f60 RCX: 00007f3b09a15bd9 [ 80.825947][ T6115] RDX: 0000000000000090 RSI: 0000000020000500 RDI: 0000000000000005 [ 80.833904][ T6115] RBP: 00007f3b08c970a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.842004][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.849959][ T6115] R13: 000000000000000b R14: 00007f3b09ba3f60 R15: 00007ffd8ad32558 [ 80.857989][ T6115] [ 80.872400][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.884136][ T6048] hsr_slave_0: entered promiscuous mode [ 80.890500][ T6048] hsr_slave_1: entered promiscuous mode [ 80.905578][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.923891][ T6048] Cannot create hsr debugfs directory [ 80.932842][ T5915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.941597][ T5915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.950371][ T5915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.959074][ T5915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.278021][ T6048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.288445][ T6048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.322775][ T6136] vhci_hcd: invalid port number 117 [ 81.328073][ T6136] vhci_hcd: default hub control req: d35f v6f63 i0075 l29812 [ 81.472193][ T6048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.482504][ T6048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.555372][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 81.555384][ T29] audit: type=1400 audit(1720372002.737:780): avc: denied { mount } for pid=6140 comm="syz.4.692" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 81.603497][ T6048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.613814][ T6048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.645804][ T29] audit: type=1400 audit(1720372002.827:781): avc: denied { unmount } for pid=5442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 81.700053][ T6145] syzkaller1: entered promiscuous mode [ 81.705593][ T6145] syzkaller1: entered allmulticast mode [ 81.735031][ T6048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.745372][ T6048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.846303][ T6048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.913679][ T6048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.923997][ T6048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.942929][ T6048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.064978][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.112489][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.137755][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.144843][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.165405][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.172498][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.193851][ T6048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.204243][ T6048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.280245][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.328232][ T6174] tipc: Started in network mode [ 82.333138][ T6174] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 82.362479][ T6174] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 82.370810][ T6174] tipc: Enabled bearer , priority 10 [ 82.468344][ T6048] veth0_vlan: entered promiscuous mode [ 82.485594][ T6048] veth1_vlan: entered promiscuous mode [ 82.515117][ T6048] veth0_macvtap: entered promiscuous mode [ 82.527471][ T6187] netlink: 9 bytes leftover after parsing attributes in process `syz.4.703'. [ 82.548608][ T6187] gretap0: entered promiscuous mode [ 82.577682][ T6048] veth1_macvtap: entered promiscuous mode [ 82.591230][ T6187] netlink: 5 bytes leftover after parsing attributes in process `syz.4.703'. [ 82.610941][ T6187] 0猉功D: renamed from gretap0 [ 82.623545][ T6187] 0猉功D: left promiscuous mode [ 82.628433][ T6187] 0猉功D: entered allmulticast mode [ 82.647562][ T6187] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 82.667254][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.677815][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.687635][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.698062][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.707925][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.718381][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.728223][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.738635][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.748454][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.758881][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.768732][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.779354][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.793022][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.809791][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.820270][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.830478][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.841088][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.850986][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.861402][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.871211][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.881704][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.891580][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.902019][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.912275][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.922975][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.937656][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.954909][ T6048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.963763][ T6048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.972445][ T6048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.981138][ T6048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.079445][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 83.346664][ T6218] vhci_hcd: invalid port number 117 [ 83.352069][ T6218] vhci_hcd: default hub control req: d35f v6f63 i0075 l29812 [ 83.380118][ T6221] FAULT_INJECTION: forcing a failure. [ 83.380118][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 83.392969][ T6221] CPU: 0 PID: 6221 Comm: syz.1.712 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 83.402954][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.413056][ T6221] Call Trace: [ 83.416359][ T6221] [ 83.419299][ T6221] dump_stack_lvl+0xf2/0x150 [ 83.423893][ T6221] dump_stack+0x15/0x20 [ 83.428051][ T6221] should_fail_ex+0x229/0x230 [ 83.432740][ T6221] ? __kernfs_new_node+0x6a/0x380 [ 83.437809][ T6221] __should_failslab+0x92/0xa0 [ 83.442692][ T6221] should_failslab+0x9/0x20 [ 83.447196][ T6221] kmem_cache_alloc_noprof+0x4c/0x290 [ 83.452622][ T6221] __kernfs_new_node+0x6a/0x380 [ 83.457510][ T6221] ? kernfs_add_one+0x334/0x3a0 [ 83.462403][ T6221] kernfs_new_node+0xc8/0x140 [ 83.467124][ T6221] kernfs_create_link+0x6c/0x120 [ 83.472057][ T6221] sysfs_do_create_link_sd+0x6b/0xf0 [ 83.477349][ T6221] sysfs_create_link+0x51/0x70 [ 83.482115][ T6221] device_add_class_symlinks+0x9a/0x1e0 [ 83.487724][ T6221] device_add+0x36c/0x790 [ 83.492057][ T6221] netdev_register_kobject+0x100/0x230 [ 83.497517][ T6221] register_netdevice+0x8b9/0xdd0 [ 83.502576][ T6221] ip6gre_newlink_common+0x25d/0x2e0 [ 83.507855][ T6221] ip6erspan_newlink+0x293/0x550 [ 83.512784][ T6221] ? __pfx_ip6erspan_newlink+0x10/0x10 [ 83.518309][ T6221] rtnl_newlink+0xefd/0x1690 [ 83.522919][ T6221] ? rtnl_newlink+0x361/0x1690 [ 83.527676][ T6221] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.532768][ T6221] rtnetlink_rcv_msg+0x85e/0x910 [ 83.537724][ T6221] ? memcg_list_lru_alloc+0xd2/0x740 [ 83.543004][ T6221] ? mod_objcg_state+0x3a5/0x4e0 [ 83.548001][ T6221] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 83.553472][ T6221] ? xas_load+0x3ae/0x3d0 [ 83.557794][ T6221] ? kmem_cache_free+0xd8/0x280 [ 83.562646][ T6221] ? nlmon_xmit+0x51/0x60 [ 83.567060][ T6221] ? __kfree_skb+0x102/0x150 [ 83.571674][ T6221] ? consume_skb+0x57/0x180 [ 83.576168][ T6221] ? nlmon_xmit+0x51/0x60 [ 83.580498][ T6221] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 83.585774][ T6221] ? __dev_queue_xmit+0xb21/0x1e50 [ 83.590881][ T6221] ? ref_tracker_free+0x3a5/0x410 [ 83.595983][ T6221] netlink_rcv_skb+0x12c/0x230 [ 83.600873][ T6221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.606324][ T6221] rtnetlink_rcv+0x1c/0x30 [ 83.610817][ T6221] netlink_unicast+0x58d/0x660 [ 83.615616][ T6221] netlink_sendmsg+0x5ca/0x6e0 [ 83.620471][ T6221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.625751][ T6221] __sock_sendmsg+0x140/0x180 [ 83.630430][ T6221] ____sys_sendmsg+0x312/0x410 [ 83.635208][ T6221] __sys_sendmsg+0x1e9/0x280 [ 83.639795][ T6221] __x64_sys_sendmsg+0x46/0x50 [ 83.644569][ T6221] x64_sys_call+0xb25/0x2d70 [ 83.649244][ T6221] do_syscall_64+0xc9/0x1c0 [ 83.653746][ T6221] ? clear_bhb_loop+0x55/0xb0 [ 83.658449][ T6221] ? clear_bhb_loop+0x55/0xb0 [ 83.663116][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.669063][ T6221] RIP: 0033:0x7fa38fa7ebd9 [ 83.673467][ T6221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.693062][ T6221] RSP: 002b:00007fa38ed00048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.701537][ T6221] RAX: ffffffffffffffda RBX: 00007fa38fc0cf60 RCX: 00007fa38fa7ebd9 [ 83.709562][ T6221] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 83.717555][ T6221] RBP: 00007fa38ed000a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.725582][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.733545][ T6221] R13: 000000000000000b R14: 00007fa38fc0cf60 R15: 00007ffe6d631ca8 [ 83.741562][ T6221] [ 83.774614][ T3156] tipc: Node number set to 1 [ 83.844623][ T6227] loop0: detected capacity change from 0 to 2048 [ 83.856022][ T6222] tipc: Started in network mode [ 83.860965][ T6222] tipc: Node identity f0, cluster identity 4711 [ 83.867362][ T6222] tipc: Node number set to 240 [ 83.884310][ T6227] loop0: p1 p2 p3 [ 83.904267][ T6227] loop0: p3 size 2164260864 extends beyond EOD, truncated [ 83.971159][ T6232] loop0: detected capacity change from 0 to 2048 [ 83.982511][ T6232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.062141][ T6234] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.062453][ T6234] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 84.062476][ T6234] EXT4-fs (loop0): This should not happen!! Data will be lost [ 84.062476][ T6234] [ 84.062516][ T6234] EXT4-fs (loop0): Total free blocks count 0 [ 84.062587][ T6234] EXT4-fs (loop0): Free/Dirty block details [ 84.062598][ T6234] EXT4-fs (loop0): free_blocks=2415919104 [ 84.062610][ T6234] EXT4-fs (loop0): dirty_blocks=32 [ 84.062622][ T6234] EXT4-fs (loop0): Block reservation details [ 84.062633][ T6234] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 84.093724][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 84.139851][ T6241] FAULT_INJECTION: forcing a failure. [ 84.139851][ T6241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.139874][ T6241] CPU: 0 PID: 6241 Comm: syz.4.717 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 84.139898][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.139908][ T6241] Call Trace: [ 84.139972][ T6241] [ 84.139978][ T6241] dump_stack_lvl+0xf2/0x150 [ 84.140003][ T6241] dump_stack+0x15/0x20 [ 84.140025][ T6241] should_fail_ex+0x229/0x230 [ 84.140093][ T6241] should_fail+0xb/0x10 [ 84.140119][ T6241] should_fail_usercopy+0x1a/0x20 [ 84.140137][ T6241] _copy_to_iter+0xd3/0xaf0 [ 84.140160][ T6241] ? __rcu_read_unlock+0x4e/0x70 [ 84.140309][ T6241] ? mod_objcg_state+0x2e2/0x4e0 [ 84.140334][ T6241] ? __virt_addr_valid+0x1dd/0x240 [ 84.140352][ T6241] ? __check_object_size+0x35b/0x510 [ 84.140545][ T6241] __skb_datagram_iter+0x2b4/0x5f0 [ 84.140569][ T6241] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 84.140591][ T6241] skb_copy_datagram_iter+0x41/0x130 [ 84.140615][ T6241] unix_stream_read_actor+0x44/0x70 [ 84.140669][ T6241] unix_stream_read_generic+0x9da/0x1450 [ 84.140700][ T6241] __unix_stream_recvmsg+0x87/0xb0 [ 84.140723][ T6241] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 84.140749][ T6241] unix_bpf_recvmsg+0x6b8/0x730 [ 84.140842][ T6241] ? selinux_socket_recvmsg+0x182/0x1b0 [ 84.140927][ T6241] unix_stream_recvmsg+0xae/0xf0 [ 84.140956][ T6241] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 84.140977][ T6241] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 84.141052][ T6241] sock_recvmsg+0x13f/0x170 [ 84.141077][ T6241] ____sys_recvmsg+0xf9/0x280 [ 84.141104][ T6241] __sys_recvmsg+0x1ea/0x280 [ 84.141132][ T6241] __x64_sys_recvmsg+0x46/0x50 [ 84.141177][ T6241] x64_sys_call+0x2c31/0x2d70 [ 84.141202][ T6241] do_syscall_64+0xc9/0x1c0 [ 84.141305][ T6241] ? clear_bhb_loop+0x55/0xb0 [ 84.141327][ T6241] ? clear_bhb_loop+0x55/0xb0 [ 84.141349][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.141374][ T6241] RIP: 0033:0x7ff9333f8bd9 [ 84.141387][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.141417][ T6241] RSP: 002b:00007ff932659048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 84.141434][ T6241] RAX: ffffffffffffffda RBX: 00007ff933587038 RCX: 00007ff9333f8bd9 [ 84.141445][ T6241] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000007 [ 84.141457][ T6241] RBP: 00007ff9326590a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.141468][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.141478][ T6241] R13: 000000000000006e R14: 00007ff933587038 R15: 00007fff81080148 [ 84.141538][ T6241] [ 84.202752][ T6249] loop0: detected capacity change from 0 to 2048 [ 84.239816][ T6249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.240965][ T6249] FAULT_INJECTION: forcing a failure. [ 84.240965][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 84.240987][ T6249] CPU: 0 PID: 6249 Comm: syz.0.719 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 84.241010][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.241022][ T6249] Call Trace: [ 84.241029][ T6249] [ 84.241102][ T6249] dump_stack_lvl+0xf2/0x150 [ 84.241131][ T6249] dump_stack+0x15/0x20 [ 84.241154][ T6249] should_fail_ex+0x229/0x230 [ 84.241265][ T6249] ? request_key_auth_new+0x93/0x510 [ 84.241385][ T6249] __should_failslab+0x92/0xa0 [ 84.241405][ T6249] should_failslab+0x9/0x20 [ 84.241430][ T6249] kmalloc_trace_noprof+0x4b/0x2a0 [ 84.241469][ T6249] request_key_auth_new+0x93/0x510 [ 84.241498][ T6249] ? refcount_dec_and_lock+0xd8/0x180 [ 84.241624][ T6249] request_key_and_link+0x835/0xcf0 [ 84.241705][ T6249] ? __pfx_key_default_cmp+0x10/0x10 [ 84.241755][ T6249] ? __pfx_keyring_search_iterator+0x10/0x10 [ 84.241840][ T6249] __se_sys_request_key+0x1d7/0x290 [ 84.241858][ T6249] ? fput+0x13b/0x180 [ 84.241908][ T6249] __x64_sys_request_key+0x55/0x70 [ 84.241960][ T6249] x64_sys_call+0x9af/0x2d70 [ 84.241985][ T6249] do_syscall_64+0xc9/0x1c0 [ 84.242009][ T6249] ? clear_bhb_loop+0x55/0xb0 [ 84.242091][ T6249] ? clear_bhb_loop+0x55/0xb0 [ 84.242114][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.242136][ T6249] RIP: 0033:0x7f3b09a15bd9 [ 84.242151][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.242178][ T6249] RSP: 002b:00007f3b08c97048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 84.242198][ T6249] RAX: ffffffffffffffda RBX: 00007f3b09ba3f60 RCX: 00007f3b09a15bd9 [ 84.242211][ T6249] RDX: 0000000020001fee RSI: 0000000020001ffb RDI: 0000000020000040 [ 84.242224][ T6249] RBP: 00007f3b08c970a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.242237][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.242250][ T6249] R13: 000000000000000b R14: 00007f3b09ba3f60 R15: 00007ffd8ad32558 [ 84.242306][ T6249] [ 84.312030][ T5370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.312781][ T29] audit: type=1400 audit(1720372005.487:782): avc: denied { setopt } for pid=6256 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.467615][ T29] audit: type=1400 audit(1720372005.637:783): avc: denied { wake_alarm } for pid=6263 comm="syz.2.725" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.783313][ T29] audit: type=1400 audit(1720372005.957:784): avc: denied { ioctl } for pid=6278 comm="syz.0.729" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.373256][ T29] audit: type=1326 audit(1720372006.547:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.1.731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa38fa7ebd9 code=0x0 [ 85.502562][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.732'. [ 85.537003][ T29] audit: type=1400 audit(1720372006.717:786): avc: denied { ioctl } for pid=6291 comm="syz.0.732" path="socket:[17387]" dev="sockfs" ino=17387 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.562872][ T6298] loop2: detected capacity change from 0 to 128 [ 85.606876][ T29] audit: type=1400 audit(1720372006.757:787): avc: denied { write } for pid=6301 comm="syz.0.735" name="uhid" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.660611][ T6310] loop2: detected capacity change from 0 to 512 [ 85.689435][ T6310] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #17: comm syz.2.736: iget: bogus i_mode (0) [ 85.731872][ T29] audit: type=1326 audit(1720372006.907:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.4.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9333f8bd9 code=0x0 [ 85.766076][ T6310] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.736: couldn't read orphan inode 17 (err -117) [ 85.805893][ T6310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.863392][ T5896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.941165][ T6318] loop2: detected capacity change from 0 to 256 [ 86.024536][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.740'. [ 86.033618][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.740'. [ 86.061755][ T6322] netlink: 'syz.2.741': attribute type 4 has an invalid length. [ 86.110193][ T29] audit: type=1400 audit(1720372007.287:789): avc: denied { ioctl } for pid=6321 comm="syz.2.741" path="socket:[17437]" dev="sockfs" ino=17437 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.308488][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.746'. [ 86.327356][ T6337] loop2: detected capacity change from 0 to 164 [ 86.347933][ T6337] Unable to read rock-ridge attributes [ 86.380968][ T6337] Unable to read rock-ridge attributes [ 86.398228][ T6337] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 86.427894][ T6345] loop1: detected capacity change from 0 to 128 [ 86.527970][ T6348] loop2: detected capacity change from 0 to 2048 [ 86.556358][ T6348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.577617][ T29] audit: type=1400 audit(1720372007.747:790): avc: denied { listen } for pid=6344 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.638072][ T29] audit: type=1400 audit(1720372007.817:791): avc: denied { lock } for pid=6347 comm="syz.2.751" path="/14/file0/blkio.bfq.io_serviced_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.685285][ T5896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.753350][ T29] audit: type=1400 audit(1720372007.927:792): avc: denied { read } for pid=6364 comm="syz.0.757" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.813468][ T29] audit: type=1400 audit(1720372007.927:793): avc: denied { open } for pid=6364 comm="syz.0.757" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.918915][ T6379] FAULT_INJECTION: forcing a failure. [ 86.918915][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 86.931612][ T6379] CPU: 1 PID: 6379 Comm: syz.2.760 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 86.941729][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 86.951803][ T6379] Call Trace: [ 86.955078][ T6379] [ 86.957997][ T6379] dump_stack_lvl+0xf2/0x150 [ 86.962587][ T6379] dump_stack+0x15/0x20 [ 86.966832][ T6379] should_fail_ex+0x229/0x230 [ 86.971532][ T6379] ? __alloc_skb+0x10b/0x300 [ 86.976148][ T6379] __should_failslab+0x92/0xa0 [ 86.980903][ T6379] should_failslab+0x9/0x20 [ 86.985531][ T6379] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 86.991465][ T6379] __alloc_skb+0x10b/0x300 [ 86.995879][ T6379] netlink_alloc_large_skb+0xad/0xe0 [ 87.001163][ T6379] netlink_sendmsg+0x3b4/0x6e0 [ 87.006003][ T6379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.011289][ T6379] __sock_sendmsg+0x140/0x180 [ 87.015977][ T6379] ____sys_sendmsg+0x312/0x410 [ 87.020820][ T6379] __sys_sendmsg+0x1e9/0x280 [ 87.025418][ T6379] __x64_sys_sendmsg+0x46/0x50 [ 87.030246][ T6379] x64_sys_call+0xb25/0x2d70 [ 87.034955][ T6379] do_syscall_64+0xc9/0x1c0 [ 87.039460][ T6379] ? clear_bhb_loop+0x55/0xb0 [ 87.044137][ T6379] ? clear_bhb_loop+0x55/0xb0 [ 87.048886][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.054790][ T6379] RIP: 0033:0x7f5075e80bd9 [ 87.059209][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.078814][ T6379] RSP: 002b:00007f5075102048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.087219][ T6379] RAX: ffffffffffffffda RBX: 00007f507600ef60 RCX: 00007f5075e80bd9 [ 87.095222][ T6379] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 87.103197][ T6379] RBP: 00007f50751020a0 R08: 0000000000000000 R09: 0000000000000000 [ 87.111164][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.119126][ T6379] R13: 000000000000000b R14: 00007f507600ef60 R15: 00007ffc8117aae8 [ 87.127095][ T6379] [ 87.131276][ T6363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.154951][ T6381] loop0: detected capacity change from 0 to 512 [ 87.171813][ T6381] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.205337][ T6381] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 87.220095][ T6390] loop2: detected capacity change from 0 to 512 [ 87.236778][ T6381] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 87.266008][ T6390] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.764: casefold flag without casefold feature [ 87.283576][ T6381] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.761: attempt to clear invalid blocks 2 len 1 [ 87.299430][ T6390] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.764: couldn't read orphan inode 15 (err -117) [ 87.320584][ T6381] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.761: invalid indirect mapped block 1819239214 (level 0) [ 87.344257][ T6390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.365410][ T6381] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.761: invalid indirect mapped block 1819239214 (level 1) [ 87.403748][ T6381] EXT4-fs (loop0): 1 truncate cleaned up [ 87.424994][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.463505][ T6396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.766'. [ 87.723225][ T5896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.772197][ T6413] loop1: detected capacity change from 0 to 512 [ 87.827954][ T29] audit: type=1326 audit(1720372009.007:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 87.851286][ T29] audit: type=1326 audit(1720372009.007:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 87.874620][ T29] audit: type=1326 audit(1720372009.007:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5075e7f610 code=0x7ffc0000 [ 87.897880][ T29] audit: type=1326 audit(1720372009.007:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 87.921190][ T29] audit: type=1326 audit(1720372009.007:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 87.944405][ T29] audit: type=1326 audit(1720372009.007:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6416 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 87.973221][ T6418] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.041665][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 89.054910][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 89.068594][ T6472] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.216203][ T6482] xt_CONNSECMARK: invalid mode: 0 [ 89.232928][ T5370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.299997][ T6491] vlan2: entered promiscuous mode [ 89.305065][ T6491] ip6gretap0: entered promiscuous mode [ 89.329512][ T6495] loop1: detected capacity change from 0 to 512 [ 89.367610][ T6495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.386659][ T6495] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.450245][ T5915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.492555][ T6508] loop2: detected capacity change from 0 to 128 [ 89.539643][ T6508] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 89.681890][ T6516] loop1: detected capacity change from 0 to 1024 [ 89.706067][ T6516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.788259][ T5915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.133758][ T6548] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.324589][ T6544] loop2: detected capacity change from 0 to 1764 [ 90.354795][ T6544] isofs_fill_super: get root inode failed [ 90.746614][ T6566] FAULT_INJECTION: forcing a failure. [ 90.746614][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 90.759276][ T6566] CPU: 0 PID: 6566 Comm: syz.1.826 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 90.769326][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.779517][ T6566] Call Trace: [ 90.782787][ T6566] [ 90.785736][ T6566] dump_stack_lvl+0xf2/0x150 [ 90.790334][ T6566] dump_stack+0x15/0x20 [ 90.794542][ T6566] should_fail_ex+0x229/0x230 [ 90.799320][ T6566] ? p9_client_create+0x1a7/0xa80 [ 90.799453][ T6566] __should_failslab+0x92/0xa0 [ 90.799475][ T6566] should_failslab+0x9/0x20 [ 90.799496][ T6566] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 90.799521][ T6566] kstrdup+0x3a/0x80 [ 90.799541][ T6566] p9_client_create+0x1a7/0xa80 [ 90.799575][ T6566] v9fs_session_init+0xf9/0xda0 [ 90.799593][ T6566] ? __rcu_read_unlock+0x4e/0x70 [ 90.799654][ T6566] ? __rcu_read_unlock+0x4e/0x70 [ 90.799764][ T6566] ? v9fs_mount+0x53/0x560 [ 90.799786][ T6566] ? __should_failslab+0x92/0xa0 [ 90.799803][ T6566] ? should_failslab+0x9/0x20 [ 90.799828][ T6566] v9fs_mount+0x69/0x560 [ 90.799868][ T6566] ? __pfx_v9fs_mount+0x10/0x10 [ 90.799893][ T6566] legacy_get_tree+0x77/0xd0 [ 90.799911][ T6566] vfs_get_tree+0x56/0x1d0 [ 90.799932][ T6566] do_new_mount+0x227/0x690 [ 90.800038][ T6566] path_mount+0x49b/0xb30 [ 90.800057][ T6566] __se_sys_mount+0x27f/0x2d0 [ 90.800077][ T6566] __x64_sys_mount+0x67/0x80 [ 90.800097][ T6566] x64_sys_call+0x25c9/0x2d70 [ 90.800118][ T6566] do_syscall_64+0xc9/0x1c0 [ 90.800149][ T6566] ? clear_bhb_loop+0x55/0xb0 [ 90.800168][ T6566] ? clear_bhb_loop+0x55/0xb0 [ 90.800191][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.800290][ T6566] RIP: 0033:0x7fa38fa7ebd9 [ 90.800302][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.800321][ T6566] RSP: 002b:00007fa38ed00048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.800361][ T6566] RAX: ffffffffffffffda RBX: 00007fa38fc0cf60 RCX: 00007fa38fa7ebd9 [ 90.800406][ T6566] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 90.800417][ T6566] RBP: 00007fa38ed000a0 R08: 0000000020000440 R09: 0000000000000000 [ 90.800429][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.800441][ T6566] R13: 000000000000000b R14: 00007fa38fc0cf60 R15: 00007ffe6d631ca8 [ 90.800454][ T6566] [ 90.961714][ T6572] vhci_hcd: invalid port number 117 [ 90.961725][ T6572] vhci_hcd: default hub control req: d35f v6f63 i0075 l29812 [ 91.272042][ T6523] syz.3.809 (6523) used greatest stack depth: 7184 bytes left [ 91.286189][ T6588] xt_CONNSECMARK: invalid mode: 0 [ 91.865635][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 91.865648][ T29] audit: type=1400 audit(1720372013.047:922): avc: denied { accept } for pid=6608 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.902644][ T6610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.838'. [ 92.013758][ T6615] xt_CONNSECMARK: invalid mode: 0 [ 92.367710][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 92.402726][ T29] audit: type=1400 audit(1720372013.577:923): avc: denied { lock } for pid=6633 comm="syz.0.846" path="socket:[18990]" dev="sockfs" ino=18990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 92.726786][ T6649] vhci_hcd: invalid port number 117 [ 92.732017][ T6649] vhci_hcd: default hub control req: d35f v6f63 i0075 l29812 [ 92.820176][ T29] audit: type=1400 audit(1720372013.997:924): avc: denied { setopt } for pid=6653 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.851013][ T6651] xt_CONNSECMARK: invalid mode: 0 [ 92.904397][ T6659] loop0: detected capacity change from 0 to 2048 [ 92.953116][ T6659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.969463][ T6662] loop2: detected capacity change from 0 to 512 [ 93.024159][ T6662] EXT4-fs (loop2): unable to read superblock [ 93.584887][ T6684] loop1: detected capacity change from 0 to 512 [ 93.654718][ T6684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.681346][ T6684] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.759395][ T5915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.866430][ T5370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.928514][ T6692] loop2: detected capacity change from 0 to 8192 [ 94.034997][ T6702] netlink: 9 bytes leftover after parsing attributes in process `syz.0.864'. [ 94.069955][ T6702] netlink: 5 bytes leftover after parsing attributes in process `syz.0.864'. [ 94.104237][ T6702] 0猉功D: renamed from gretap0 [ 94.124069][ T6702] 0猉功D: left promiscuous mode [ 94.128988][ T6702] 0猉功D: entered allmulticast mode [ 94.135629][ T6702] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 94.319514][ T6711] vhci_hcd: invalid port number 117 [ 94.324744][ T6711] vhci_hcd: default hub control req: d35f v6f63 i0075 l29812 [ 94.416028][ T6721] netlink: 128 bytes leftover after parsing attributes in process `syz.0.869'. [ 94.509731][ T29] audit: type=1326 audit(1720372015.687:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6723 comm="syz.0.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b09a15bd9 code=0x0 [ 94.586012][ T29] audit: type=1326 audit(1720372015.767:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 94.622514][ T6728] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.630032][ T29] audit: type=1326 audit(1720372015.767:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5075e7f610 code=0x7ffc0000 [ 94.653280][ T29] audit: type=1326 audit(1720372015.797:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 94.676492][ T29] audit: type=1326 audit(1720372015.797:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 94.699741][ T29] audit: type=1326 audit(1720372015.797:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 94.722960][ T29] audit: type=1326 audit(1720372015.797:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5075e80bd9 code=0x7ffc0000 [ 94.815949][ T6742] loop0: detected capacity change from 0 to 1024 [ 94.828315][ T6739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.865213][ T6742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.939647][ T6739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.965882][ T5370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.977139][ T6752] mmap: syz.3.876 (6752) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.994875][ T6751] netlink: 9 bytes leftover after parsing attributes in process `syz.2.877'. [ 95.019947][ T6751] gretap0: entered promiscuous mode [ 95.040854][ T6751] netlink: 5 bytes leftover after parsing attributes in process `syz.2.877'. [ 95.052653][ T6751] 0猉功D: renamed from gretap0 [ 95.060306][ T6751] 0猉功D: left promiscuous mode [ 95.065248][ T6751] 0猉功D: entered allmulticast mode [ 95.081934][ T6751] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 95.109380][ T6739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.171665][ T6739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.221205][ T6761] bond_slave_0: entered promiscuous mode [ 95.226965][ T6761] bond_slave_1: entered promiscuous mode [ 95.244214][ T6761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.262374][ T6761] team0: Port device macvlan2 added [ 95.278535][ T6739] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.296917][ T6761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6761 comm=syz.2.880 [ 95.304289][ T6739] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.326234][ T6761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6761 comm=syz.2.880 [ 95.336045][ T6739] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.369397][ T6739] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.396741][ T6740] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.455437][ T6740] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.505299][ T6740] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.545535][ T6740] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.113031][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 96.263357][ T6793] netlink: 9 bytes leftover after parsing attributes in process `syz.0.889'. [ 96.290499][ T6790] vhci_hcd: invalid port number 117 [ 96.295867][ T6790] vhci_hcd: default hub control req: d35f v6f63 i0075 l29812 [ 96.305920][ T6793] 0猉功D: entered promiscuous mode [ 96.311048][ T6793] 0猉功D: left allmulticast mode [ 96.350899][ T6794] netlink: 5 bytes leftover after parsing attributes in process `syz.0.889'. [ 96.382956][ T6794] 1猉功D: renamed from 30猉功D [ 96.398181][ T6794] 1猉功D: left promiscuous mode [ 96.403059][ T6794] 1猉功D: entered allmulticast mode [ 96.426801][ T6794] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 96.498085][ T6796] netlink: 9 bytes leftover after parsing attributes in process `syz.0.890'. [ 96.514317][ T6796] 1猉功D: entered promiscuous mode [ 96.519439][ T6796] 1猉功D: left allmulticast mode [ 96.545798][ T6796] netlink: 5 bytes leftover after parsing attributes in process `syz.0.890'. [ 96.571125][ T6796] 0猉功D: renamed from 31猉功D [ 96.585229][ T6796] 0猉功D: left promiscuous mode [ 96.590159][ T6796] 0猉功D: entered allmulticast mode [ 96.606362][ T6796] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 96.974663][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 96.974677][ T29] audit: type=1400 audit(1720372018.147:997): avc: denied { ioctl } for pid=6800 comm="syz.2.892" path="/dev/input/event0" dev="devtmpfs" ino=217 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.279554][ T29] audit: type=1400 audit(1720372018.457:998): avc: denied { map } for pid=6818 comm="syz.3.897" path="socket:[18368]" dev="sockfs" ino=18368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 97.427639][ T6827] FAULT_INJECTION: forcing a failure. [ 97.427639][ T6827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.440731][ T6827] CPU: 0 PID: 6827 Comm: syz.3.899 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 97.450767][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.460809][ T6827] Call Trace: [ 97.464084][ T6827] [ 97.467133][ T6827] dump_stack_lvl+0xf2/0x150 [ 97.471732][ T6827] dump_stack+0x15/0x20 [ 97.475901][ T6827] should_fail_ex+0x229/0x230 [ 97.480668][ T6827] should_fail+0xb/0x10 [ 97.484883][ T6827] should_fail_usercopy+0x1a/0x20 [ 97.489901][ T6827] copy_page_from_iter_atomic+0x22a/0xda0 [ 97.495637][ T6827] ? noop_dirty_folio+0x5d/0x70 [ 97.500494][ T6827] ? shmem_write_begin+0xa0/0x1c0 [ 97.505592][ T6827] ? shmem_write_begin+0x10c/0x1c0 [ 97.510764][ T6827] generic_perform_write+0x21a/0x410 [ 97.516054][ T6827] ? __pfx_shmem_write_end+0x10/0x10 [ 97.521356][ T6827] shmem_file_write_iter+0xc8/0xf0 [ 97.526477][ T6827] do_iter_readv_writev+0x339/0x3e0 [ 97.531685][ T6827] vfs_writev+0x2e0/0x880 [ 97.536028][ T6827] __se_sys_pwritev2+0x10c/0x1d0 [ 97.540993][ T6827] __x64_sys_pwritev2+0x78/0x90 [ 97.545886][ T6827] x64_sys_call+0x274f/0x2d70 [ 97.550639][ T6827] do_syscall_64+0xc9/0x1c0 [ 97.555143][ T6827] ? clear_bhb_loop+0x55/0xb0 [ 97.559888][ T6827] ? clear_bhb_loop+0x55/0xb0 [ 97.564582][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.570603][ T6827] RIP: 0033:0x7fdb0e659bd9 [ 97.575014][ T6827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.594665][ T6827] RSP: 002b:00007fdb0d8db048 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 97.603070][ T6827] RAX: ffffffffffffffda RBX: 00007fdb0e7e7f60 RCX: 00007fdb0e659bd9 [ 97.611053][ T6827] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 97.619084][ T6827] RBP: 00007fdb0d8db0a0 R08: 0000000000000000 R09: 0000000000000003 [ 97.627169][ T6827] R10: 0000000000007a00 R11: 0000000000000246 R12: 0000000000000002 [ 97.635136][ T6827] R13: 000000000000000b R14: 00007fdb0e7e7f60 R15: 00007fffc4278268 [ 97.643183][ T6827] [ 97.774812][ T6830] 0猉功D: entered promiscuous mode [ 97.780013][ T6830] 0猉功D: left allmulticast mode [ 97.814397][ T6830] 1猉功D: renamed from 30猉功D [ 97.822033][ T6830] 1猉功D: left promiscuous mode [ 97.826914][ T6830] 1猉功D: entered allmulticast mode [ 97.835516][ T6830] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 97.851435][ T29] audit: type=1400 audit(1720372019.017:999): avc: denied { ioctl } for pid=6831 comm="syz.3.901" path="net:[4026532790]" dev="nsfs" ino=4026532790 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.876031][ T29] audit: type=1400 audit(1720372019.017:1000): avc: denied { mounton } for pid=6831 comm="syz.3.901" path="/37/file0/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 98.018223][ T6839] xt_CONNSECMARK: invalid mode: 0 [ 98.116965][ T29] audit: type=1400 audit(1720372019.297:1001): avc: denied { map } for pid=6848 comm="syz.0.908" path="socket:[18412]" dev="sockfs" ino=18412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.167994][ T6856] lo speed is unknown, defaulting to 1000 [ 98.183869][ T6856] lo speed is unknown, defaulting to 1000 [ 98.189765][ T6856] lo speed is unknown, defaulting to 1000 [ 98.224764][ T6858] netlink: 'syz.2.911': attribute type 5 has an invalid length. [ 98.283526][ T29] audit: type=1400 audit(1720372019.457:1002): avc: denied { accept } for pid=6854 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.318938][ T6856] infiniband syz1: set down [ 98.323507][ T6856] infiniband syz1: added lo [ 98.328008][ T3163] lo speed is unknown, defaulting to 1000 [ 98.383717][ T6856] RDS/IB: syz1: added [ 98.387722][ T6856] smc: adding ib device syz1 with port count 1 [ 98.425822][ T6856] smc: ib device syz1 port 1 has pnetid [ 98.431789][ T3163] lo speed is unknown, defaulting to 1000 [ 98.457439][ T6856] lo speed is unknown, defaulting to 1000 [ 98.575314][ T6856] lo speed is unknown, defaulting to 1000 [ 98.666823][ T6856] lo speed is unknown, defaulting to 1000 [ 98.781862][ T6856] lo speed is unknown, defaulting to 1000 [ 98.885493][ T6856] lo speed is unknown, defaulting to 1000 [ 99.002206][ T6856] lo speed is unknown, defaulting to 1000 [ 99.092313][ T6856] lo speed is unknown, defaulting to 1000 [ 99.179524][ T6856] lo speed is unknown, defaulting to 1000 [ 99.194999][ T6864] tmpfs: Bad value for 'mpol' [ 99.302568][ T6867] __nla_validate_parse: 2 callbacks suppressed [ 99.302582][ T6867] netlink: 9 bytes leftover after parsing attributes in process `syz.2.914'. [ 99.323750][ T29] audit: type=1400 audit(1720372020.507:1003): avc: denied { unmount } for pid=5370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 99.357849][ T6867] 0猉功D: entered promiscuous mode [ 99.362972][ T6867] 0猉功D: left allmulticast mode [ 99.384815][ T6869] netlink: 5 bytes leftover after parsing attributes in process `syz.2.914'. [ 99.420578][ T6869] 1猉功D: renamed from 30猉功D [ 99.435326][ T6869] 1猉功D: left promiscuous mode [ 99.440187][ T6869] 1猉功D: entered allmulticast mode [ 99.455364][ T6869] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 99.506014][ T6874] tipc: Started in network mode [ 99.510884][ T6874] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 99.518121][ T6874] tipc: Enabled bearer , priority 10 [ 99.534492][ T6874] tipc: Resetting bearer [ 99.560518][ T6874] tipc: Disabling bearer [ 99.628498][ T6879] loop2: detected capacity change from 0 to 2048 [ 99.724569][ T6879] Alternate GPT is invalid, using primary GPT. [ 99.730943][ T6879] loop2: p1 p2 p3 [ 99.758258][ T29] audit: type=1400 audit(1720372020.937:1004): avc: denied { read write } for pid=6878 comm="syz.2.918" name="loop2p2" dev="devtmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.786882][ T6879] netlink: 'syz.2.918': attribute type 2 has an invalid length. [ 99.807434][ T29] audit: type=1400 audit(1720372020.937:1005): avc: denied { open } for pid=6878 comm="syz.2.918" path="/dev/loop2p2" dev="devtmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.209293][ T6894] loop2: detected capacity change from 0 to 512 [ 100.268611][ T6894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.366911][ T6894] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.380028][ T6899] FAULT_INJECTION: forcing a failure. [ 100.380028][ T6899] name failslab, interval 1, probability 0, space 0, times 0 [ 100.392692][ T6899] CPU: 0 PID: 6899 Comm: syz.0.924 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 100.402792][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.412908][ T6899] Call Trace: [ 100.416184][ T6899] [ 100.419109][ T6899] dump_stack_lvl+0xf2/0x150 [ 100.423763][ T6899] dump_stack+0x15/0x20 [ 100.427990][ T6899] should_fail_ex+0x229/0x230 [ 100.432702][ T6899] ? __alloc_skb+0x10b/0x300 [ 100.437360][ T6899] __should_failslab+0x92/0xa0 [ 100.442129][ T6899] should_failslab+0x9/0x20 [ 100.446698][ T6899] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 100.452502][ T6899] __alloc_skb+0x10b/0x300 [ 100.456920][ T6899] netlink_alloc_large_skb+0xad/0xe0 [ 100.462253][ T6899] netlink_sendmsg+0x3b4/0x6e0 [ 100.467080][ T6899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.472389][ T6899] __sock_sendmsg+0x140/0x180 [ 100.477194][ T6899] ____sys_sendmsg+0x312/0x410 [ 100.481981][ T6899] __sys_sendmsg+0x1e9/0x280 [ 100.486627][ T6899] __x64_sys_sendmsg+0x46/0x50 [ 100.491408][ T6899] x64_sys_call+0xb25/0x2d70 [ 100.496004][ T6899] do_syscall_64+0xc9/0x1c0 [ 100.500513][ T6899] ? clear_bhb_loop+0x55/0xb0 [ 100.505272][ T6899] ? clear_bhb_loop+0x55/0xb0 [ 100.510011][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.515940][ T6899] RIP: 0033:0x7f3b09a15bd9 [ 100.520348][ T6899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.539966][ T6899] RSP: 002b:00007f3b08c97048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.548386][ T6899] RAX: ffffffffffffffda RBX: 00007f3b09ba3f60 RCX: 00007f3b09a15bd9 [ 100.556351][ T6899] RDX: 0000000000000000 RSI: 0000000020001380 RDI: 0000000000000006 [ 100.564318][ T6899] RBP: 00007f3b08c970a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.572323][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.580289][ T6899] R13: 000000000000000b R14: 00007f3b09ba3f60 R15: 00007ffd8ad32558 [ 100.588310][ T6899] [ 100.645905][ T29] audit: type=1400 audit(1720372021.827:1006): avc: denied { map } for pid=6893 comm="syz.2.923" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.752476][ T5896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.806822][ T6903] lo speed is unknown, defaulting to 1000 [ 101.033310][ T6903] chnl_net:caif_netlink_parms(): no params data found [ 101.206055][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.213163][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.255626][ T6903] bridge_slave_0: entered allmulticast mode [ 101.276188][ T6903] bridge_slave_0: entered promiscuous mode [ 101.295700][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.302830][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.331502][ T6903] bridge_slave_1: entered allmulticast mode [ 101.346534][ T6903] bridge_slave_1: entered promiscuous mode [ 101.388092][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.404874][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.450896][ T6903] team0: Port device team_slave_0 added [ 101.459008][ T6903] team0: Port device team_slave_1 added [ 101.495594][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.502564][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.528623][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.579178][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.586239][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.612241][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.694710][ T6903] hsr_slave_0: entered promiscuous mode [ 101.700929][ T6903] hsr_slave_1: entered promiscuous mode [ 101.706959][ T6903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.714536][ T6903] Cannot create hsr debugfs directory [ 101.825673][ T6903] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.858255][ T6740] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.895338][ T6740] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.914870][ T6740] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.937717][ T6903] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.965745][ T6740] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.022825][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 102.022837][ T29] audit: type=1400 audit(1720372023.197:1008): avc: denied { map } for pid=6952 comm="syz.1.938" path="/proc/133/net/mcfilter6" dev="proc" ino=4026533593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 102.064232][ T6903] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.144178][ T6903] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.188781][ T29] audit: type=1400 audit(1720372023.367:1009): avc: denied { watch } for pid=6963 comm="syz.1.943" path="/54/file0" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.225384][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 102.270308][ T6903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.294302][ T6903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.320256][ T6903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.341644][ T6903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.378313][ T29] audit: type=1400 audit(1720372023.547:1010): avc: denied { map } for pid=6969 comm="syz.1.945" path="socket:[20075]" dev="sockfs" ino=20075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.472412][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.509919][ T6903] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.517878][ T29] audit: type=1400 audit(1720372023.697:1011): avc: denied { nlmsg_tty_audit } for pid=6977 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 102.561817][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.568908][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.591853][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.598965][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.652476][ T29] audit: type=1400 audit(1720372023.827:1012): avc: denied { relabelfrom } for pid=6985 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 102.672271][ T29] audit: type=1400 audit(1720372023.827:1013): avc: denied { relabelto } for pid=6985 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 102.793067][ T6903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.840225][ T6997] loop0: detected capacity change from 0 to 1024 [ 102.861640][ T6997] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 102.872645][ T6997] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 102.915482][ T6997] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 102.939563][ T6997] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.952: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 102.973062][ T6997] EXT4-fs (loop0): no journal found [ 103.006587][ T6903] veth0_vlan: entered promiscuous mode [ 103.033266][ T6903] veth1_vlan: entered promiscuous mode [ 103.059345][ T6903] veth0_macvtap: entered promiscuous mode [ 103.080337][ T6903] veth1_macvtap: entered promiscuous mode [ 103.106553][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.117057][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.121242][ T29] audit: type=1400 audit(1720372024.297:1014): avc: denied { setopt } for pid=7014 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.126857][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.126872][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.126889][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.146810][ T29] audit: type=1400 audit(1720372024.297:1015): avc: denied { read } for pid=7014 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.157340][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.207210][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.217657][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.227545][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.238000][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.247815][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.258318][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.268194][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.278614][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.290547][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.345631][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.356100][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.366087][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.376700][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.386782][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.397252][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.407080][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.417708][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.427514][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.437991][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.447806][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.458222][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.468072][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.478520][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.490441][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.500071][ T6903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.508831][ T6903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.517550][ T6903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.526252][ T6903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.594058][ T7019] pim6reg1: entered promiscuous mode [ 103.599369][ T7019] pim6reg1: entered allmulticast mode [ 103.659740][ T7036] netlink: 'syz.4.961': attribute type 4 has an invalid length. [ 103.730333][ T7036] netlink: 'syz.4.961': attribute type 4 has an invalid length. [ 103.751412][ T7019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7019 comm=syz.2.956 [ 103.795245][ T7038] loop1: detected capacity change from 0 to 8192 [ 103.828630][ T7038] loop1: p2 p3 p4 [ 103.831862][ T29] audit: type=1400 audit(1720372025.007:1016): avc: denied { bind } for pid=7039 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.832399][ T7038] loop1: p2 start 4293394690 is beyond EOD, truncated [ 103.832414][ T7038] loop1: p3 size 14090496 extends beyond EOD, truncated [ 103.884855][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'. [ 103.893925][ T7038] loop1: p4 size 50331904 extends beyond EOD, truncated [ 103.905678][ T7045] netlink: 9 bytes leftover after parsing attributes in process `syz.2.965'. [ 103.955815][ T7045] 1猉功D: entered promiscuous mode [ 103.960951][ T7045] 1猉功D: left allmulticast mode [ 104.022137][ T7048] netlink: 5 bytes leftover after parsing attributes in process `syz.2.965'. [ 104.051519][ T7048] 0猉功D: renamed from 31猉功D [ 104.072531][ T7048] 0猉功D: left promiscuous mode [ 104.077500][ T7048] 0猉功D: entered allmulticast mode [ 104.124941][ T7048] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 104.237885][ T7067] FAULT_INJECTION: forcing a failure. [ 104.237885][ T7067] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.251155][ T7067] CPU: 1 PID: 7067 Comm: syz.2.972 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 104.261207][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.271388][ T7067] Call Trace: [ 104.274666][ T7067] [ 104.277604][ T7067] dump_stack_lvl+0xf2/0x150 [ 104.282211][ T7067] dump_stack+0x15/0x20 [ 104.286392][ T7067] should_fail_ex+0x229/0x230 [ 104.291082][ T7067] __should_fail_alloc_page+0xfd/0x110 [ 104.296547][ T7067] __alloc_pages_noprof+0x109/0x360 [ 104.301763][ T7067] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 104.307132][ T7067] shmem_get_folio_gfp+0x3e4/0xb70 [ 104.312246][ T7067] shmem_fault+0x100/0x260 [ 104.316763][ T7067] __do_fault+0xb6/0x200 [ 104.321062][ T7067] handle_mm_fault+0xbba/0x2a80 [ 104.325985][ T7067] __get_user_pages+0x49d/0xf10 [ 104.330872][ T7067] faultin_page_range+0x352/0x5d0 [ 104.336003][ T7067] do_madvise+0x40d/0x2610 [ 104.340565][ T7067] ? get_pid_task+0x8e/0xc0 [ 104.345101][ T7067] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.350791][ T7067] ? __fget_files+0x1da/0x210 [ 104.355456][ T7067] ? fput+0x13b/0x180 [ 104.359421][ T7067] ? ksys_write+0x178/0x1b0 [ 104.363971][ T7067] __x64_sys_madvise+0x61/0x70 [ 104.368754][ T7067] x64_sys_call+0x285d/0x2d70 [ 104.373467][ T7067] do_syscall_64+0xc9/0x1c0 [ 104.377961][ T7067] ? clear_bhb_loop+0x55/0xb0 [ 104.382627][ T7067] ? clear_bhb_loop+0x55/0xb0 [ 104.387360][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.393249][ T7067] RIP: 0033:0x7f5075e80bd9 [ 104.397648][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.417243][ T7067] RSP: 002b:00007f5075102048 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 104.425674][ T7067] RAX: ffffffffffffffda RBX: 00007f507600ef60 RCX: 00007f5075e80bd9 [ 104.433708][ T7067] RDX: 0000000000000017 RSI: 0000000000004000 RDI: 0000000020536000 [ 104.441670][ T7067] RBP: 00007f50751020a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.449625][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.457755][ T7067] R13: 000000000000000b R14: 00007f507600ef60 R15: 00007ffc8117aae8 [ 104.465763][ T7067] [ 104.488566][ T7070] lo speed is unknown, defaulting to 1000 [ 104.504046][ T29] audit: type=1400 audit(1720372025.677:1017): avc: denied { listen } for pid=7071 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.540937][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 105.154675][ T7106] loop2: detected capacity change from 0 to 512 [ 105.165401][ T7104] loop1: detected capacity change from 0 to 512 [ 105.182665][ T7104] EXT4-fs: Ignoring removed bh option [ 105.195458][ T7106] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.984: corrupted in-inode xattr: invalid ea_ino [ 105.228531][ T7106] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.984: couldn't read orphan inode 15 (err -117) [ 105.257580][ T7104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.258978][ T7106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.293804][ T7104] ext4 filesystem being mounted at /66/w劈5T赵)`)Y丗婢nA@T<3悔$Ⅲ譺鏲nH<縫價桉箵>wC" 烉-蝣鑰8 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.333994][ T7104] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.983: corrupted inode contents [ 105.366758][ T7104] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.983: mark_inode_dirty error [ 105.394397][ T5896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.414908][ T7104] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.983: corrupted inode contents [ 105.463901][ T7104] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.983: mark_inode_dirty error [ 105.572451][ T7118] lo speed is unknown, defaulting to 1000 [ 105.711421][ T7121] hub 6-0:1.0: USB hub found [ 105.729521][ T7121] hub 6-0:1.0: 8 ports detected [ 105.851645][ T7129] loop2: detected capacity change from 0 to 1024 [ 105.974007][ T7129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.006182][ T7137] vcan0: tx drop: invalid da for name 0x000000000e000000 [ 106.112988][ T7142] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.120390][ T7142] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 106.139044][ T5915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.277021][ T7149] netlink: 751 bytes leftover after parsing attributes in process `syz.1.996'. [ 106.534594][ T7155] netlink: 'syz.4.1001': attribute type 2 has an invalid length. [ 106.687035][ T5896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.082281][ T7171] FAULT_INJECTION: forcing a failure. [ 107.082281][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 107.095012][ T7171] CPU: 0 PID: 7171 Comm: syz.2.1007 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 107.105164][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.115227][ T7171] Call Trace: [ 107.118492][ T7171] [ 107.121470][ T7171] dump_stack_lvl+0xf2/0x150 [ 107.126102][ T7171] dump_stack+0x15/0x20 [ 107.130264][ T7171] should_fail_ex+0x229/0x230 [ 107.135040][ T7171] ? __alloc_skb+0x10b/0x300 [ 107.139683][ T7171] __should_failslab+0x92/0xa0 [ 107.144444][ T7171] should_failslab+0x9/0x20 [ 107.149044][ T7171] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 107.154907][ T7171] __alloc_skb+0x10b/0x300 [ 107.159326][ T7171] netlink_alloc_large_skb+0xad/0xe0 [ 107.164610][ T7171] netlink_sendmsg+0x3b4/0x6e0 [ 107.169445][ T7171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.174821][ T7171] __sock_sendmsg+0x140/0x180 [ 107.179507][ T7171] ____sys_sendmsg+0x312/0x410 [ 107.184291][ T7171] __sys_sendmsg+0x1e9/0x280 [ 107.188888][ T7171] __x64_sys_sendmsg+0x46/0x50 [ 107.193708][ T7171] x64_sys_call+0xb25/0x2d70 [ 107.198395][ T7171] do_syscall_64+0xc9/0x1c0 [ 107.202901][ T7171] ? clear_bhb_loop+0x55/0xb0 [ 107.207579][ T7171] ? clear_bhb_loop+0x55/0xb0 [ 107.212320][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.218221][ T7171] RIP: 0033:0x7f5075e80bd9 [ 107.222694][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.242301][ T7171] RSP: 002b:00007f5075102048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.250706][ T7171] RAX: ffffffffffffffda RBX: 00007f507600ef60 RCX: 00007f5075e80bd9 [ 107.258777][ T7171] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 107.266833][ T7171] RBP: 00007f50751020a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.274886][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.282907][ T7171] R13: 000000000000000b R14: 00007f507600ef60 R15: 00007ffc8117aae8 [ 107.290874][ T7171] [ 107.317286][ T7173] loop1: detected capacity change from 0 to 512 [ 107.354948][ T7173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.409823][ T7173] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.427285][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 107.427296][ T29] audit: type=1400 audit(1720372028.607:1025): avc: denied { bind } for pid=7182 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.523571][ T7183] loop2: detected capacity change from 0 to 512 [ 107.584377][ T7183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.591791][ T7191] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1013'. [ 107.626893][ T5915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.643722][ T7183] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.737052][ T29] audit: type=1400 audit(1720372028.917:1026): avc: denied { read } for pid=7202 comm="syz.4.1015" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.761351][ T29] audit: type=1400 audit(1720372028.917:1027): avc: denied { open } for pid=7202 comm="syz.4.1015" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.790049][ T7207] loop1: detected capacity change from 0 to 128 [ 107.793702][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'. [ 107.836106][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 107.849848][ T29] audit: type=1400 audit(1720372028.917:1028): avc: denied { ioctl } for pid=7202 comm="syz.4.1015" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.893571][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 107.937896][ T7206] ebtables: ebtables: counters copy to user failed while replacing table [ 107.966117][ T7207] loop1: detected capacity change from 0 to 1024 [ 107.972820][ T7207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.979211][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 108.048221][ T7207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.061408][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 108.098451][ T29] audit: type=1400 audit(1720372029.277:1029): avc: denied { mount } for pid=7225 comm="syz.4.1020" name="/" dev="hugetlbfs" ino=21676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 108.144629][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 108.171127][ T29] audit: type=1400 audit(1720372029.347:1030): avc: denied { unmount } for pid=6903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 108.202470][ T7216] lo speed is unknown, defaulting to 1000 [ 108.243957][ T5915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.278600][ T7231] delete_channel: no stack [ 108.284673][ T29] audit: type=1400 audit(1720372029.457:1031): avc: denied { bind } for pid=7231 comm="syz.4.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 108.304140][ T29] audit: type=1400 audit(1720372029.457:1032): avc: denied { accept } for pid=7231 comm="syz.4.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 108.335189][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 108.375953][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.408387][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 108.437814][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.465665][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 108.491488][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.520220][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 108.556912][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.573913][ T5896] EXT4-fs error (device loop2): ext4_empty_dir:3089: inode #12: comm syz-executor: Directory hole found for htree leaf block [ 108.612019][ T7216] chnl_net:caif_netlink_parms(): no params data found [ 108.716005][ T64] bridge_slave_1: left allmulticast mode [ 108.721756][ T64] bridge_slave_1: left promiscuous mode [ 108.727422][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.755817][ T64] bridge_slave_0: left allmulticast mode [ 108.761472][ T64] bridge_slave_0: left promiscuous mode [ 108.767276][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.855775][ T5896] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.976227][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.999240][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.015886][ T64] bond0 (unregistering): Released all slaves [ 109.062284][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.070338][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.093656][ T7216] bridge_slave_0: entered allmulticast mode [ 109.110183][ T7216] bridge_slave_0: entered promiscuous mode [ 109.120519][ T64] tipc: Left network mode [ 109.120895][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.131910][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.159380][ T7216] bridge_slave_1: entered allmulticast mode [ 109.169842][ T7216] bridge_slave_1: entered promiscuous mode [ 109.235497][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.248984][ T7272] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1034'. [ 109.260300][ T64] hsr_slave_0: left promiscuous mode [ 109.269279][ T64] hsr_slave_1: left promiscuous mode [ 109.282764][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.290255][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.340603][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.348050][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.378068][ T64] veth1_macvtap: left promiscuous mode [ 109.383594][ T64] veth0_macvtap: left promiscuous mode [ 109.389107][ T64] veth1_vlan: left promiscuous mode [ 109.394420][ T64] veth0_vlan: left promiscuous mode [ 109.420122][ T29] audit: type=1400 audit(1720372030.597:1033): avc: denied { execute } for pid=7278 comm="syz.4.1036" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 109.421196][ T7279] FAULT_INJECTION: forcing a failure. [ 109.421196][ T7279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.459578][ T7279] CPU: 0 PID: 7279 Comm: syz.4.1036 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 109.469690][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 109.479786][ T7279] Call Trace: [ 109.483131][ T7279] [ 109.486062][ T7279] dump_stack_lvl+0xf2/0x150 [ 109.490657][ T7279] dump_stack+0x15/0x20 [ 109.494805][ T7279] should_fail_ex+0x229/0x230 [ 109.499492][ T7279] __should_fail_alloc_page+0xfd/0x110 [ 109.504986][ T7279] __alloc_pages_noprof+0x109/0x360 [ 109.510176][ T7279] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 109.515578][ T7279] alloc_pages_noprof+0xe1/0x100 [ 109.520569][ T7279] get_free_pages_noprof+0xc/0x30 [ 109.525585][ T7279] pgd_alloc+0x22/0x170 [ 109.529744][ T7279] mm_init+0x372/0x6f0 [ 109.533854][ T7279] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 109.539489][ T7279] copy_mm+0x11e/0x11d0 [ 109.543647][ T7279] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 109.549400][ T7279] ? hrtimer_init+0x104/0x1f0 [ 109.554075][ T7279] ? __init_rwsem+0x5d/0x70 [ 109.558578][ T7279] ? copy_signal+0x339/0x370 [ 109.563265][ T7279] copy_process+0xee1/0x1f90 [ 109.567860][ T7279] kernel_clone+0x16a/0x570 [ 109.572417][ T7279] __x64_sys_clone+0xe8/0x120 [ 109.577098][ T7279] x64_sys_call+0x23e7/0x2d70 [ 109.581841][ T7279] do_syscall_64+0xc9/0x1c0 [ 109.586347][ T7279] ? clear_bhb_loop+0x55/0xb0 [ 109.591093][ T7279] ? clear_bhb_loop+0x55/0xb0 [ 109.595772][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.601701][ T7279] RIP: 0033:0x7ff1995fcbd9 [ 109.606171][ T7279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.625776][ T7279] RSP: 002b:00007ff19887dff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 109.634190][ T7279] RAX: ffffffffffffffda RBX: 00007ff19978af60 RCX: 00007ff1995fcbd9 [ 109.642287][ T7279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.650261][ T7279] RBP: 00007ff19887e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.658230][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.666195][ T7279] R13: 000000000000000b R14: 00007ff19978af60 R15: 00007ffe63eeb2d8 [ 109.674174][ T7279] [ 109.782402][ T64] team0 (unregistering): Port device team_slave_1 removed [ 109.803780][ T64] team0 (unregistering): Port device team_slave_0 removed [ 109.874318][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.894273][ T7255] lo speed is unknown, defaulting to 1000 [ 109.945908][ T7216] team0: Port device team_slave_0 added [ 109.974018][ T7216] team0: Port device team_slave_1 added [ 110.034558][ T7282] lo speed is unknown, defaulting to 1000 [ 110.040640][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.047659][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.073650][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.104718][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.111662][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.137586][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.237724][ T7255] chnl_net:caif_netlink_parms(): no params data found [ 110.253406][ T7216] hsr_slave_0: entered promiscuous mode [ 110.260588][ T7216] hsr_slave_1: entered promiscuous mode [ 110.269023][ T7216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.279955][ T7216] Cannot create hsr debugfs directory [ 110.370121][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.419624][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.426892][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.453103][ T7255] bridge_slave_0: entered allmulticast mode [ 110.467739][ T7255] bridge_slave_0: entered promiscuous mode [ 110.486118][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.504520][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.511593][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.525933][ T7255] bridge_slave_1: entered allmulticast mode [ 110.541250][ T7255] bridge_slave_1: entered promiscuous mode [ 110.561796][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.614354][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.638018][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.658382][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.701622][ T7255] team0: Port device team_slave_0 added [ 110.708461][ T7255] team0: Port device team_slave_1 added [ 110.729931][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.736890][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.763004][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.811843][ T64] bridge_slave_1: left allmulticast mode [ 110.817544][ T64] bridge_slave_1: left promiscuous mode [ 110.823261][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.845749][ T64] bridge_slave_0: left allmulticast mode [ 110.851474][ T64] bridge_slave_0: left promiscuous mode [ 110.857102][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.874965][ T64] bond_slave_0: left promiscuous mode [ 110.880452][ T64] bond_slave_1: left promiscuous mode [ 110.921277][ T64] ip6gretap0 (unregistering): left promiscuous mode [ 111.008083][ T64] team0: Port device macvlan2 removed [ 111.017201][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.028183][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.045197][ T64] bond0 (unregistering): Released all slaves [ 111.066087][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.073091][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.099041][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.132450][ T64] tipc: Left network mode [ 111.178471][ T7255] hsr_slave_0: entered promiscuous mode [ 111.199381][ T7320] loop1: detected capacity change from 0 to 512 [ 111.206389][ T7255] hsr_slave_1: entered promiscuous mode [ 111.212767][ T7255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.244132][ T7255] Cannot create hsr debugfs directory [ 111.326936][ T64] hsr_slave_0: left promiscuous mode [ 111.332780][ T64] hsr_slave_1: left promiscuous mode [ 111.348407][ T64] veth1_macvtap: left promiscuous mode [ 111.354038][ T64] veth0_macvtap: left promiscuous mode [ 111.359661][ T64] veth1_vlan: left promiscuous mode [ 111.365159][ T64] veth0_vlan: left promiscuous mode [ 111.537444][ T64] team0 (unregistering): Port device team_slave_1 removed [ 111.556664][ T64] team0 (unregistering): Port device team_slave_0 removed [ 111.623039][ T51] smc: removing ib device syz1 [ 111.653572][ T7328] netlink: 'syz.1.1047': attribute type 13 has an invalid length. [ 111.661415][ T7328] netlink: 'syz.1.1047': attribute type 58 has an invalid length. [ 111.669313][ T7328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1047'. [ 111.693799][ T7216] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.747152][ T7216] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.793202][ T7216] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.806613][ T7216] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.827961][ T29] audit: type=1400 audit(1720372033.007:1034): avc: denied { getopt } for pid=7332 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.907969][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.931280][ T7216] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.955298][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.962402][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.996769][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.003850][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.044633][ T7216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.055036][ T7216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.140334][ T7255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.176127][ T7255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.187157][ T7255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.213489][ T7255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.237307][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.355279][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.385087][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.408693][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.415769][ T5627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.448086][ T7216] veth0_vlan: entered promiscuous mode [ 112.469194][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.476312][ T5627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.518640][ T7216] veth1_vlan: entered promiscuous mode [ 112.561436][ T7216] veth0_macvtap: entered promiscuous mode [ 112.578852][ T7216] veth1_macvtap: entered promiscuous mode [ 112.605496][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.615992][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.625888][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.636401][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.646221][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.656730][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.666546][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.677044][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.686859][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.697384][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.707338][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.717797][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.727610][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.738037][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.794343][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.803397][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.813989][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.823970][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.834514][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.844397][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.854834][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.864725][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.875198][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.885013][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.895573][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.905597][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.916146][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.925961][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.936441][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.948450][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.961391][ T7216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.970159][ T7216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.978992][ T7216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.987716][ T7216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.072357][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.091066][ T7352] loop1: detected capacity change from 0 to 128 [ 113.164984][ T7352] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=23066 sclass=netlink_xfrm_socket pid=7352 comm=syz.1.1052 [ 113.311624][ T7255] veth0_vlan: entered promiscuous mode [ 113.336983][ T7255] veth1_vlan: entered promiscuous mode [ 113.400110][ T7255] veth0_macvtap: entered promiscuous mode [ 113.419124][ T7255] veth1_macvtap: entered promiscuous mode [ 113.457723][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.468540][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.478379][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.488855][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.498735][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.509193][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.519041][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.529663][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.540044][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.542358][ T29] audit: type=1326 audit(1720372034.727:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 113.550826][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.584171][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.594603][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.604461][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.614899][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.624720][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.635215][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.665887][ T29] audit: type=1326 audit(1720372034.847:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1995fb610 code=0x7ffc0000 [ 113.689373][ T29] audit: type=1326 audit(1720372034.847:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 113.694668][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.713035][ T29] audit: type=1326 audit(1720372034.847:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 113.765343][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.775888][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.785752][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.796253][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.806094][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.816513][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.818459][ T29] audit: type=1326 audit(1720372034.907:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 113.826319][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.849690][ T29] audit: type=1326 audit(1720372034.907:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 113.860144][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.860162][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.883486][ T29] audit: type=1326 audit(1720372034.907:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 113.883510][ T29] audit: type=1326 audit(1720372034.907:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 113.893304][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.893322][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.903969][ T29] audit: type=1326 audit(1720372034.907:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 113.927144][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.927164][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.927177][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.950885][ T29] audit: type=1326 audit(1720372034.907:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1995fcbd9 code=0x7ffc0000 [ 114.048677][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.059346][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.121917][ T7380] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 114.124471][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.149831][ T7255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.158703][ T7255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.167410][ T7255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.176262][ T7255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.282546][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 114.337834][ T7389] hub 9-0:1.0: USB hub found [ 114.342512][ T7389] hub 9-0:1.0: 8 ports detected [ 114.367804][ T7384] loop1: detected capacity change from 0 to 512 [ 114.382473][ T7384] ext2: Unknown parameter 'euid>00000000000000000000' [ 114.590368][ T7395] pim6reg1: entered promiscuous mode [ 114.595873][ T7395] pim6reg1: entered allmulticast mode [ 114.667657][ T7396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7396 comm=syz.1.1061 [ 114.733509][ T7380] ================================================================== [ 114.741681][ T7380] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 114.748695][ T7380] [ 114.750998][ T7380] read-write to 0xffff888237d1ff94 of 4 bytes by interrupt on cpu 1: [ 114.759044][ T7380] hrtimer_interrupt+0x72/0x7b0 [ 114.763883][ T7380] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 114.769765][ T7380] sysvec_apic_timer_interrupt+0x6e/0x80 [ 114.775383][ T7380] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.781351][ T7380] __sanitizer_cov_trace_pc+0x8/0x70 [ 114.786623][ T7380] io_run_task_work+0x1aa/0x1f0 [ 114.791466][ T7380] __se_sys_io_uring_enter+0x104c/0x15a0 [ 114.797098][ T7380] __x64_sys_io_uring_enter+0x78/0x90 [ 114.802479][ T7380] x64_sys_call+0x25ab/0x2d70 [ 114.807153][ T7380] do_syscall_64+0xc9/0x1c0 [ 114.811646][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.817529][ T7380] [ 114.819848][ T7380] read to 0xffff888237d1ff94 of 4 bytes by task 7380 on cpu 0: [ 114.827381][ T7380] print_cpu+0x348/0x670 [ 114.831613][ T7380] timer_list_show+0x115/0x180 [ 114.836363][ T7380] seq_read_iter+0x65b/0x940 [ 114.840943][ T7380] proc_reg_read_iter+0x11e/0x190 [ 114.845955][ T7380] copy_splice_read+0x3a4/0x5d0 [ 114.850815][ T7380] splice_direct_to_actor+0x26c/0x670 [ 114.856197][ T7380] do_splice_direct+0xd7/0x150 [ 114.860955][ T7380] do_sendfile+0x3ab/0x950 [ 114.865379][ T7380] __x64_sys_sendfile64+0x110/0x150 [ 114.870571][ T7380] x64_sys_call+0x2c9f/0x2d70 [ 114.875241][ T7380] do_syscall_64+0xc9/0x1c0 [ 114.879737][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.885617][ T7380] [ 114.887919][ T7380] value changed: 0x0000dfc5 -> 0x0000dfc6 [ 114.893614][ T7380] [ 114.895916][ T7380] Reported by Kernel Concurrency Sanitizer on: [ 114.902058][ T7380] CPU: 0 PID: 7380 Comm: syz.4.1057 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 114.912116][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 114.922157][ T7380] ==================================================================