last executing test programs: 8.183610662s ago: executing program 0 (id=331): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x100000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xa42) 7.819657402s ago: executing program 0 (id=337): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003840)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x14}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'pimreg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x26, 0x1, 0x5, 0x2, 0x0, 0x0, 0x89c82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xf}, 0x0, 0xfffffffffffffff7, 0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffeffffffe, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x5}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x4, 0xffffffffffffff14, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r9) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) ioctl$TIOCL_SETSEL(r13, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0xd6e}}) 7.752041267s ago: executing program 0 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="0903000000000000000029000000040001"], 0x18}, 0x1, 0xf000000}, 0x0) 7.751369168s ago: executing program 0 (id=342): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8202) fcntl$dupfd(r1, 0x0, r1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1200, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x44}, {0x0}, {&(0x7f0000001480)}], 0x3) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f00000003c0)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001f40)=""/4094, 0x2e, 0xffe, 0xa}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=r5], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303}, "cd7d380981466ab5", "8a51e3a19962560fedb2e91a44e89a0a", "4534aba3", "e614853cc4232c50"}, 0x28) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x11, 0xffffffffffffffff, 0xa0d28000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x2, 0x5}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x9, 0x899, 0xdda, 0x2002, 0xffffffffffffffff, 0x81, '\x00', 0x0, r5, 0x3, 0x4, 0x3}, 0x48) 7.675852454s ago: executing program 0 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe6c, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe6c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x957934a93fd214ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r1, 0x0) syz_read_part_table(0x609, &(0x7f0000000d40)="$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") (async) syz_read_part_table(0x609, &(0x7f0000000d40)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x208, 0xc8, 0x8, 0x208, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1d8, 0x208, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x208, 0xc8, 0x8, 0x208, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1d8, 0x208, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) creat(&(0x7f0000000480)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r5}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010024d60000000000000000000003000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000304aad651117000000000000000000000000000000000000000000000000000000000000ebff45026d61b10057b73fe705c102d661acebd089596f87f767b165649f1440b43c533d86af171b3eba10a5ba7cfc8e83594edef143effea3"], 0x5000) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r8, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x2, 0x0, &(0x7f0000000080)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x125f, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c010000100013080000000000000000ac1414aa000000000000000000000000ff01000000000001000000000000000000000000000000000000000000000000c48c15d079bca63bfb21fa364d8781d147d0521e52407103042abdb8cc2ef3e5a9bd48d036965889a752ede9cd723ed832af83b941cbc160b215c01e64a95e7bc5287c80084c97e8aa6514df46cc29070861a5738fca4cfb306285a86f53485bb0cb9f833d5a521493b0af0e6a2140c09d0e0936d41ee6aa814a6f3f6e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d6163286165732900"/244], 0x13c}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c010000100013080000000000000000ac1414aa000000000000000000000000ff01000000000001000000000000000000000000000000000000000000000000c48c15d079bca63bfb21fa364d8781d147d0521e52407103042abdb8cc2ef3e5a9bd48d036965889a752ede9cd723ed832af83b941cbc160b215c01e64a95e7bc5287c80084c97e8aa6514df46cc29070861a5738fca4cfb306285a86f53485bb0cb9f833d5a521493b0af0e6a2140c09d0e0936d41ee6aa814a6f3f6e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d6163286165732900"/244], 0x13c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.484030959s ago: executing program 0 (id=351): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002440)=[{&(0x7f00000001c0)=""/4120, 0x1018}, {&(0x7f0000001340)=""/134, 0x86}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000080)=""/5, 0xffffffffffffff23}, {&(0x7f0000002500)=""/108, 0x6c}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001280)=""/154, 0x9a}, {&(0x7f00000035c0)=""/4103, 0x1007}, {&(0x7f00000014c0)=""/252, 0xf3}], 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004600)=@newtfilter={0x43c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x9, 0x2}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0xfffffffb, 0x1, 0x3ff, 0xfffffff5, 0xa27, 0x4, 0x6, 0x4, 0x1, 0x1, 0x1, 0x1ff, 0x4, 0x9, 0x4, 0x7ff, 0x2, 0x1, 0x0, 0x2, 0x6, 0x9, 0x1, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x35d, 0x2, 0x400, 0x2, 0x0, 0x3, 0x7fffffff, 0x8001, 0x89e, 0xf9e6, 0x4, 0x2, 0x80000000, 0x6, 0xb, 0x7f, 0x1, 0x5, 0xffff, 0xa51a, 0x4, 0xd72f, 0x0, 0x5, 0x2, 0x3, 0x1, 0xfffffc01, 0x298, 0x9, 0x7, 0xffffffff, 0x80000001, 0x80000000, 0xc33, 0xfff, 0x8fa, 0x7, 0x1, 0x5, 0x5, 0x3, 0x4, 0x7, 0x8, 0x8020000, 0x3, 0x0, 0x7, 0x8001, 0x7fffffff, 0x4, 0x8, 0x3, 0x3, 0x9, 0x80, 0x100, 0x0, 0x8, 0x4, 0x7f, 0x100, 0x7fffffff, 0x9, 0x1, 0x0, 0x0, 0x9, 0x55, 0x5, 0x100, 0x1, 0x7, 0x4, 0x79, 0x6, 0x7, 0x2, 0xa, 0x4, 0x6, 0x8, 0x0, 0x9, 0xffffffff, 0x7, 0x2, 0xac, 0x5, 0xb, 0x7, 0x0, 0x6f, 0xb653, 0x800, 0xf304, 0x1, 0x1, 0x400, 0x3, 0x4, 0x9, 0x994, 0x401, 0x6, 0x9, 0xfffffffb, 0xfffffffa, 0x28, 0x1, 0xa9, 0x0, 0x0, 0xe392, 0x4c, 0x9, 0x6, 0x20007, 0x7, 0x2, 0x401, 0xa0, 0xe, 0x80000000, 0x0, 0x80000001, 0x7, 0x9, 0x0, 0x6, 0x3, 0x8, 0x80000000, 0x81, 0xac, 0x4, 0x3, 0x1300, 0x2, 0x800, 0x3ff, 0x5, 0x8, 0x0, 0x4, 0x1, 0xffff5715, 0xddcd, 0xfff, 0x3, 0x1, 0x5920ae52, 0x2, 0xfffffffd, 0x1, 0xffff7fff, 0xffffffff, 0x7, 0x3, 0x4, 0x6, 0x9, 0x6, 0x1, 0x40, 0x3, 0x8001, 0x1000, 0x3, 0x3, 0x0, 0xd6, 0x5d, 0x3, 0x9, 0xb, 0x9, 0x10, 0x1, 0x5, 0xffffffff, 0x61, 0x1, 0x41, 0xe77, 0x200, 0x1ff, 0x9, 0x6, 0x0, 0x3, 0x3, 0x0, 0x6, 0xf, 0xff, 0x1, 0xff, 0x9, 0x101, 0xe1902648, 0xc, 0x0, 0xaf3, 0x100, 0x2, 0xd, 0x3, 0x8, 0x0, 0x4, 0x4, 0x1, 0xb1, 0x3, 0x3bc, 0x3ff, 0x0, 0x8, 0xe, 0x8, 0x9, 0xbf0, 0x401]}]}]}}]}, 0x43c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x1901000000000000) 1.944004691s ago: executing program 2 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x413, 0x70bd28, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 1.773865705s ago: executing program 2 (id=430): r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe8ea5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$tipc(0x1e, 0x5, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket(0x10, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) 1.677179833s ago: executing program 2 (id=431): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{0x28}, {0x25}, {0x6}, {0x4d5e, 0x7d, 0x29, 0x5}, {0x65ea, 0x8, 0x7, 0x45}, {0xfffb, 0x5, 0x10, 0x80}, {0x8, 0x9c, 0x2, 0x3}]}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f00000007c0)=0xffffff78) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x633dded7d04b80a2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000005000000000000000000000008570b0000600000950000034b931500"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x43, &(0x7f0000000200)=""/67, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x2, 0xfffff393, 0xfffffffe}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x3, 0x10, 0x4}, {0x2, 0x5, 0xc, 0x5}, {0x0, 0x4, 0x3, 0x7}, {0x1, 0x5, 0x9, 0x7}], 0x10, 0x8}, 0x90) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)={r1, r4}) write$binfmt_script(r3, &(0x7f0000000480)={'#! ', './file0', [{0x20, '\xc9\x96\xe0\xe0\x80\xca0\xd48.\xbb1q\x0edC\xb5c\xae\x8b9\xbdC\x9a#P\xcdJ\xd0\x05=\xf7\xe5\xfb\x16\xfb\xd2\x1b\xb3U\xa9\x13\v,)\xde\x8a\x90\xb7\xe6\xd7}\xed>\x974\xb1r\xe4\b\x92}&\x8e\x1a8y#\xa4\xf8N\xccK\xb5\x13\xfco\x86>%|\xd9\xd8\x98,2&\xc8\x12\xe3`\xc8\x1a\t\x00\xfc\xd5\xbe\"\x00d \xb7:M\xb9\xb4\x8b\xc6*\x81R\x7f^`\xe4\x15\f\xdf\xe0\'!A\xb2?\xbf\x13a\x15\xa0B\xf0\x963\x8f7\x8bE\x99\xe3K\xa5\\\x7f\xc6\xffz\x14\x96\xf3\xb4\xfd\x80\b=\xda\x91m\xea\xd2H\xae\xeb\xc5\x87x&\x87mX\x89H.r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\x93\x7fp\xf4\a\x9cZ\xbe8\xfd\xe62`\x00'/220}, {0x20, '\x00\xe832\xd0S\x16K\xb7@\x8d\xdb\x8bs\xfe]\x88q\xd3l\xfd\x16k\x95\x8f_\xb4\x82\x1d\xf0\x1c\xc1\xb8\xc1\xa9Y\xb0\x98`\x8dA\xcad\x96h\xd6\x9e\x00\xf8}w\xde\xa1\xb6\x862\r\x05_\x05vp.1\x1f\x05\xf7\xfe'}, {0x20, '\xba+\t\x00+'}, {0x20, '\xafb\x01s\x88L\xb5\xff#\xb3\xf9m\xef%\x0e\a\x8d\xf7\xafi\xf4\x14\xfc4\xfcn\x03O\xba\xd9\xc2\xadi\xf1\x0f\xea\\SG\x83,\x92\x05\x11n\xf4\xb3\x81Q%\xdb%\xbb&+LB\a\x01\xc8]\xc3\xa0\x82\x98g\xb1\f\x14\x956\xbd[6\xcfbJj\xee[\xf3S\xdc\x97\xe7`\xa47^*\xc8~CV\xcbJ\xa1\xf0_r\x81E\xec\x95\a\x83\xd8%\xa6j\xd9\xd1\x8cY^?M\xd0S\xdd\xe6\x9a\xf3v\v^Fr\x87\x92/\xda\x0e\x17Yfk\xcb\xb2\x93\xff/\xc1\xd5f\xcd\x04\x1a\xae\'\x189\xc6A\xbcUR\x13\x10\x06\xac\x8b\xd8L\xebW\xa7-\x89\xed\xa7\x8fY\xce\xfe\xbc4<\xb1\xdbm\x06\xd9\xa4\r)*:\xb4%.\x82I\xccj\x85/\xfc\x13^o\xdev\x15\xb2\x98\x01/\xf5\x99\x92\xb7h\x1e\xe5\xdf\xa5\xfbQ\xe6\x14A\x05\xbad\xac\x1c\x00/a;\x89'}], 0xa, "be19ad5cee54bff909fd80c528a8ba8cb96881f7024d65e1b648fd56f131247642c9a38dc4418ea26300b7d0ac3fdf583559a94b09daa518d523f8ff75c846e28d5fe4d4742dbcdff57da54b99b102fc135feb65ed339c0dc0d83d963e8a7a79f8ccc413d38323ee389533e2e3c1a36ae81051b801482069ec1df263b2a0ae985ab4634838b58615eb5870d33b3eb55f81f16ddfb12d6baabe73d614a9d50689af91477a180530fa9dd7c33193b0bfa737583f2cf6183facea459b31fcc8e86ac1e7e451e5e9b10928f227b619cb844e89f3040b01d6598d4da3180b5c289d3947"}, 0x2fd) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000780)={@private1, r6}, 0x14) 1.670694744s ago: executing program 1 (id=433): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/70, 0x46) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 1.606865119s ago: executing program 2 (id=434): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x22a, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000100)='./file0\x00', 0x20000d2, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d62696e643700000092cfdba36e46835a38e84b1940c89485000000002c00"]) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2}, 0x4) epoll_create(0x0) socketpair(0x0, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x48) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = dup2(r5, r4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000003c0)={r7, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000500)=0x2, &(0x7f00000005c0)=r0}, 0x1d) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) timer_create(0x3, 0x0, &(0x7f0000001400)) set_mempolicy(0x6, &(0x7f0000000000)=0x9, 0xff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x3, 0x4}]}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) write$cgroup_int(r10, 0x0, 0x0) 1.606167459s ago: executing program 1 (id=435): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10, &(0x7f0000000c80), 0xff, 0x249, &(0x7f0000000880)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x2092809, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x0, 0x42) open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2], 0x1c}}, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7415, 0x5a1e, 0x11, &(0x7f0000001080)={[0x6]}, 0x8) r3 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1a0, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'ipvlan0\x00', 'ipvlan0\x00'}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x3}}, @common=@hbh={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @private0, [], [], 'xfrm0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) pread64(r3, &(0x7f0000000140)=""/47, 0x2f, 0x8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) 1.415816495s ago: executing program 4 (id=437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0xfffe}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=ANY=[@ANYBLOB], 0x1c}}, 0x16) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000180)}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000001540)={0x6, 0x0, &(0x7f0000001500)=[r4, r6, r0]}, 0x3) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@newqdisc={0x1c4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf2, 0x81, 0x4, 0x1, 0x1, 0x7d28, 0x20000000}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x8, 0x7, 0x0, 0x1, 0x0, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x0, 0x6, 0x2, 0xffff]}}, {{0x1c, 0x1, {0x9, 0x7a, 0x8, 0xffff, 0x0, 0x2, 0x8001, 0x3}}, {0xa, 0x2, [0x6, 0x9, 0xf]}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x7, 0x5, 0xffffffa1, 0x2, 0x3}}, {0xa, 0x2, [0xf93c, 0x4, 0x7]}}, {{0x1c, 0x1, {0x3, 0x3, 0x100, 0x3, 0x0, 0x2, 0x7, 0x6}}, {0x10, 0x2, [0x100, 0x1, 0x8d82, 0x10, 0x4ab, 0xe965]}}, {{0x1c, 0x1, {0x3, 0x3, 0x8000, 0x9, 0x2, 0x80000001, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x9295, 0x1ff]}}, {{0x1c, 0x1, {0x3d, 0x0, 0x9, 0x6, 0x0, 0x0, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0xa, 0x0]}}, {{0x1c, 0x1, {0x6, 0xa, 0x34, 0x0, 0x2, 0x1000, 0x9, 0x2}}, {0x8, 0x2, [0x0, 0x83]}}]}]}, 0x1c4}}, 0x0) rename(&(0x7f0000002040)='./file0\x00', 0x0) read$char_usb(r6, &(0x7f0000000040)=""/4122, 0x101a) r11 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) lgetxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=@known='user.incfs.size\x00', &(0x7f0000001400)=""/231, 0xe7) fcntl$dupfd(r11, 0x0, r11) 1.209965891s ago: executing program 4 (id=439): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4216, &(0x7f0000000440)=ANY=[], 0x4, 0x331, &(0x7f0000000900)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f00000001c0)={[{@nouid32}, {@max_batch_time={'max_batch_time', 0x3d, 0xd}}]}, 0xfc, 0x58c, &(0x7f00000003c0)="$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") (async) r1 = open(&(0x7f0000000100)='./bus\x00', 0x107502, 0x0) mmap(&(0x7f0000823000/0x12000)=nil, 0x12000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) fadvise64(r0, 0x0, 0x0, 0x4) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x64, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x8}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) (async) socket(0x1d, 0x2, 0x0) r8 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r8, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.115833189s ago: executing program 4 (id=440): r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[], 0x118) (async) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x8, 0xff7a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1aa9045b", @ANYRES16=r5, @ANYBLOB="010200000000000000002e0000000c000500000000000000000005002e00000000000a0001007770616e3100000005002b0003000000"], 0x3c}}, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000043a000009047600e30b35178a03c48f89760caf363b70578578f211ad8a656541557c5ac3b8f85792d190736c75fa68b03e34e5caafbfa930b51acafb30b0cac128f88501ba06a27fbff8653e37ffef111773c9cacd65aae07dc7ecd1f3c5b27c8999f35e88bb94a92f7d22fb1363f8e66ee0f459a6a000"/137], 0x82) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) (async) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) 977.05752ms ago: executing program 1 (id=442): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'caif0\x00', 0x7e0}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x29020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00'}) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xffdd) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8fae3de2b1fc3285542b9eba2e81dc43cdc347e868ecdd29827a82fc6bffe9fa0f56c01dda2a877da07381a7da9fdf52c986c41cbcf1db663494bcbf3107bcf5f7153a02778155bee2fcb1fa4e0da9147e1aee99a95477e81f962a921654dbd2ed8a6253265193437f9c42ee74aec5f0cea02e6d9ee8eaaf0653e77b8f338d62a815b3b5262b9d73b506180fb5014687fd18793a78c09ff04e7267e9fde3db0daf9af09525621c633f9076fdc32d69fb9f1794fea515e0e622a59ed25fc6aa59bd452765f1136120860b8bf"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000034002000340000000200000000000000020000040000000000000000020000000000000000000000020000000000000000000000000000010000000000"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000690400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000300)={'bridge0\x00', @broadcast}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000070000000a0004002f70696e33000000080001"], 0x30}}, 0x0) 807.144864ms ago: executing program 4 (id=443): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @enum]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x3e}, 0x20) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) r4 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r4, 0x8401}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendfile(r8, r7, 0x0, 0x100800001) 703.935852ms ago: executing program 2 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 686.669994ms ago: executing program 2 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setpgid(r0, r0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) sendmmsg$inet(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x4cd}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r2, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r5, 0x11c, 0x4, &(0x7f0000002080)=""/4104, &(0x7f0000000040)=0x1008) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x26020480) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c1c01ffffffff0000000000000000000000000000000000000000000000001c"], 0x50}}], 0x1, 0xc080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 686.381854ms ago: executing program 1 (id=446): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'veth0_to_hsr\x00', {'bridge_slave_0\x00'}, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x29}}) 627.720499ms ago: executing program 1 (id=447): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xfe}, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x4006, &(0x7f0000000000)=0x106, 0x5, 0x0) (async, rerun: 64) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003edbdf250a00003f2ef8059204000000000000000000000000000038ac0000"], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x80) (async, rerun: 32) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="c7ed0a79b7014892f2ef5cd15625408bd1f05d3badebf8a6891ec43c37", 0x1d}], 0x1) ftruncate(r3, 0x80079a0) (async, rerun: 32) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendfile(r4, r3, 0x0, 0xffff) 601.925681ms ago: executing program 1 (id=448): syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [], 0x0, 0x0, 0x0}, 0x2b0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [], 0x0, 0x0, 0x0}, 0x2b0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa274, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) (async) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(r5, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x6) (async) sendfile(r6, r7, 0x0, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r8, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) gettid() r10 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0, @ANYRES16=0x0], 0x24}}, 0x0) recvmmsg$unix(r10, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) (async) recvmmsg$unix(r10, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040), 0x10) (async) getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040), 0x10) 595.569331ms ago: executing program 4 (id=449): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0xffffffffffffffff}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x45b, &(0x7f0000002480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x40501) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fedbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c0000000000080001007063690011000200303030303a30303a31302e300000000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0xc010) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_GET_CPUID(0x1e, r5, 0x0, 0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x10002def, 0x0, 0x0, 0x0, 0x0) epoll_create(0x689) 383.877219ms ago: executing program 3 (id=452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x2, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000f6009500000100000000"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ac0)={r0, 0x0, 0x30, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r3 = open(0x0, 0x400141042, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x6c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040880}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r3, 0xfcb6e000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) timer_create(0x6, &(0x7f0000000580)={0x0, 0x3b, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000005c0)=0x0) timer_settime(r9, 0x1, &(0x7f0000000600)={{0x77359400}, {0x77359400}}, &(0x7f0000000640)) write$P9_RRENAMEAT(r8, &(0x7f0000000540)={0x7, 0x4b, 0x2}, 0x7) r10 = socket$isdn(0x22, 0x2, 0x1) timer_settime(r9, 0xaae8f8c95abc3548, 0x0, &(0x7f0000000700)) r11 = socket$isdn(0x22, 0x2, 0x0) dup2(r10, r11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 377.127419ms ago: executing program 3 (id=453): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910445000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x401}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c0) 359.841541ms ago: executing program 3 (id=454): r0 = syz_open_procfs(0x0, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) lsm_set_self_attr(0x0, 0x0, 0x20, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000080000000c00028004000380040005000c00018008000100", @ANYRES32=r4], 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@errors_remount}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x1, 0x784, &(0x7f0000000f80)="$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") r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)) 252.08189ms ago: executing program 4 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 178.342375ms ago: executing program 3 (id=457): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"]) 91.307073ms ago: executing program 3 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2d8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x2}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x234, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_ACT={0x21c, 0x6, [@m_ife={0x138, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}, @TCA_IFE_PARMS={0x1c}]}, {0xc9, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7038eceef52fe7bdca153fe865c65015a3b208b282c16472e451aa10a8631235c49cae271f5fc8ce5e34d9938e3d5f43ac7a0e31b0acfc73199ca90e81246819f4c740a4fa3247a2af88d6569da09be7179b89f9f024c9f465098a5a52058a431206bee68089bddc13ffe76ff0f000053fa1517700a54d423c13fb673"}, {0xc}, {0xc}}}, @m_nat={0xe0, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xb5, 0x6, "3332a788c477b8aa1d40f06558096aa7f7aa9524122c7f7f35f5c6a3a9f0d334b88aa9e18fc396e464248421d89dc067637341f3bb7d8c95663dbd36f64edf1d7fc96a453c0e2837a3fd79678f3fd9c493a900c5ad479c1dbcdb13af2d0112812f29fef54d0b2310ed4c52a1ce3807765da21b83f41c560db1d983a9e0fcfe9c3b1add1f52ee4b35ce71268663d346255397d472d3996961a1931a80f953531d6d983aa96e8bfa7c704087740386cb40a0"}, {0xc}, {0xc}}}]}]}}]}, 0x2d8}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x680}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 3 (id=459): ftruncate(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) (async) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="480b0000f1"], 0x20000600}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000700), 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000ac0)={0x0, 0x5, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200)={0x1d, r8}, 0x10) (async) connect$can_bcm(r9, &(0x7f0000000200)={0x1d, r8}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="480b0000f1"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="480b0000f1"], 0x20000600}}, 0x0) kernel console output (not intermixed with test programs): loop3): ext4_validate_block_bitmap:441: comm syz.3.69: bg 0: block 393: padding at end of block bitmap is not set [ 34.912651][ T3635] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 34.937087][ T3643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 34.944222][ T3646] loop0: detected capacity change from 0 to 1024 [ 34.947092][ T3643] EXT4-fs (loop3): 2 truncates cleaned up [ 34.954298][ T3642] EXT4-fs (loop2): 1 truncate cleaned up [ 34.962705][ T3643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.976874][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.980897][ T3643] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 34.995921][ T3646] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.74: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 34.997026][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 34.997067][ T29] audit: type=1400 audit(1723191741.453:231): avc: denied { create } for pid=3637 comm="syz.2.73" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.015712][ T3646] EXT4-fs error (device loop0): ext4_quota_enable:7025: comm syz.0.74: Bad quota inode: 4, type: 1 [ 35.030359][ T3649] EXT4-fs (loop2): shut down requested (0) [ 35.040628][ T29] audit: type=1400 audit(1723191741.473:232): avc: denied { write } for pid=3637 comm="syz.2.73" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.060489][ T3646] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.078253][ T29] audit: type=1400 audit(1723191741.473:233): avc: denied { add_name } for pid=3637 comm="syz.2.73" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.095270][ T3646] EXT4-fs (loop0): mount failed [ 35.113207][ T29] audit: type=1400 audit(1723191741.473:234): avc: denied { listen } for pid=3641 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.137864][ T29] audit: type=1400 audit(1723191741.473:235): avc: denied { accept } for pid=3641 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.173430][ T3646] loop0: detected capacity change from 0 to 2048 [ 35.190886][ T29] audit: type=1400 audit(1723191741.643:236): avc: denied { setattr } for pid=3641 comm="syz.3.69" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.202448][ T3646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.237287][ T3646] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 35.281966][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.291558][ T3646] capability: warning: `syz.0.74' uses 32-bit capabilities (legacy support in use) [ 35.306004][ T29] audit: type=1400 audit(1723191741.693:237): avc: denied { setopt } for pid=3645 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.325431][ T29] audit: type=1400 audit(1723191741.703:238): avc: denied { read } for pid=3645 comm="syz.0.74" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.347886][ T29] audit: type=1400 audit(1723191741.703:239): avc: denied { open } for pid=3645 comm="syz.0.74" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.371245][ T29] audit: type=1400 audit(1723191741.753:240): avc: denied { read } for pid=3645 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 35.394067][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.441545][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.574795][ T3667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'. [ 35.692929][ T3674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 35.757665][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 35.765505][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 35.782970][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 35.797978][ T8] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.845978][ T3682] FAULT_INJECTION: forcing a failure. [ 35.845978][ T3682] name failslab, interval 1, probability 0, space 0, times 0 [ 35.852581][ T3684] loop2: detected capacity change from 0 to 128 [ 35.858640][ T3682] CPU: 0 UID: 0 PID: 3682 Comm: syz.3.86 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 35.858667][ T3682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 35.858678][ T3682] Call Trace: [ 35.858732][ T3682] [ 35.869090][ T3684] EXT4-fs: Ignoring removed nobh option [ 35.875409][ T3682] dump_stack_lvl+0xf2/0x150 [ 35.895178][ T3684] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.897211][ T3682] dump_stack+0x15/0x20 [ 35.902058][ T3684] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.913731][ T3682] should_fail_ex+0x229/0x230 [ 35.932779][ T3682] ? v9fs_session_init+0x4c/0xda0 [ 35.937849][ T3682] should_failslab+0x8f/0xb0 [ 35.942502][ T3682] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 35.948827][ T3682] kstrdup+0x3a/0x80 [ 35.952755][ T3682] v9fs_session_init+0x4c/0xda0 [ 35.957602][ T3682] ? __rcu_read_unlock+0x4e/0x70 [ 35.962656][ T3682] ? should_fail_ex+0xd7/0x230 [ 35.967472][ T3682] ? v9fs_mount+0x53/0x560 [ 35.971870][ T3682] ? should_failslab+0x8f/0xb0 [ 35.976628][ T3682] v9fs_mount+0x69/0x560 [ 35.980853][ T3682] ? __pfx_v9fs_mount+0x10/0x10 [ 35.985684][ T3682] legacy_get_tree+0x77/0xd0 [ 35.990261][ T3682] vfs_get_tree+0x56/0x1d0 [ 35.994666][ T3682] do_new_mount+0x227/0x690 [ 35.999169][ T3682] path_mount+0x49b/0xb30 [ 36.003487][ T3682] __se_sys_mount+0x27c/0x2d0 [ 36.008149][ T3682] __x64_sys_mount+0x67/0x80 [ 36.012764][ T3682] x64_sys_call+0x203e/0x2d60 [ 36.017427][ T3682] do_syscall_64+0xc9/0x1c0 [ 36.021981][ T3682] ? clear_bhb_loop+0x55/0xb0 [ 36.026645][ T3682] ? clear_bhb_loop+0x55/0xb0 [ 36.031393][ T3682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.037362][ T3682] RIP: 0033:0x7f8cdef479f9 [ 36.041758][ T3682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.061423][ T3682] RSP: 002b:00007f8cddbc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.069983][ T3682] RAX: ffffffffffffffda RBX: 00007f8cdf0d5f80 RCX: 00007f8cdef479f9 [ 36.078051][ T3682] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 36.086004][ T3682] RBP: 00007f8cddbc7090 R08: 0000000020000440 R09: 0000000000000000 [ 36.094132][ T3682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.102096][ T3682] R13: 0000000000000000 R14: 00007f8cdf0d5f80 R15: 00007fffe522e048 [ 36.110050][ T3682] [ 36.118609][ T3266] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.150160][ T3689] loop3: detected capacity change from 0 to 1024 [ 36.157867][ T3689] EXT4-fs: Ignoring removed orlov option [ 36.185237][ T3689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.202234][ T3689] can0: slcan on ptm0. [ 36.241960][ T3687] unsupported nlmsg_type 40 [ 36.249634][ T3688] can0 (unregistered): slcan off ptm0. [ 36.251658][ T3703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'. [ 36.270654][ T3260] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /12/file0: bad entry in directory: inode out of bounds - offset=76, inode=2320, rec_len=16, size=1024 fake=0 [ 36.319067][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.352349][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 36.382082][ T3722] FAULT_INJECTION: forcing a failure. [ 36.382082][ T3722] name failslab, interval 1, probability 0, space 0, times 0 [ 36.394722][ T3722] CPU: 1 UID: 0 PID: 3722 Comm: syz.3.94 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 36.405288][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 36.415349][ T3722] Call Trace: [ 36.418616][ T3722] [ 36.421531][ T3722] dump_stack_lvl+0xf2/0x150 [ 36.426168][ T3722] dump_stack+0x15/0x20 [ 36.430394][ T3722] should_fail_ex+0x229/0x230 [ 36.435072][ T3722] ? __pfx_ip6_dst_gc+0x10/0x10 [ 36.439993][ T3722] ? dst_alloc+0xc0/0x100 [ 36.444336][ T3722] should_failslab+0x8f/0xb0 [ 36.448989][ T3722] kmem_cache_alloc_noprof+0x4c/0x290 [ 36.454474][ T3722] ? fib6_select_path+0x2bf/0x2f0 [ 36.459508][ T3722] dst_alloc+0xc0/0x100 [ 36.463730][ T3722] ip6_pol_route+0x6ff/0xb90 [ 36.468404][ T3722] ? ip6_pol_route+0x385/0xb90 [ 36.473244][ T3722] ip6_pol_route_input+0x40/0x50 [ 36.478185][ T3722] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 36.483833][ T3722] fib6_rule_lookup+0x364/0x4e0 [ 36.488683][ T3722] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 36.494424][ T3722] ip6_route_input+0x41e/0x4f0 [ 36.499314][ T3722] ip6_rcv_finish+0x1c0/0x330 [ 36.504069][ T3722] ipv6_rcv+0x74/0x150 [ 36.508138][ T3722] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 36.513334][ T3722] __netif_receive_skb+0xa2/0x280 [ 36.518440][ T3722] netif_receive_skb+0x4a/0x320 [ 36.523306][ T3722] ? virtio_net_hdr_to_skb+0x6c4/0xb50 [ 36.528767][ T3722] ? tun_rx_batched+0xba/0x410 [ 36.533600][ T3722] tun_rx_batched+0xf0/0x410 [ 36.538189][ T3722] tun_get_user+0x1e77/0x24b0 [ 36.543015][ T3722] ? kstrtoull+0x110/0x140 [ 36.547430][ T3722] ? ref_tracker_alloc+0x1f5/0x2f0 [ 36.552554][ T3722] tun_chr_write_iter+0x18e/0x240 [ 36.557583][ T3722] vfs_write+0x78f/0x900 [ 36.561836][ T3722] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 36.567379][ T3722] ksys_write+0xeb/0x1b0 [ 36.571628][ T3722] __x64_sys_write+0x42/0x50 [ 36.576243][ T3722] x64_sys_call+0x27dd/0x2d60 [ 36.580934][ T3722] do_syscall_64+0xc9/0x1c0 [ 36.585582][ T3722] ? clear_bhb_loop+0x55/0xb0 [ 36.590263][ T3722] ? clear_bhb_loop+0x55/0xb0 [ 36.594967][ T3722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.600889][ T3722] RIP: 0033:0x7f8cdef464df [ 36.605370][ T3722] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 36.625168][ T3722] RSP: 002b:00007f8cddbc7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 36.633640][ T3722] RAX: ffffffffffffffda RBX: 00007f8cdf0d5f80 RCX: 00007f8cdef464df [ 36.641611][ T3722] RDX: 000000000000004a RSI: 0000000020000440 RDI: 00000000000000c8 [ 36.649575][ T3722] RBP: 00007f8cddbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.657648][ T3722] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 36.665612][ T3722] R13: 0000000000000000 R14: 00007f8cdf0d5f80 R15: 00007fffe522e048 [ 36.673581][ T3722] [ 36.730145][ T3735] FAULT_INJECTION: forcing a failure. [ 36.730145][ T3735] name failslab, interval 1, probability 0, space 0, times 0 [ 36.743025][ T3735] CPU: 1 UID: 0 PID: 3735 Comm: syz.3.100 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 36.753825][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 36.763884][ T3735] Call Trace: [ 36.767420][ T3735] [ 36.770358][ T3735] dump_stack_lvl+0xf2/0x150 [ 36.775003][ T3735] dump_stack+0x15/0x20 [ 36.779237][ T3735] should_fail_ex+0x229/0x230 [ 36.783950][ T3735] ? v9fs_session_init+0x79/0xda0 [ 36.789000][ T3735] should_failslab+0x8f/0xb0 [ 36.793606][ T3735] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 36.800002][ T3735] kstrdup+0x3a/0x80 [ 36.804076][ T3735] v9fs_session_init+0x79/0xda0 [ 36.808948][ T3735] ? __rcu_read_unlock+0x4e/0x70 [ 36.813928][ T3735] ? should_fail_ex+0xd7/0x230 [ 36.818761][ T3735] ? v9fs_mount+0x53/0x560 [ 36.823194][ T3735] ? should_failslab+0x8f/0xb0 [ 36.828025][ T3735] v9fs_mount+0x69/0x560 [ 36.832276][ T3735] ? __pfx_v9fs_mount+0x10/0x10 [ 36.837138][ T3735] legacy_get_tree+0x77/0xd0 [ 36.841828][ T3735] vfs_get_tree+0x56/0x1d0 [ 36.846248][ T3735] do_new_mount+0x227/0x690 [ 36.850954][ T3735] path_mount+0x49b/0xb30 [ 36.855406][ T3735] __se_sys_mount+0x27c/0x2d0 [ 36.860097][ T3735] __x64_sys_mount+0x67/0x80 [ 36.864703][ T3735] x64_sys_call+0x203e/0x2d60 [ 36.869383][ T3735] do_syscall_64+0xc9/0x1c0 [ 36.873989][ T3735] ? clear_bhb_loop+0x55/0xb0 [ 36.878677][ T3735] ? clear_bhb_loop+0x55/0xb0 [ 36.883359][ T3735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.889330][ T3735] RIP: 0033:0x7f8cdef479f9 [ 36.893753][ T3735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.913571][ T3735] RSP: 002b:00007f8cddbc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.922020][ T3735] RAX: ffffffffffffffda RBX: 00007f8cdf0d5f80 RCX: 00007f8cdef479f9 [ 36.930018][ T3735] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 36.937999][ T3735] RBP: 00007f8cddbc7090 R08: 0000000020000440 R09: 0000000000000000 [ 36.946028][ T3735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.953993][ T3735] R13: 0000000000000000 R14: 00007f8cdf0d5f80 R15: 00007fffe522e048 [ 36.961968][ T3735] [ 37.076416][ T3764] loop2: detected capacity change from 0 to 512 [ 37.083791][ T3764] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 2048 [ 37.162634][ T3764] loop2: detected capacity change from 0 to 2048 [ 37.239236][ T3766] loop3: detected capacity change from 0 to 512 [ 37.272530][ T3764] loop2: detected capacity change from 0 to 2048 [ 37.281066][ T3766] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 37.518375][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 37.529670][ T3778] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 37.570975][ T3787] 9pnet_fd: Insufficient options for proto=fd [ 37.575225][ T3789] FAULT_INJECTION: forcing a failure. [ 37.575225][ T3789] name failslab, interval 1, probability 0, space 0, times 0 [ 37.589703][ T3789] CPU: 1 UID: 0 PID: 3789 Comm: syz.3.116 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 37.600347][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 37.610391][ T3789] Call Trace: [ 37.613665][ T3789] [ 37.616598][ T3789] dump_stack_lvl+0xf2/0x150 [ 37.618268][ T3791] loop4: detected capacity change from 0 to 512 [ 37.621224][ T3789] dump_stack+0x15/0x20 [ 37.631608][ T3789] should_fail_ex+0x229/0x230 [ 37.636349][ T3789] ? p9_client_create+0x57/0xa80 [ 37.641280][ T3789] should_failslab+0x8f/0xb0 [ 37.646127][ T3789] __kmalloc_cache_noprof+0x4b/0x2a0 [ 37.651404][ T3789] p9_client_create+0x57/0xa80 [ 37.656156][ T3789] ? v9fs_session_init+0x79/0xda0 [ 37.661250][ T3789] ? should_failslab+0x8f/0xb0 [ 37.666057][ T3789] ? __kmalloc_node_track_caller_noprof+0x17e/0x380 [ 37.672639][ T3789] v9fs_session_init+0xf9/0xda0 [ 37.677564][ T3789] ? __rcu_read_unlock+0x4e/0x70 [ 37.682594][ T3789] ? __rcu_read_unlock+0x4e/0x70 [ 37.687519][ T3789] ? v9fs_mount+0x53/0x560 [ 37.691992][ T3789] ? should_failslab+0x8f/0xb0 [ 37.696885][ T3789] v9fs_mount+0x69/0x560 [ 37.701167][ T3789] ? __pfx_v9fs_mount+0x10/0x10 [ 37.706010][ T3789] legacy_get_tree+0x77/0xd0 [ 37.710633][ T3789] vfs_get_tree+0x56/0x1d0 [ 37.715093][ T3789] do_new_mount+0x227/0x690 [ 37.719590][ T3789] path_mount+0x49b/0xb30 [ 37.723914][ T3789] __se_sys_mount+0x27c/0x2d0 [ 37.728761][ T3789] __x64_sys_mount+0x67/0x80 [ 37.733496][ T3789] x64_sys_call+0x203e/0x2d60 [ 37.738254][ T3789] do_syscall_64+0xc9/0x1c0 [ 37.743021][ T3789] ? clear_bhb_loop+0x55/0xb0 [ 37.747705][ T3789] ? clear_bhb_loop+0x55/0xb0 [ 37.752377][ T3789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.758320][ T3789] RIP: 0033:0x7f8cdef479f9 [ 37.762731][ T3789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.782331][ T3789] RSP: 002b:00007f8cddbc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.790755][ T3789] RAX: ffffffffffffffda RBX: 00007f8cdf0d5f80 RCX: 00007f8cdef479f9 [ 37.798724][ T3789] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 37.806684][ T3789] RBP: 00007f8cddbc7090 R08: 0000000020000440 R09: 0000000000000000 [ 37.814681][ T3789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.822642][ T3789] R13: 0000000000000000 R14: 00007f8cdf0d5f80 R15: 00007fffe522e048 [ 37.830605][ T3789] [ 37.889202][ T3799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.120'. [ 37.890321][ T3791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.935381][ T3791] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.949320][ T2925] kernel write not supported for file /snd/seq (pid: 2925 comm: kworker/0:2) [ 37.959321][ T3338] IPVS: starting estimator thread 0... [ 38.007697][ T3806] loop3: detected capacity change from 0 to 2048 [ 38.037706][ T3781] loop2: detected capacity change from 0 to 512 [ 38.054049][ T3802] IPVS: using max 2784 ests per chain, 139200 per kthread [ 38.064233][ T3781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.077573][ T3781] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.088017][ T3806] loop3: p1 < > p4 [ 38.096208][ T3806] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.167539][ T3627] udevd[3627]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 38.185339][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.272916][ T3820] syz.2.110 (3820) used greatest stack depth: 9808 bytes left [ 38.287531][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 38.414770][ T3840] FAULT_INJECTION: forcing a failure. [ 38.414770][ T3840] name failslab, interval 1, probability 0, space 0, times 0 [ 38.427450][ T3840] CPU: 1 UID: 0 PID: 3840 Comm: syz.3.131 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 38.438115][ T3840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 38.448256][ T3840] Call Trace: [ 38.451544][ T3840] [ 38.454517][ T3840] dump_stack_lvl+0xf2/0x150 [ 38.459117][ T3840] dump_stack+0x15/0x20 [ 38.463355][ T3840] should_fail_ex+0x229/0x230 [ 38.468109][ T3840] ? p9_client_create+0x1a7/0xa80 [ 38.473173][ T3840] should_failslab+0x8f/0xb0 [ 38.477828][ T3840] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 38.484164][ T3840] ? should_failslab+0x8f/0xb0 [ 38.489016][ T3840] kstrdup+0x3a/0x80 [ 38.492920][ T3840] p9_client_create+0x1a7/0xa80 [ 38.497810][ T3840] v9fs_session_init+0xf9/0xda0 [ 38.502663][ T3840] ? avc_has_perm_noaudit+0xbe/0x210 [ 38.507949][ T3840] ? __rcu_read_unlock+0x4e/0x70 [ 38.512910][ T3840] ? v9fs_mount+0x53/0x560 [ 38.517394][ T3840] ? should_failslab+0x8f/0xb0 [ 38.522203][ T3840] v9fs_mount+0x69/0x560 [ 38.526461][ T3840] ? __pfx_v9fs_mount+0x10/0x10 [ 38.531324][ T3840] legacy_get_tree+0x77/0xd0 [ 38.535936][ T3840] vfs_get_tree+0x56/0x1d0 [ 38.540350][ T3840] do_new_mount+0x227/0x690 [ 38.544857][ T3840] path_mount+0x49b/0xb30 [ 38.549197][ T3840] __se_sys_mount+0x27c/0x2d0 [ 38.553878][ T3840] __x64_sys_mount+0x67/0x80 [ 38.558523][ T3840] x64_sys_call+0x203e/0x2d60 [ 38.563221][ T3840] do_syscall_64+0xc9/0x1c0 [ 38.567810][ T3840] ? clear_bhb_loop+0x55/0xb0 [ 38.572510][ T3840] ? clear_bhb_loop+0x55/0xb0 [ 38.577190][ T3840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.583212][ T3840] RIP: 0033:0x7f8cdef479f9 [ 38.587616][ T3840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.607217][ T3840] RSP: 002b:00007f8cddbc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.615620][ T3840] RAX: ffffffffffffffda RBX: 00007f8cdf0d5f80 RCX: 00007f8cdef479f9 [ 38.623579][ T3840] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 38.631585][ T3840] RBP: 00007f8cddbc7090 R08: 0000000020000440 R09: 0000000000000000 [ 38.639546][ T3840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.647508][ T3840] R13: 0000000000000000 R14: 00007f8cdf0d5f80 R15: 00007fffe522e048 [ 38.655522][ T3840] [ 38.664814][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.687248][ T3850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 38.690593][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.727102][ T3853] loop3: detected capacity change from 0 to 1024 [ 38.734240][ T3853] EXT4-fs: quotafile must be on filesystem root [ 38.772179][ T3857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 38.838087][ T3870] netlink: 'syz.1.144': attribute type 4 has an invalid length. [ 38.868185][ T2925] hid (null): unknown global tag 0xd [ 38.873506][ T2925] hid (null): unknown global tag 0xc [ 38.879578][ T2925] hid (null): global environment stack underflow [ 38.888628][ T2925] hid-generic 0040:01FF:0008.0005: unknown global tag 0xd [ 38.895809][ T2925] hid-generic 0040:01FF:0008.0005: item 0 2 1 13 parsing failed [ 38.900545][ T3884] FAULT_INJECTION: forcing a failure. [ 38.900545][ T3884] name failslab, interval 1, probability 0, space 0, times 0 [ 38.903633][ T2925] hid-generic 0040:01FF:0008.0005: probe with driver hid-generic failed with error -22 [ 38.916071][ T3884] CPU: 1 UID: 0 PID: 3884 Comm: syz.3.147 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 38.936241][ T3884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 38.946341][ T3884] Call Trace: [ 38.949606][ T3884] [ 38.952524][ T3884] dump_stack_lvl+0xf2/0x150 [ 38.957130][ T3884] dump_stack+0x15/0x20 [ 38.961464][ T3884] should_fail_ex+0x229/0x230 [ 38.966181][ T3884] ? match_strdup+0x37/0x40 [ 38.970793][ T3884] should_failslab+0x8f/0xb0 [ 38.975420][ T3884] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 38.981774][ T3884] kmemdup_nul+0x30/0x80 [ 38.986008][ T3884] match_strdup+0x37/0x40 [ 38.990330][ T3884] p9_client_create+0x25c/0xa80 [ 38.995171][ T3884] v9fs_session_init+0xf9/0xda0 [ 39.000018][ T3884] ? __rcu_read_unlock+0x4e/0x70 [ 39.005151][ T3884] ? __rcu_read_unlock+0x4e/0x70 [ 39.010091][ T3884] ? v9fs_mount+0x53/0x560 [ 39.014504][ T3884] ? should_failslab+0x8f/0xb0 [ 39.019270][ T3884] v9fs_mount+0x69/0x560 [ 39.023507][ T3884] ? __pfx_v9fs_mount+0x10/0x10 [ 39.028350][ T3884] legacy_get_tree+0x77/0xd0 [ 39.033008][ T3884] vfs_get_tree+0x56/0x1d0 [ 39.037477][ T3884] do_new_mount+0x227/0x690 [ 39.041995][ T3884] path_mount+0x49b/0xb30 [ 39.046341][ T3884] __se_sys_mount+0x27c/0x2d0 [ 39.051014][ T3884] __x64_sys_mount+0x67/0x80 [ 39.055701][ T3884] x64_sys_call+0x203e/0x2d60 [ 39.060372][ T3884] do_syscall_64+0xc9/0x1c0 [ 39.065005][ T3884] ? clear_bhb_loop+0x55/0xb0 [ 39.069695][ T3884] ? clear_bhb_loop+0x55/0xb0 [ 39.074380][ T3884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.080333][ T3884] RIP: 0033:0x7f8cdef479f9 [ 39.084733][ T3884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.104376][ T3884] RSP: 002b:00007f8cddbc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.112783][ T3884] RAX: ffffffffffffffda RBX: 00007f8cdf0d5f80 RCX: 00007f8cdef479f9 [ 39.120773][ T3884] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 39.128856][ T3884] RBP: 00007f8cddbc7090 R08: 0000000020000440 R09: 0000000000000000 [ 39.136898][ T3884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.144861][ T3884] R13: 0000000000000000 R14: 00007f8cdf0d5f80 R15: 00007fffe522e048 [ 39.152912][ T3884] [ 39.206978][ T3894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.153'. [ 39.234935][ T3896] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 39.264604][ T3896] team0: Port device netdevsim1 added [ 39.294972][ T3896] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 39.501043][ T3911] loop3: detected capacity change from 0 to 512 [ 39.517055][ T3911] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 39.530497][ T3911] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 39.673827][ T3922] FAULT_INJECTION: forcing a failure. [ 39.673827][ T3922] name failslab, interval 1, probability 0, space 0, times 0 [ 39.686615][ T3922] CPU: 1 UID: 0 PID: 3922 Comm: syz.1.162 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 39.697238][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 39.707282][ T3922] Call Trace: [ 39.710556][ T3922] [ 39.713481][ T3922] dump_stack_lvl+0xf2/0x150 [ 39.718075][ T3922] dump_stack+0x15/0x20 [ 39.722231][ T3922] should_fail_ex+0x229/0x230 [ 39.727021][ T3922] ? parse_opts+0xba/0x2c0 [ 39.731474][ T3922] should_failslab+0x8f/0xb0 [ 39.736163][ T3922] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 39.742485][ T3922] kstrdup+0x3a/0x80 [ 39.746373][ T3922] parse_opts+0xba/0x2c0 [ 39.750613][ T3922] ? ___slab_alloc+0x2b7/0x980 [ 39.755377][ T3922] ? match_strdup+0x37/0x40 [ 39.759885][ T3922] p9_fd_create+0x46/0x260 [ 39.764351][ T3922] p9_client_create+0x59a/0xa80 [ 39.769235][ T3922] ? __pfx___tsan_unaligned_volatile_write8+0x10/0x10 [ 39.776001][ T3922] v9fs_session_init+0xf9/0xda0 [ 39.780961][ T3922] ? __rcu_read_unlock+0x4e/0x70 [ 39.785905][ T3922] ? v9fs_mount+0x53/0x560 [ 39.790354][ T3922] ? should_failslab+0x8f/0xb0 [ 39.795124][ T3922] v9fs_mount+0x69/0x560 [ 39.799367][ T3922] ? __pfx_v9fs_mount+0x10/0x10 [ 39.804222][ T3922] legacy_get_tree+0x77/0xd0 [ 39.808820][ T3922] vfs_get_tree+0x56/0x1d0 [ 39.813249][ T3922] do_new_mount+0x227/0x690 [ 39.817819][ T3922] path_mount+0x49b/0xb30 [ 39.822156][ T3922] __se_sys_mount+0x27c/0x2d0 [ 39.826847][ T3922] __x64_sys_mount+0x67/0x80 [ 39.831555][ T3922] x64_sys_call+0x203e/0x2d60 [ 39.836260][ T3922] do_syscall_64+0xc9/0x1c0 [ 39.840822][ T3922] ? clear_bhb_loop+0x55/0xb0 [ 39.845494][ T3922] ? clear_bhb_loop+0x55/0xb0 [ 39.850187][ T3922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.856118][ T3922] RIP: 0033:0x7f6324d379f9 [ 39.860520][ T3922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.880136][ T3922] RSP: 002b:00007f63239b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.888553][ T3922] RAX: ffffffffffffffda RBX: 00007f6324ec5f80 RCX: 00007f6324d379f9 [ 39.896556][ T3922] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 39.904518][ T3922] RBP: 00007f63239b7090 R08: 0000000020000440 R09: 0000000000000000 [ 39.912515][ T3922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.920476][ T3922] R13: 0000000000000000 R14: 00007f6324ec5f80 R15: 00007fffe3869bb8 [ 39.928441][ T3922] [ 39.950529][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 39.953130][ T3923] SELinux: security_context_str_to_sid () failed with errno=-22 [ 39.967592][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 40.044197][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 40.044211][ T29] audit: type=1400 audit(1723191746.503:353): avc: denied { create } for pid=3930 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 40.066713][ T3935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.167'. [ 40.088207][ T29] audit: type=1400 audit(1723191746.503:354): avc: denied { setopt } for pid=3930 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 40.107876][ T29] audit: type=1400 audit(1723191746.503:355): avc: denied { connect } for pid=3930 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 40.127557][ T29] audit: type=1400 audit(1723191746.503:356): avc: denied { bind } for pid=3930 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.146855][ T29] audit: type=1400 audit(1723191746.503:357): avc: denied { name_bind } for pid=3930 comm="syz.1.166" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 40.167775][ T29] audit: type=1400 audit(1723191746.503:358): avc: denied { node_bind } for pid=3930 comm="syz.1.166" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 40.191327][ T29] audit: type=1400 audit(1723191746.573:359): avc: denied { bind } for pid=3936 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.210561][ T29] audit: type=1326 audit(1723191746.583:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.2.169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8015579f9 code=0x0 [ 40.246650][ T3941] loop2: detected capacity change from 0 to 512 [ 40.253277][ T3941] EXT4-fs: Ignoring removed i_version option [ 40.260397][ T3941] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.268321][ T3941] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 40.276758][ T29] audit: type=1400 audit(1723191746.733:361): avc: denied { map } for pid=3943 comm="syz.4.171" path="socket:[5799]" dev="sockfs" ino=5799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.299781][ T29] audit: type=1400 audit(1723191746.733:362): avc: denied { read } for pid=3943 comm="syz.4.171" path="socket:[5799]" dev="sockfs" ino=5799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.330397][ T3941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056e118, mo2=0002] [ 40.341832][ T3941] System zones: 1-12 [ 40.369865][ T3965] FAULT_INJECTION: forcing a failure. [ 40.369865][ T3965] name failslab, interval 1, probability 0, space 0, times 0 [ 40.382603][ T3965] CPU: 1 UID: 0 PID: 3965 Comm: syz.0.176 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 40.393192][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 40.403286][ T3965] Call Trace: [ 40.406630][ T3965] [ 40.408565][ C0] hrtimer: interrupt took 26243 ns [ 40.409619][ T3965] dump_stack_lvl+0xf2/0x150 [ 40.419349][ T3965] dump_stack+0x15/0x20 [ 40.423591][ T3965] should_fail_ex+0x229/0x230 [ 40.428309][ T3965] ? p9_fd_create+0xc6/0x260 [ 40.432929][ T3965] should_failslab+0x8f/0xb0 [ 40.437560][ T3965] __kmalloc_cache_noprof+0x4b/0x2a0 [ 40.442849][ T3965] p9_fd_create+0xc6/0x260 [ 40.447267][ T3965] p9_client_create+0x59a/0xa80 [ 40.452174][ T3965] v9fs_session_init+0xf9/0xda0 [ 40.457163][ T3965] ? __rcu_read_unlock+0x4e/0x70 [ 40.462099][ T3965] ? __rcu_read_unlock+0x4e/0x70 [ 40.467068][ T3965] ? v9fs_mount+0x53/0x560 [ 40.471480][ T3965] ? should_failslab+0x8f/0xb0 [ 40.476265][ T3965] v9fs_mount+0x69/0x560 [ 40.480507][ T3965] ? __pfx_v9fs_mount+0x10/0x10 [ 40.485369][ T3965] legacy_get_tree+0x77/0xd0 [ 40.489983][ T3965] vfs_get_tree+0x56/0x1d0 [ 40.494484][ T3965] do_new_mount+0x227/0x690 [ 40.499017][ T3965] path_mount+0x49b/0xb30 [ 40.503350][ T3965] __se_sys_mount+0x27c/0x2d0 [ 40.508034][ T3965] __x64_sys_mount+0x67/0x80 [ 40.512642][ T3965] x64_sys_call+0x203e/0x2d60 [ 40.517497][ T3965] do_syscall_64+0xc9/0x1c0 [ 40.522079][ T3965] ? clear_bhb_loop+0x55/0xb0 [ 40.526789][ T3965] ? clear_bhb_loop+0x55/0xb0 [ 40.531498][ T3965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.537447][ T3965] RIP: 0033:0x7fcc064d79f9 [ 40.541886][ T3965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.561492][ T3965] RSP: 002b:00007fcc05157038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.569977][ T3965] RAX: ffffffffffffffda RBX: 00007fcc06665f80 RCX: 00007fcc064d79f9 [ 40.577943][ T3965] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 40.585908][ T3965] RBP: 00007fcc05157090 R08: 0000000020000440 R09: 0000000000000000 [ 40.593875][ T3965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.601999][ T3965] R13: 0000000000000000 R14: 00007fcc06665f80 R15: 00007ffeec3dee88 [ 40.609968][ T3965] [ 40.625443][ T3941] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.169: corrupted in-inode xattr: e_value size too large [ 40.645173][ T3941] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.169: couldn't read orphan inode 15 (err -117) [ 40.652186][ T3968] syz.4.177 (3968) used greatest stack depth: 9640 bytes left [ 40.658975][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-00c8-1300-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.702960][ T3960] loop1: detected capacity change from 0 to 512 [ 40.717483][ T3960] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.175: corrupted in-inode xattr: e_name out of bounds [ 40.732462][ T3971] __nla_validate_parse: 1 callbacks suppressed [ 40.732555][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 40.749236][ T3960] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.175: couldn't read orphan inode 15 (err -117) [ 40.755529][ T3971] team0: entered promiscuous mode [ 40.766229][ T3971] team_slave_0: entered promiscuous mode [ 40.771921][ T3971] team_slave_1: entered promiscuous mode [ 40.773772][ T3960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.796988][ T3971] team_slave_0: entered allmulticast mode [ 40.813531][ T3971] team0: Port device team_slave_0 removed [ 40.819508][ T3960] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.175: Directory hole found for htree leaf block 0 [ 40.837010][ T3970] team0: left promiscuous mode [ 40.837597][ T3983] 9pnet_fd: Insufficient options for proto=fd [ 40.841923][ T3970] team_slave_1: left promiscuous mode [ 40.856806][ T3983] loop4: detected capacity change from 0 to 512 [ 40.873411][ T3985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 40.885450][ T3983] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.182: corrupted in-inode xattr: invalid ea_ino [ 40.886581][ T3985] batman_adv: batadv1: Adding interface: netdevsim0 [ 40.899159][ T3983] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.182: couldn't read orphan inode 15 (err -117) [ 40.905463][ T3985] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.921684][ T3983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.942911][ T3985] batman_adv: batadv1: Interface activated: netdevsim0 [ 40.981668][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.982584][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.990827][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-00c8-1300-0000-000000000000. [ 41.010008][ T3988] loop0: detected capacity change from 0 to 128 [ 41.017272][ T3988] EXT4-fs: Ignoring removed nobh option [ 41.026713][ T3988] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.041882][ T3988] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.058613][ T3990] loop4: detected capacity change from 0 to 2048 [ 41.067326][ T3993] loop3: detected capacity change from 0 to 512 [ 41.075629][ T3993] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.077038][ T3261] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.092488][ T3998] FAULT_INJECTION: forcing a failure. [ 41.092488][ T3998] name failslab, interval 1, probability 0, space 0, times 0 [ 41.096622][ T3993] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 41.105197][ T3998] CPU: 0 UID: 0 PID: 3998 Comm: syz.2.190 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 41.113557][ T3990] EXT4-fs: Ignoring removed oldalloc option [ 41.123799][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 41.123815][ T3998] Call Trace: [ 41.123822][ T3998] [ 41.123829][ T3998] dump_stack_lvl+0xf2/0x150 [ 41.150705][ T3998] dump_stack+0x15/0x20 [ 41.154883][ T3998] should_fail_ex+0x229/0x230 [ 41.159577][ T3998] ? p9_client_prepare_req+0xf9/0x870 [ 41.164975][ T3998] should_failslab+0x8f/0xb0 [ 41.169675][ T3998] kmem_cache_alloc_noprof+0x4c/0x290 [ 41.170288][ T3993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0102] [ 41.175052][ T3998] p9_client_prepare_req+0xf9/0x870 [ 41.175080][ T3998] ? simple_strtol+0x63/0x70 [ 41.183361][ T3993] System zones: [ 41.188135][ T3998] ? match_int+0x11a/0x150 [ 41.188163][ T3998] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 41.188191][ T3998] ? __list_add_valid_or_report+0x36/0xc0 [ 41.192748][ T3993] 1-12 [ 41.196273][ T3998] p9_client_rpc+0xf0/0x710 [ 41.196294][ T3998] ? p9_pollwait+0xb1/0xd0 [ 41.204411][ T3990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.206057][ T3998] ? snd_seq_pool_poll_wait+0x8b/0xb0 [ 41.212296][ T3993] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.188: corrupted in-inode xattr: e_value size too large [ 41.214400][ T3998] ? p9_client_create+0x65f/0xa80 [ 41.214422][ T3998] ? p9_conn_create+0x2fa/0x330 [ 41.222375][ T3993] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.188: couldn't read orphan inode 15 (err -117) [ 41.223306][ T3998] p9_client_create+0x6d8/0xa80 [ 41.239016][ T3993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.240593][ T3998] v9fs_session_init+0xf9/0xda0 [ 41.297755][ T3998] ? __rcu_read_unlock+0x4e/0x70 [ 41.302702][ T3998] ? __rcu_read_unlock+0x4e/0x70 [ 41.307642][ T3998] ? v9fs_mount+0x53/0x560 [ 41.312072][ T3998] ? should_failslab+0x8f/0xb0 [ 41.316981][ T3998] v9fs_mount+0x69/0x560 [ 41.321226][ T3998] ? __pfx_v9fs_mount+0x10/0x10 [ 41.326168][ T3998] legacy_get_tree+0x77/0xd0 [ 41.327729][ T3263] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 41.330759][ T3998] vfs_get_tree+0x56/0x1d0 [ 41.330766][ T3263] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.335105][ T3263] EXT4-fs (loop4): Remounting filesystem read-only [ 41.338989][ T3998] do_new_mount+0x227/0x690 [ 41.343818][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.352252][ T3998] path_mount+0x49b/0xb30 [ 41.352280][ T3998] __se_sys_mount+0x27c/0x2d0 [ 41.381074][ T3998] __x64_sys_mount+0x67/0x80 [ 41.385864][ T3998] x64_sys_call+0x203e/0x2d60 [ 41.390573][ T3998] do_syscall_64+0xc9/0x1c0 [ 41.395099][ T3998] ? clear_bhb_loop+0x55/0xb0 [ 41.399794][ T3998] ? clear_bhb_loop+0x55/0xb0 [ 41.404508][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.410405][ T3998] RIP: 0033:0x7fc8015579f9 [ 41.414883][ T3998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.434614][ T3998] RSP: 002b:00007fc8001d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.443042][ T3998] RAX: ffffffffffffffda RBX: 00007fc8016e5f80 RCX: 00007fc8015579f9 [ 41.451080][ T3998] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 41.459042][ T3998] RBP: 00007fc8001d7090 R08: 0000000020000440 R09: 0000000000000000 [ 41.467000][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.474958][ T3998] R13: 0000000000000000 R14: 00007fc8016e5f80 R15: 00007ffda0ac5678 [ 41.483046][ T3998] [ 41.494037][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.513297][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.524806][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.538635][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.548865][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.584005][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.593005][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 41.613114][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.614372][ T4013] loop2: detected capacity change from 0 to 256 [ 41.623017][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 41.654470][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.663352][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.686277][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 41.700817][ T4019] loop2: detected capacity change from 0 to 164 [ 41.701113][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.718669][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 41.719659][ T4017] loop0: detected capacity change from 0 to 4096 [ 41.728868][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.744328][ T4019] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 41.751492][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 41.763287][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 41.771205][ T4017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.772371][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 41.793467][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 41.802318][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 41.811323][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 41.820823][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 41.831208][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=17 [ 41.840211][ T3263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=17 [ 41.947150][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.012320][ T4030] loop0: detected capacity change from 0 to 128 [ 42.012579][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 42.022839][ T4030] vfat: Unknown parameter '/dev/net/tun' [ 42.037654][ T4029] batman_adv: batadv1: Adding interface: netdevsim0 [ 42.044314][ T4029] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.070618][ T4029] batman_adv: batadv1: Interface activated: netdevsim0 [ 42.101606][ T4033] loop1: detected capacity change from 0 to 128 [ 42.108197][ T4033] EXT4-fs: Ignoring removed nobh option [ 42.116367][ T4009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.133329][ T4033] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.133366][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.167128][ T4033] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.184139][ T4040] loop3: detected capacity change from 0 to 256 [ 42.230091][ T4034] loop2: detected capacity change from 0 to 1024 [ 42.238920][ T4042] netlink: 144 bytes leftover after parsing attributes in process `syz.0.204'. [ 42.269543][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 42.291973][ T4034] EXT4-fs: Ignoring removed bh option [ 42.306181][ T3259] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.349791][ T4034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.393887][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 42.414063][ T4034] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz.2.196: deleted inode referenced: 12 [ 42.561795][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 42.836926][ T4079] veth0: entered promiscuous mode [ 42.852631][ T4079] bond0: entered promiscuous mode [ 42.857728][ T4079] bond_slave_0: entered promiscuous mode [ 42.863413][ T4079] bond_slave_1: entered promiscuous mode [ 42.890551][ T4084] cgroup: Unexpected value for 'cpuset_v2_mode' [ 42.946094][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.953256][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.960390][ T4090] loop1: detected capacity change from 0 to 128 [ 42.967448][ T4090] EXT4-fs: Ignoring removed nobh option [ 42.977934][ T4092] loop0: detected capacity change from 0 to 512 [ 42.979339][ T4044] bridge_slave_0: entered allmulticast mode [ 42.990928][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.995491][ T4044] bridge_slave_0: entered promiscuous mode [ 43.000502][ T4092] journal_path: Lookup failure for './file1' [ 43.011855][ T4092] EXT4-fs: error: could not find journal device path [ 43.012047][ T4090] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.021682][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.037911][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.045172][ T4044] bridge_slave_1: entered allmulticast mode [ 43.052109][ T4044] bridge_slave_1: entered promiscuous mode [ 43.071802][ T4092] loop0: detected capacity change from 0 to 1024 [ 43.074440][ T4090] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.088529][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.104280][ T3259] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.108072][ T4092] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.0.215: corrupted in-inode xattr: bad e_name length [ 43.128243][ T4092] EXT4-fs (loop0): Remounting filesystem read-only [ 43.134834][ T4092] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 43.148344][ T4095] vlan1: entered promiscuous mode [ 43.155297][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.167136][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.198571][ T4100] vlan1 (unregistering): left promiscuous mode [ 43.202108][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 43.215728][ T4095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.216'. [ 43.232079][ T4095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=4095 comm=syz.2.216 [ 43.245677][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 43.256119][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 43.269078][ T4044] team0: Port device team_slave_0 added [ 43.275644][ T4044] team0: Port device team_slave_1 added [ 43.285315][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 43.296032][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 43.306132][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 43.315256][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 43.343265][ T4101] loop1: detected capacity change from 0 to 8192 [ 43.352354][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.359374][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.385334][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.396271][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 43.397156][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.412075][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.414454][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 43.438040][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.460706][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 43.478213][ T4108] loop2: detected capacity change from 0 to 1024 [ 43.484908][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 43.486792][ T4044] hsr_slave_0: entered promiscuous mode [ 43.501036][ T4108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.507900][ T4044] hsr_slave_1: entered promiscuous mode [ 43.519583][ T4108] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 43.529572][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.539823][ T4044] Cannot create hsr debugfs directory [ 43.561668][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.688080][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.731417][ T3291] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.794796][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.827739][ T3291] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.847681][ T4118] loop3: detected capacity change from 0 to 128 [ 43.874783][ T4121] loop2: detected capacity change from 0 to 512 [ 43.881220][ T4121] EXT4-fs: Ignoring removed i_version option [ 43.898614][ T4118] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.915527][ T3291] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.925960][ T4121] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.938213][ T4118] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.957947][ T4121] EXT4-fs (loop2): 1 truncate cleaned up [ 43.967528][ T4121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.999613][ T3291] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.012377][ T4121] syz.2.227[4121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.012436][ T4121] syz.2.227[4121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.063114][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.159214][ T3291] bridge_slave_1: left allmulticast mode [ 44.164802][ T4137] loop2: detected capacity change from 0 to 128 [ 44.164998][ T3291] bridge_slave_1: left promiscuous mode [ 44.176939][ T3291] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.186711][ T3260] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.230078][ T4146] loop3: detected capacity change from 0 to 1024 [ 44.236561][ T3291] bridge_slave_0: left allmulticast mode [ 44.242204][ T3291] bridge_slave_0: left promiscuous mode [ 44.247885][ T3291] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.315058][ T4146] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.229: bad orphan inode 2097152 [ 44.327296][ T4146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.343399][ T4146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4146 comm=syz.3.229 [ 44.366266][ T3291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.376439][ T3291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.386662][ T3291] bond0 (unregistering): Released all slaves [ 44.397109][ T4148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 44.460625][ T3291] tipc: Left network mode [ 44.476413][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.513719][ T4169] loop2: detected capacity change from 0 to 1024 [ 44.520729][ T4123] chnl_net:caif_netlink_parms(): no params data found [ 44.552745][ T4169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.577702][ T3291] hsr_slave_0: left promiscuous mode [ 44.589440][ T3291] hsr_slave_1: left promiscuous mode [ 44.594377][ T4190] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.604509][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.611932][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.634453][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.641896][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.661249][ T3291] veth1_macvtap: left promiscuous mode [ 44.666797][ T3291] veth0_macvtap: left promiscuous mode [ 44.672693][ T3291] veth1_vlan: left promiscuous mode [ 44.678012][ T3291] veth0_vlan: left promiscuous mode [ 44.809071][ T3291] team0 (unregistering): Port device team_slave_1 removed [ 44.818845][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.828636][ T3291] team0 (unregistering): Port device team_slave_0 removed [ 44.835948][ T4192] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.918944][ T4214] loop1: detected capacity change from 0 to 2048 [ 44.921103][ T4205] IPv6: Can't replace route, no match found [ 44.970562][ T4123] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.978445][ T4123] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.988793][ T4123] bridge_slave_0: entered allmulticast mode [ 44.995783][ T4123] bridge_slave_0: entered promiscuous mode [ 45.001788][ T4214] Alternate GPT is invalid, using primary GPT. [ 45.004143][ T4123] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.008872][ T4214] loop1: p2 p3 p7 [ 45.015195][ T4123] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.036767][ T4123] bridge_slave_1: entered allmulticast mode [ 45.043354][ T4123] bridge_slave_1: entered promiscuous mode [ 45.135219][ T4242] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.139160][ T4123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.156781][ T4044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.178538][ T4242] loop3: detected capacity change from 0 to 512 [ 45.183121][ T4123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.206719][ T4242] EXT4-fs: Ignoring removed bh option [ 45.213361][ T4240] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 45.225580][ T4242] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.235204][ T4123] team0: Port device team_slave_0 added [ 45.241822][ T4123] team0: Port device team_slave_1 added [ 45.256912][ T4242] EXT4-fs (loop3): 1 truncate cleaned up [ 45.263060][ T4242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.278016][ T4044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.286960][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 45.287047][ T29] audit: type=1400 audit(1723191751.743:407): avc: denied { mounton } for pid=4241 comm="syz.3.248" path="/57/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.326069][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.352685][ T4044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.373758][ T4123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.381484][ T4123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.390017][ T4260] loop3: detected capacity change from 0 to 1024 [ 45.408082][ T4123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.422455][ T4260] EXT4-fs: Ignoring removed orlov option [ 45.435852][ T4265] loop1: detected capacity change from 0 to 2048 [ 45.447555][ T4044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.467809][ T4123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.474852][ T4123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.501381][ T4123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.519811][ T4268] loop2: detected capacity change from 0 to 256 [ 45.527059][ T4268] vfat: Unknown parameter 'utfc0Oshortname' [ 45.527591][ T4260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.583342][ T29] audit: type=1400 audit(1723191752.033:408): avc: denied { create } for pid=4259 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.607498][ T4123] hsr_slave_0: entered promiscuous mode [ 45.621462][ T4280] loop1: detected capacity change from 0 to 512 [ 45.630706][ T4123] hsr_slave_1: entered promiscuous mode [ 45.638149][ T4279] loop2: detected capacity change from 0 to 8192 [ 45.645700][ T29] audit: type=1400 audit(1723191752.083:409): avc: denied { write } for pid=4259 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.652510][ T4123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.672892][ T4280] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.680332][ T4123] Cannot create hsr debugfs directory [ 45.701864][ T4279] loop2: p1 p2 p4 < > [ 45.706234][ T4279] loop2: p1 size 8275718 extends beyond EOD, truncated [ 45.706331][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.725896][ T4280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.732041][ T4279] loop2: p2 start 87291392 is beyond EOD, truncated [ 45.740045][ T4280] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.777206][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.789450][ T3291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.800943][ T4260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.827989][ T29] audit: type=1400 audit(1723191752.283:410): avc: denied { getopt } for pid=4286 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.838068][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.854605][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.854617][ T29] audit: type=1400 audit(1723191752.313:411): avc: denied { bind } for pid=4286 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.866033][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.888069][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.920009][ T3291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.931302][ T4044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.941765][ T4044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.987140][ T3291] team0: Port device netdevsim1 removed [ 45.995934][ T3291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.019225][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.041799][ T3291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.050527][ T4301] loop2: detected capacity change from 0 to 512 [ 46.110433][ T4313] loop2: detected capacity change from 0 to 128 [ 46.143208][ T4313] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.162140][ T4313] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.200991][ T29] audit: type=1400 audit(1723191752.653:412): avc: denied { read append } for pid=4305 comm="syz.3.259" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.225236][ T29] audit: type=1400 audit(1723191752.653:413): avc: denied { open } for pid=4305 comm="syz.3.259" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.249390][ T3291] bridge_slave_1: left allmulticast mode [ 46.255143][ T3291] bridge_slave_1: left promiscuous mode [ 46.260942][ T3291] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.274655][ T3291] bridge_slave_0: left allmulticast mode [ 46.275081][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.280388][ T3291] bridge_slave_0: left promiscuous mode [ 46.295821][ T3291] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.307688][ T3266] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.355879][ T29] audit: type=1400 audit(1723191752.803:414): avc: denied { write } for pid=4340 comm="syz.2.262" path="socket:[6690]" dev="sockfs" ino=6690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.380562][ T29] audit: type=1400 audit(1723191752.803:415): avc: denied { nlmsg_read } for pid=4340 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.410619][ T4342] loop2: detected capacity change from 0 to 8192 [ 46.436664][ T29] audit: type=1400 audit(1723191752.893:416): avc: denied { setattr } for pid=4347 comm="syz.1.265" name="PPPOL2TP" dev="sockfs" ino=7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.470649][ T4348] loop1: detected capacity change from 0 to 128 [ 46.520365][ T4353] loop1: detected capacity change from 0 to 1024 [ 46.532486][ T4353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.547296][ T3291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.560834][ T3291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.571419][ T3291] bond0 (unregistering): Released all slaves [ 46.602125][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.616080][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.268'. [ 46.674568][ T4044] veth0_vlan: entered promiscuous mode [ 46.744569][ T3291] hsr_slave_0: left promiscuous mode [ 46.754439][ T3291] hsr_slave_1: left promiscuous mode [ 46.761297][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.768805][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.769577][ T4384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 46.784613][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.792056][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.801390][ T3291] veth1_macvtap: left promiscuous mode [ 46.806915][ T3291] veth0_macvtap: left promiscuous mode [ 46.812388][ T3291] veth1_vlan: left promiscuous mode [ 46.817681][ T3291] veth0_vlan: left promiscuous mode [ 46.902947][ T4388] FAULT_INJECTION: forcing a failure. [ 46.902947][ T4388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.916679][ T4388] CPU: 1 UID: 0 PID: 4388 Comm: syz.1.269 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 46.927294][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 46.937408][ T4388] Call Trace: [ 46.940777][ T4388] [ 46.943762][ T4388] dump_stack_lvl+0xf2/0x150 [ 46.948367][ T4388] dump_stack+0x15/0x20 [ 46.952538][ T4388] should_fail_ex+0x229/0x230 [ 46.957235][ T4388] should_fail+0xb/0x10 [ 46.961394][ T4388] should_fail_usercopy+0x1a/0x20 [ 46.966488][ T4388] _copy_from_user+0x1e/0xd0 [ 46.971082][ T4388] copy_msghdr_from_user+0x54/0x2a0 [ 46.976294][ T4388] __sys_sendmsg+0x17d/0x280 [ 46.980990][ T4388] __x64_sys_sendmsg+0x46/0x50 [ 46.985768][ T4388] x64_sys_call+0x2689/0x2d60 [ 46.990447][ T4388] do_syscall_64+0xc9/0x1c0 [ 46.994957][ T4388] ? clear_bhb_loop+0x55/0xb0 [ 46.999701][ T4388] ? clear_bhb_loop+0x55/0xb0 [ 47.004453][ T4388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.010347][ T4388] RIP: 0033:0x7f6324d379f9 [ 47.014753][ T4388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.034409][ T4388] RSP: 002b:00007f6323975038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.042816][ T4388] RAX: ffffffffffffffda RBX: 00007f6324ec6130 RCX: 00007f6324d379f9 [ 47.050851][ T4388] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 47.058820][ T4388] RBP: 00007f6323975090 R08: 0000000000000000 R09: 0000000000000000 [ 47.066785][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.074785][ T4388] R13: 0000000000000000 R14: 00007f6324ec6130 R15: 00007fffe3869bb8 [ 47.082748][ T4388] [ 47.090800][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 47.104357][ T4389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.271'. [ 47.113905][ T4389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.123686][ T3291] team0 (unregistering): Port device team_slave_1 removed [ 47.123749][ T4389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.139499][ T3291] team0 (unregistering): Port device team_slave_0 removed [ 47.190180][ T4044] veth1_vlan: entered promiscuous mode [ 47.208966][ T4044] veth0_macvtap: entered promiscuous mode [ 47.221622][ T4044] veth1_macvtap: entered promiscuous mode [ 47.232663][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.243229][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.253246][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.263782][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.273732][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.284205][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.294994][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.303309][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.313769][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.323722][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.334330][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.344145][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.354655][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.365452][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.377048][ T4044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.385947][ T4044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.394698][ T4044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.403392][ T4044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.433855][ T4123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.449391][ T4123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.465827][ T4123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.491398][ T4123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.541701][ T4419] FAULT_INJECTION: forcing a failure. [ 47.541701][ T4419] name failslab, interval 1, probability 0, space 0, times 0 [ 47.554447][ T4419] CPU: 1 UID: 0 PID: 4419 Comm: syz.4.203 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 47.565047][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 47.575112][ T4419] Call Trace: [ 47.578386][ T4419] [ 47.581309][ T4419] dump_stack_lvl+0xf2/0x150 [ 47.586019][ T4419] dump_stack+0x15/0x20 [ 47.590215][ T4419] should_fail_ex+0x229/0x230 [ 47.594895][ T4419] ? p9_client_prepare_req+0x29d/0x870 [ 47.600360][ T4419] should_failslab+0x8f/0xb0 [ 47.604995][ T4419] __kmalloc_noprof+0xa5/0x370 [ 47.609752][ T4419] ? p9_msg_buf_size+0x123b/0x12b0 [ 47.614857][ T4419] p9_client_prepare_req+0x29d/0x870 [ 47.620166][ T4419] ? bpf_trace_run2+0x123/0x1d0 [ 47.625027][ T4419] ? match_int+0x11a/0x150 [ 47.629439][ T4419] ? __list_add_valid_or_report+0x36/0xc0 [ 47.635153][ T4419] p9_client_rpc+0xf0/0x710 [ 47.639649][ T4419] ? p9_pollwait+0xb1/0xd0 [ 47.644109][ T4419] ? snd_seq_pool_poll_wait+0x8b/0xb0 [ 47.649476][ T4419] ? p9_client_create+0x65f/0xa80 [ 47.654542][ T4419] ? p9_conn_create+0x2fa/0x330 [ 47.659448][ T4419] p9_client_create+0x6d8/0xa80 [ 47.664321][ T4419] v9fs_session_init+0xf9/0xda0 [ 47.669205][ T4419] ? __rcu_read_unlock+0x4e/0x70 [ 47.674280][ T4419] ? __rcu_read_unlock+0x4e/0x70 [ 47.679256][ T4419] ? v9fs_mount+0x53/0x560 [ 47.683664][ T4419] ? should_failslab+0x8f/0xb0 [ 47.688532][ T4419] v9fs_mount+0x69/0x560 [ 47.692766][ T4419] ? __pfx_v9fs_mount+0x10/0x10 [ 47.697692][ T4419] legacy_get_tree+0x77/0xd0 [ 47.702280][ T4419] vfs_get_tree+0x56/0x1d0 [ 47.706690][ T4419] do_new_mount+0x227/0x690 [ 47.711188][ T4419] path_mount+0x49b/0xb30 [ 47.715550][ T4419] __se_sys_mount+0x27c/0x2d0 [ 47.720227][ T4419] __x64_sys_mount+0x67/0x80 [ 47.724922][ T4419] x64_sys_call+0x203e/0x2d60 [ 47.729591][ T4419] do_syscall_64+0xc9/0x1c0 [ 47.734121][ T4419] ? clear_bhb_loop+0x55/0xb0 [ 47.738793][ T4419] ? clear_bhb_loop+0x55/0xb0 [ 47.743468][ T4419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.749438][ T4419] RIP: 0033:0x7f332a6279f9 [ 47.753841][ T4419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.773554][ T4419] RSP: 002b:00007f33292a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.781955][ T4419] RAX: ffffffffffffffda RBX: 00007f332a7b5f80 RCX: 00007f332a6279f9 [ 47.789991][ T4419] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 47.797950][ T4419] RBP: 00007f33292a7090 R08: 0000000020000440 R09: 0000000000000000 [ 47.805932][ T4419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.813896][ T4419] R13: 0000000000000000 R14: 00007f332a7b5f80 R15: 00007fffe68f63a8 [ 47.821862][ T4419] [ 47.875962][ T4123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.888507][ T4428] loop3: detected capacity change from 0 to 512 [ 47.907159][ T4123] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.924256][ T4428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.942919][ T4433] FAULT_INJECTION: forcing a failure. [ 47.942919][ T4433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.956610][ T4433] CPU: 1 UID: 0 PID: 4433 Comm: syz.4.275 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 47.965077][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.967250][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 47.974302][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.984283][ T4433] Call Trace: [ 47.984290][ T4433] [ 47.984297][ T4433] dump_stack_lvl+0xf2/0x150 [ 47.984326][ T4433] dump_stack+0x15/0x20 [ 47.992991][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.994749][ T4433] should_fail_ex+0x229/0x230 [ 47.997781][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.002313][ T4433] should_fail+0xb/0x10 [ 48.029622][ T4433] should_fail_usercopy+0x1a/0x20 [ 48.034646][ T4433] _copy_from_user+0x1e/0xd0 [ 48.039298][ T4433] copy_msghdr_from_user+0x54/0x2a0 [ 48.044508][ T4433] __sys_sendmsg+0x17d/0x280 [ 48.049100][ T4433] __x64_sys_sendmsg+0x46/0x50 [ 48.053856][ T4433] x64_sys_call+0x2689/0x2d60 [ 48.058547][ T4433] do_syscall_64+0xc9/0x1c0 [ 48.063101][ T4433] ? clear_bhb_loop+0x55/0xb0 [ 48.067772][ T4433] ? clear_bhb_loop+0x55/0xb0 [ 48.072443][ T4433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.078329][ T4433] RIP: 0033:0x7f332a6279f9 [ 48.082813][ T4433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.102426][ T4433] RSP: 002b:00007f33292a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.110829][ T4433] RAX: ffffffffffffffda RBX: 00007f332a7b5f80 RCX: 00007f332a6279f9 [ 48.118792][ T4433] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 48.126783][ T4433] RBP: 00007f33292a7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.134778][ T4433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.142753][ T4433] R13: 0000000000000000 R14: 00007f332a7b5f80 R15: 00007fffe68f63a8 [ 48.150719][ T4433] [ 48.171468][ T4123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.181989][ T4123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.194739][ T4428] EXT4-fs (loop3): 1 truncate cleaned up [ 48.203787][ T4428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.252344][ T4123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.301441][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.314824][ T4454] tipc: Can't bind to reserved service type 0 [ 48.399730][ T4123] veth0_vlan: entered promiscuous mode [ 48.416532][ T4123] veth1_vlan: entered promiscuous mode [ 48.446325][ T4123] veth0_macvtap: entered promiscuous mode [ 48.453789][ T4123] veth1_macvtap: entered promiscuous mode [ 48.473414][ T4463] loop3: detected capacity change from 0 to 512 [ 48.477957][ T4123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.490241][ T4123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.500121][ T4123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.510742][ T4123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.520750][ T4123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.531301][ T4123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.532012][ T4464] FAULT_INJECTION: forcing a failure. [ 48.532012][ T4464] name failslab, interval 1, probability 0, space 0, times 0 [ 48.541178][ T4123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.554298][ T4464] CPU: 1 UID: 0 PID: 4464 Comm: syz.1.281 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 48.564123][ T4123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.574651][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 48.574664][ T4464] Call Trace: [ 48.574672][ T4464] [ 48.574734][ T4464] dump_stack_lvl+0xf2/0x150 [ 48.574764][ T4464] dump_stack+0x15/0x20 [ 48.574787][ T4464] should_fail_ex+0x229/0x230 [ 48.592946][ T4123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.594657][ T4464] ? __alloc_skb+0x10b/0x310 [ 48.594682][ T4464] should_failslab+0x8f/0xb0 [ 48.594707][ T4464] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 48.636659][ T4464] __alloc_skb+0x10b/0x310 [ 48.641089][ T4464] netlink_alloc_large_skb+0xad/0xe0 [ 48.646506][ T4464] netlink_sendmsg+0x3b4/0x6e0 [ 48.651312][ T4464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.656598][ T4464] __sock_sendmsg+0x140/0x180 [ 48.661275][ T4464] ____sys_sendmsg+0x312/0x410 [ 48.666067][ T4464] __sys_sendmsg+0x1e9/0x280 [ 48.670657][ T4464] __x64_sys_sendmsg+0x46/0x50 [ 48.675414][ T4464] x64_sys_call+0x2689/0x2d60 [ 48.680084][ T4464] do_syscall_64+0xc9/0x1c0 [ 48.684615][ T4464] ? clear_bhb_loop+0x55/0xb0 [ 48.689332][ T4464] ? clear_bhb_loop+0x55/0xb0 [ 48.694005][ T4464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.699964][ T4464] RIP: 0033:0x7f6324d379f9 [ 48.704375][ T4464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.724054][ T4464] RSP: 002b:00007f6323975038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.732462][ T4464] RAX: ffffffffffffffda RBX: 00007f6324ec6130 RCX: 00007f6324d379f9 [ 48.740433][ T4464] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 48.748447][ T4464] RBP: 00007f6323975090 R08: 0000000000000000 R09: 0000000000000000 [ 48.756472][ T4464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.764527][ T4464] R13: 0000000000000000 R14: 00007f6324ec6130 R15: 00007fffe3869bb8 [ 48.772494][ T4464] [ 48.793588][ T4463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.798484][ T4468] loop2: detected capacity change from 0 to 512 [ 48.808101][ T4123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.823437][ T4463] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.823484][ T4123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.823494][ T4123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.823506][ T4123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.823516][ T4123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.823527][ T4123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.823546][ T4123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.894918][ T4123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.905737][ T4123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.915915][ T4123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.924672][ T4123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.933397][ T4123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.942210][ T4123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.943252][ T4468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.964524][ T4468] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.014159][ T4474] loop0: detected capacity change from 0 to 128 [ 49.021863][ T4474] EXT4-fs: Ignoring removed nobh option [ 49.030194][ T4474] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.088523][ T4474] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.103566][ T4477] loop4: detected capacity change from 0 to 512 [ 49.126981][ T4478] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.282: Directory hole found for htree leaf block 0 [ 49.145646][ T4477] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 49.221433][ T4477] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.284: iget: bad i_size value: -67835469387268086 [ 49.241255][ T4123] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.256423][ T4481] FAULT_INJECTION: forcing a failure. [ 49.256423][ T4481] name failslab, interval 1, probability 0, space 0, times 0 [ 49.269772][ T4481] CPU: 1 UID: 0 PID: 4481 Comm: syz.1.286 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 49.280363][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.290413][ T4481] Call Trace: [ 49.293689][ T4481] [ 49.296611][ T4481] dump_stack_lvl+0xf2/0x150 [ 49.301208][ T4481] dump_stack+0x15/0x20 [ 49.305364][ T4481] should_fail_ex+0x229/0x230 [ 49.310049][ T4481] ? p9_client_prepare_req+0x3ac/0x870 [ 49.315501][ T4481] should_failslab+0x8f/0xb0 [ 49.320102][ T4481] __kmalloc_noprof+0xa5/0x370 [ 49.324864][ T4481] p9_client_prepare_req+0x3ac/0x870 [ 49.330185][ T4481] ? match_int+0x11a/0x150 [ 49.334611][ T4481] ? __list_add_valid_or_report+0x36/0xc0 [ 49.340406][ T4481] p9_client_rpc+0xf0/0x710 [ 49.344934][ T4481] ? p9_pollwait+0xb1/0xd0 [ 49.349430][ T4481] ? snd_seq_pool_poll_wait+0x8b/0xb0 [ 49.354808][ T4481] ? p9_client_create+0x65f/0xa80 [ 49.359869][ T4481] ? p9_conn_create+0x2fa/0x330 [ 49.364722][ T4481] p9_client_create+0x6d8/0xa80 [ 49.369637][ T4481] v9fs_session_init+0xf9/0xda0 [ 49.374533][ T4481] ? __rcu_read_unlock+0x4e/0x70 [ 49.377811][ T4477] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.284: couldn't read orphan inode 15 (err -117) [ 49.379534][ T4481] ? v9fs_mount+0x53/0x560 [ 49.379565][ T4481] ? should_failslab+0x8f/0xb0 [ 49.379589][ T4481] v9fs_mount+0x69/0x560 [ 49.379607][ T4481] ? __pfx_v9fs_mount+0x10/0x10 [ 49.393317][ T4477] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.395687][ T4481] legacy_get_tree+0x77/0xd0 [ 49.395719][ T4481] vfs_get_tree+0x56/0x1d0 [ 49.409470][ T4477] ext2 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.409990][ T4477] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 49.421442][ T4481] do_new_mount+0x227/0x690 [ 49.454672][ T4481] path_mount+0x49b/0xb30 [ 49.459009][ T4481] __se_sys_mount+0x27c/0x2d0 [ 49.463783][ T4481] __x64_sys_mount+0x67/0x80 [ 49.468371][ T4481] x64_sys_call+0x203e/0x2d60 [ 49.473044][ T4481] do_syscall_64+0xc9/0x1c0 [ 49.477552][ T4481] ? clear_bhb_loop+0x55/0xb0 [ 49.482305][ T4481] ? clear_bhb_loop+0x55/0xb0 [ 49.487057][ T4481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.492945][ T4481] RIP: 0033:0x7f6324d379f9 [ 49.497387][ T4481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.517081][ T4481] RSP: 002b:00007f63239b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.525483][ T4481] RAX: ffffffffffffffda RBX: 00007f6324ec5f80 RCX: 00007f6324d379f9 [ 49.533441][ T4481] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000 [ 49.541414][ T4481] RBP: 00007f63239b7090 R08: 0000000020000440 R09: 0000000000000000 [ 49.549402][ T4481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.557467][ T4481] R13: 0000000000000000 R14: 00007f6324ec5f80 R15: 00007fffe3869bb8 [ 49.565586][ T4481] [ 49.597505][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 49.614655][ T4486] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 49.621755][ T4486] batman_adv: batadv1: Removing interface: netdevsim0 [ 49.657271][ T4486] batman_adv: batadv2: Adding interface: netdevsim0 [ 49.664051][ T4486] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.696628][ T4486] batman_adv: batadv2: Interface activated: netdevsim0 [ 49.705968][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 49.715320][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 49.727855][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.738200][ T4490] loop4: detected capacity change from 0 to 1024 [ 49.760456][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 49.775388][ T4490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.794606][ T4492] loop0: detected capacity change from 0 to 512 [ 49.806554][ T4492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.833723][ T4492] EXT4-fs (loop0): 1 truncate cleaned up [ 49.840906][ T4492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64016 sclass=netlink_route_socket pid=4492 comm=syz.0.290 [ 49.846342][ T4495] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 49.860673][ T4495] batman_adv: batadv2: Removing interface: netdevsim0 [ 49.891872][ T4495] batman_adv: batadv3: Adding interface: netdevsim0 [ 49.899169][ T4495] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.928651][ T4495] batman_adv: batadv3: Interface activated: netdevsim0 [ 49.938721][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 49.967715][ T4502] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 49.985369][ T4509] loop1: detected capacity change from 0 to 128 [ 50.023365][ T4510] loop0: detected capacity change from 0 to 4096 [ 50.110124][ T4509] EXT4-fs: Ignoring removed nobh option [ 50.137498][ T4509] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.203440][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1) [ 50.491401][ T4528] loop3: detected capacity change from 0 to 4096 [ 50.619156][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 50.681196][ T4538] 9pnet_fd: Insufficient options for proto=fd [ 50.775969][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 50.775982][ T29] audit: type=1400 audit(1723191757.233:423): avc: denied { listen } for pid=4541 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.779397][ T4542] netlink: 256 bytes leftover after parsing attributes in process `syz.2.305'. [ 50.794713][ T29] audit: type=1400 audit(1723191757.233:424): avc: denied { create } for pid=4541 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.833205][ T4546] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 50.844352][ T29] audit: type=1400 audit(1723191757.303:425): avc: denied { accept } for pid=4541 comm="iou-wrk-4542" lport=40393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.898538][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 50.912353][ T4549] batman_adv: batadv1: Adding interface: netdevsim0 [ 50.918996][ T4549] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.945109][ T4549] batman_adv: batadv1: Interface activated: netdevsim0 [ 50.969546][ T4551] loop2: detected capacity change from 0 to 764 [ 50.976567][ T4551] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.022683][ T3338] kernel write not supported for file /snd/seq (pid: 3338 comm: kworker/0:4) [ 51.025253][ T4557] loop4: detected capacity change from 0 to 128 [ 51.040771][ T4557] EXT4-fs: Ignoring removed nobh option [ 51.063960][ T4557] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.178608][ T4567] loop4: detected capacity change from 0 to 512 [ 51.356095][ T4567] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.381226][ T29] audit: type=1400 audit(1723191757.833:426): avc: denied { read } for pid=4577 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.414420][ T4567] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 51.433847][ T4585] FAULT_INJECTION: forcing a failure. [ 51.433847][ T4585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.447623][ T4585] CPU: 1 UID: 0 PID: 4585 Comm: syz.3.318 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 51.458251][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 51.468355][ T4585] Call Trace: [ 51.471631][ T4585] [ 51.474541][ T4585] dump_stack_lvl+0xf2/0x150 [ 51.479122][ T4585] dump_stack+0x15/0x20 [ 51.483268][ T4585] should_fail_ex+0x229/0x230 [ 51.487982][ T4585] should_fail+0xb/0x10 [ 51.492124][ T4585] should_fail_usercopy+0x1a/0x20 [ 51.497197][ T4585] _copy_from_iter+0xd3/0xb00 [ 51.501896][ T4585] ? kmalloc_reserve+0x16e/0x190 [ 51.506895][ T4585] ? __build_skb_around+0x196/0x1f0 [ 51.512074][ T4585] ? __alloc_skb+0x21f/0x310 [ 51.516648][ T4585] ? __virt_addr_valid+0x1ed/0x250 [ 51.521877][ T4585] ? __check_object_size+0x35b/0x510 [ 51.527310][ T4585] netlink_sendmsg+0x460/0x6e0 [ 51.532063][ T4585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.537337][ T4585] __sock_sendmsg+0x140/0x180 [ 51.542188][ T4585] ____sys_sendmsg+0x312/0x410 [ 51.546934][ T4585] __sys_sendmsg+0x1e9/0x280 [ 51.551508][ T4585] __x64_sys_sendmsg+0x46/0x50 [ 51.556289][ T4585] x64_sys_call+0x2689/0x2d60 [ 51.560949][ T4585] do_syscall_64+0xc9/0x1c0 [ 51.565513][ T4585] ? clear_bhb_loop+0x55/0xb0 [ 51.570172][ T4585] ? clear_bhb_loop+0x55/0xb0 [ 51.574832][ T4585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.580809][ T4585] RIP: 0033:0x7f8cdef479f9 [ 51.585242][ T4585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.604848][ T4585] RSP: 002b:00007f8cddbc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.613277][ T4585] RAX: ffffffffffffffda RBX: 00007f8cdf0d5f80 RCX: 00007f8cdef479f9 [ 51.621230][ T4585] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 51.629254][ T4585] RBP: 00007f8cddbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.637296][ T4585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.645266][ T4585] R13: 0000000000000000 R14: 00007f8cdf0d5f80 R15: 00007fffe522e048 [ 51.653233][ T4585] [ 51.686164][ T4588] __nla_validate_parse: 2 callbacks suppressed [ 51.686178][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 51.704465][ T4591] loop0: detected capacity change from 0 to 512 [ 51.709219][ T4588] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 51.711059][ T4591] EXT4-fs: Ignoring removed i_version option [ 51.717917][ T4588] batman_adv: batadv1: Removing interface: netdevsim0 [ 51.731333][ T4591] EXT4-fs: Ignoring removed nobh option [ 51.740144][ T4588] batman_adv: batadv2: Adding interface: netdevsim0 [ 51.746886][ T4588] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.773855][ T4591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.777528][ T4592] loop1: detected capacity change from 0 to 1024 [ 51.784564][ T4588] batman_adv: batadv2: Interface activated: netdevsim0 [ 51.808572][ T4591] EXT4-fs (loop0): 1 truncate cleaned up [ 51.819353][ T29] audit: type=1400 audit(1723191758.273:427): avc: denied { watch watch_reads } for pid=4590 comm="syz.0.322" path="/13/bus" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.861901][ T4602] loop3: detected capacity change from 0 to 128 [ 51.868462][ T4602] EXT4-fs: Ignoring removed nobh option [ 51.876557][ T4594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.321'. [ 51.901447][ T4602] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.926897][ T29] audit: type=1400 audit(1723191758.383:428): avc: denied { ioctl } for pid=4606 comm="syz.0.325" path="socket:[8322]" dev="sockfs" ino=8322 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 52.071744][ T4617] loop0: detected capacity change from 0 to 512 [ 52.085236][ T4618] loop4: detected capacity change from 0 to 128 [ 52.101556][ T4617] EXT4-fs: Ignoring removed oldalloc option [ 52.130299][ T4621] loop2: detected capacity change from 0 to 512 [ 52.142768][ T4617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b842e02d, mo2=0002] [ 52.152077][ T4618] EXT4-fs: Ignoring removed i_version option [ 52.161198][ T4621] EXT4-fs: Ignoring removed i_version option [ 52.167239][ T4621] EXT4-fs: Ignoring removed nobh option [ 52.177395][ T4617] System zones: 1-12 [ 52.185645][ T4618] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 52.196956][ T4617] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.327: invalid indirect mapped block 1 (level 1) [ 52.219631][ T4621] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.229892][ T4617] EXT4-fs (loop0): Remounting filesystem read-only [ 52.239052][ T4621] EXT4-fs (loop2): 1 truncate cleaned up [ 52.244952][ T4617] EXT4-fs (loop0): 1 truncate cleaned up [ 52.254138][ T4617] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 52.304903][ T29] audit: type=1400 audit(1723191758.763:429): avc: denied { setopt } for pid=4620 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 52.365322][ T4627] FAULT_INJECTION: forcing a failure. [ 52.365322][ T4627] name failslab, interval 1, probability 0, space 0, times 0 [ 52.377987][ T4627] CPU: 1 UID: 0 PID: 4627 Comm: syz.3.330 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 52.388658][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 52.398707][ T4627] Call Trace: [ 52.401980][ T4627] [ 52.404903][ T4627] dump_stack_lvl+0xf2/0x150 [ 52.409533][ T4627] dump_stack+0x15/0x20 [ 52.413686][ T4627] should_fail_ex+0x229/0x230 [ 52.418428][ T4627] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 52.424733][ T4627] should_failslab+0x8f/0xb0 [ 52.429412][ T4627] __kmalloc_noprof+0xa5/0x370 [ 52.434250][ T4627] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 52.440358][ T4627] ? ns_capable+0x7d/0xb0 [ 52.444692][ T4627] genl_rcv_msg+0x470/0x6c0 [ 52.449367][ T4627] ? __pfx_smc_pnet_add+0x10/0x10 [ 52.454385][ T4627] ? __rcu_read_unlock+0x4e/0x70 [ 52.459314][ T4627] ? avc_has_perm_noaudit+0x1cc/0x210 [ 52.464677][ T4627] netlink_rcv_skb+0x12c/0x230 [ 52.469453][ T4627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.474526][ T4627] genl_rcv+0x28/0x40 [ 52.478575][ T4627] netlink_unicast+0x593/0x670 [ 52.483355][ T4627] netlink_sendmsg+0x5cc/0x6e0 [ 52.488140][ T4627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.493429][ T4627] __sock_sendmsg+0x140/0x180 [ 52.498227][ T4627] ____sys_sendmsg+0x312/0x410 [ 52.502986][ T4627] __sys_sendmsg+0x1e9/0x280 [ 52.507579][ T4627] __x64_sys_sendmsg+0x46/0x50 [ 52.512381][ T4627] x64_sys_call+0x2689/0x2d60 [ 52.517085][ T4627] do_syscall_64+0xc9/0x1c0 [ 52.521587][ T4627] ? clear_bhb_loop+0x55/0xb0 [ 52.526293][ T4627] ? clear_bhb_loop+0x55/0xb0 [ 52.530964][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.536906][ T4627] RIP: 0033:0x7f8cdef479f9 [ 52.541309][ T4627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.560971][ T4627] RSP: 002b:00007f8cddbc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.569377][ T4627] RAX: ffffffffffffffda RBX: 00007f8cdf0d5f80 RCX: 00007f8cdef479f9 [ 52.577368][ T4627] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 52.585324][ T4627] RBP: 00007f8cddbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.593322][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.601346][ T4627] R13: 0000000000000000 R14: 00007f8cdf0d5f80 R15: 00007fffe522e048 [ 52.609313][ T4627] [ 52.655035][ T4636] loop3: detected capacity change from 0 to 128 [ 52.661649][ T4636] vfat: Unknown parameter '(' [ 52.667258][ T4637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'. [ 52.667434][ T4634] loop1: detected capacity change from 0 to 1024 [ 52.693817][ T4634] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 52.793700][ T29] audit: type=1400 audit(1723191759.243:430): avc: denied { write } for pid=4640 comm="syz.2.336" name="qrtr-tun" dev="devtmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.823979][ T29] audit: type=1400 audit(1723191759.273:431): avc: denied { create } for pid=4658 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.846338][ T29] audit: type=1400 audit(1723191759.303:432): avc: denied { write } for pid=4658 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.872418][ T4663] loop0: detected capacity change from 0 to 4096 [ 52.924190][ T4679] loop0: detected capacity change from 0 to 512 [ 52.940676][ T4679] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.970245][ T4690] loop3: detected capacity change from 0 to 1024 [ 52.977755][ T4680] netlink: 76 bytes leftover after parsing attributes in process `syz.0.345'. [ 52.994054][ T4690] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 53.009022][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.013613][ T4679] netlink: 76 bytes leftover after parsing attributes in process `syz.0.345'. [ 53.016221][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.033092][ T4697] bridge0: entered allmulticast mode [ 53.055803][ T4123] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /20/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 53.057783][ T4697] bridge_slave_1: left allmulticast mode [ 53.082344][ T4697] bridge_slave_1: left promiscuous mode [ 53.088767][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.101057][ T4697] bridge_slave_0: left allmulticast mode [ 53.106760][ T4697] bridge_slave_0: left promiscuous mode [ 53.112498][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.175423][ T4704] netlink: 'syz.2.350': attribute type 30 has an invalid length. [ 53.227258][ T4706] loop3: detected capacity change from 0 to 4096 [ 53.281725][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 53.302382][ T4709] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 53.309507][ T4709] batman_adv: batadv1: Removing interface: netdevsim0 [ 53.320478][ T4709] batman_adv: batadv2: Adding interface: netdevsim0 [ 53.327991][ T4709] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.354073][ T4709] batman_adv: batadv2: Interface activated: netdevsim0 [ 53.365621][ T4711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.397160][ T4711] loop3: detected capacity change from 0 to 256 [ 53.405323][ T4711] msdos: Bad value for 'tz' [ 53.444293][ T4716] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 53.451970][ T4716] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 53.475500][ T4718] IPv6: Can't replace route, no match found [ 53.642993][ T4716] bond_slave_0: entered promiscuous mode [ 53.648784][ T4716] bond_slave_1: entered promiscuous mode [ 53.678178][ T4716] loop2: detected capacity change from 0 to 764 [ 53.759155][ T4729] FAULT_INJECTION: forcing a failure. [ 53.759155][ T4729] name failslab, interval 1, probability 0, space 0, times 0 [ 53.771837][ T4729] CPU: 1 UID: 0 PID: 4729 Comm: syz.1.359 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 53.782583][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 53.792649][ T4729] Call Trace: [ 53.795920][ T4729] [ 53.798854][ T4729] dump_stack_lvl+0xf2/0x150 [ 53.803519][ T4729] dump_stack+0x15/0x20 [ 53.807680][ T4729] should_fail_ex+0x229/0x230 [ 53.812430][ T4729] ? skb_clone+0x154/0x1f0 [ 53.816865][ T4729] should_failslab+0x8f/0xb0 [ 53.821508][ T4729] kmem_cache_alloc_noprof+0x4c/0x290 [ 53.826895][ T4729] skb_clone+0x154/0x1f0 [ 53.831141][ T4729] __netlink_deliver_tap+0x2bd/0x4c0 [ 53.836419][ T4729] netlink_unicast+0x641/0x670 [ 53.841185][ T4729] netlink_sendmsg+0x5cc/0x6e0 [ 53.845953][ T4729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.851299][ T4729] __sock_sendmsg+0x140/0x180 [ 53.855985][ T4729] ____sys_sendmsg+0x312/0x410 [ 53.860772][ T4729] __sys_sendmsg+0x1e9/0x280 [ 53.865406][ T4729] __x64_sys_sendmsg+0x46/0x50 [ 53.870175][ T4729] x64_sys_call+0x2689/0x2d60 [ 53.874881][ T4729] do_syscall_64+0xc9/0x1c0 [ 53.879391][ T4729] ? clear_bhb_loop+0x55/0xb0 [ 53.884073][ T4729] ? clear_bhb_loop+0x55/0xb0 [ 53.888752][ T4729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.894808][ T4729] RIP: 0033:0x7f6324d379f9 [ 53.899220][ T4729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.918826][ T4729] RSP: 002b:00007f6323975038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.927315][ T4729] RAX: ffffffffffffffda RBX: 00007f6324ec6130 RCX: 00007f6324d379f9 [ 53.935353][ T4729] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 53.943379][ T4729] RBP: 00007f6323975090 R08: 0000000000000000 R09: 0000000000000000 [ 53.951358][ T4729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.959328][ T4729] R13: 0000000000000000 R14: 00007f6324ec6130 R15: 00007fffe3869bb8 [ 53.967345][ T4729] [ 54.034796][ T4715] bond_slave_0: left promiscuous mode [ 54.040198][ T4715] bond_slave_1: left promiscuous mode [ 54.434052][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 54.473700][ T4752] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 54.481445][ T4752] batman_adv: batadv2: Removing interface: netdevsim0 [ 54.492889][ T4756] loop3: detected capacity change from 0 to 1024 [ 54.499542][ T4756] EXT4-fs: Ignoring removed orlov option [ 54.505211][ T4756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.512222][ T4756] ext4: Unknown parameter 'permit_directio' [ 54.523549][ T4752] batman_adv: batadv3: Adding interface: netdevsim0 [ 54.530251][ T4752] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.586818][ T4752] batman_adv: batadv3: Interface activated: netdevsim0 [ 54.640888][ T4765] loop2: detected capacity change from 0 to 1764 [ 54.675016][ T4765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.372'. [ 54.681659][ T2925] kernel write not supported for file /snd/seq (pid: 2925 comm: kworker/0:2) [ 54.693285][ T4765] ucma_write: process 224 (syz.2.372) changed security contexts after opening file descriptor, this is not allowed. [ 54.777915][ T4769] loop1: detected capacity change from 0 to 512 [ 54.790391][ T4769] EXT4-fs: Ignoring removed bh option [ 54.807376][ T4769] ext4 filesystem being mounted at /86/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.826203][ T4777] loop2: detected capacity change from 0 to 128 [ 54.849163][ T4777] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.863659][ T4769] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.371: Directory hole found for htree leaf block 0 [ 54.884612][ T4769] usb usb8: usbfs: process 4769 (syz.1.371) did not claim interface 0 before use [ 55.040912][ T4792] xt_NFQUEUE: number of total queues is 0 [ 55.240321][ T4800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.380'. [ 55.287475][ T4800] loop2: detected capacity change from 0 to 8192 [ 55.309333][ T4800] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 55.316514][ T4800] FAT-fs (loop2): Filesystem has been set read-only [ 55.370429][ T4802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'. [ 55.382739][ T4802] 9pnet_fd: Insufficient options for proto=fd [ 55.439088][ T4806] loop3: detected capacity change from 0 to 512 [ 55.446836][ T4806] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.453280][ T4806] EXT4-fs: Ignoring removed i_version option [ 55.474117][ T4806] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.383: invalid block [ 55.502484][ T4806] EXT4-fs (loop3): Remounting filesystem read-only [ 55.540167][ T4806] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 55.660428][ T4828] sock: sock_set_timeout: `syz.1.388' (pid 4828) tries to set negative timeout [ 55.693081][ T4827] loop4: detected capacity change from 0 to 1024 [ 55.704291][ T4827] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.223308][ T4839] netlink: 'syz.1.390': attribute type 2 has an invalid length. [ 56.426099][ T4845] netlink: 'syz.4.393': attribute type 5 has an invalid length. [ 56.479251][ T2925] kernel write not supported for file /snd/seq (pid: 2925 comm: kworker/0:2) [ 56.533255][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 56.533267][ T29] audit: type=1400 audit(1723191762.983:455): avc: denied { ioctl } for pid=4851 comm="syz.4.396" path="socket:[9480]" dev="sockfs" ino=9480 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.567271][ T4847] loop1: detected capacity change from 0 to 512 [ 56.593137][ T4847] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.614293][ T4847] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 56.614318][ T4847] EXT4-fs: failed to create workqueue [ 56.617449][ T4860] loop3: detected capacity change from 0 to 512 [ 56.623833][ T4847] EXT4-fs (loop1): mount failed [ 56.644668][ T4860] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 56.719725][ T4865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.734018][ T29] audit: type=1400 audit(1723191763.173:456): avc: denied { ioctl } for pid=4864 comm="syz.4.401" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.745885][ T4865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.806640][ T4874] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.812331][ T4872] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 56.825352][ T29] audit: type=1400 audit(1723191763.263:457): avc: denied { mount } for pid=4870 comm="syz.3.404" name="/" dev="ramfs" ino=8809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.848754][ T4865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.883797][ T29] audit: type=1400 audit(1723191763.333:458): avc: denied { ioctl } for pid=4871 comm="syz.1.403" path="socket:[8832]" dev="sockfs" ino=8832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.884114][ T4865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.946642][ T29] audit: type=1400 audit(1723191763.373:459): avc: denied { unmount } for pid=3260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.974453][ T29] audit: type=1326 audit(1723191763.433:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6324d379f9 code=0x7ffc0000 [ 57.023269][ T29] audit: type=1326 audit(1723191763.463:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6324d379f9 code=0x7ffc0000 [ 57.047074][ T29] audit: type=1326 audit(1723191763.463:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6324d379f9 code=0x7ffc0000 [ 57.070326][ T29] audit: type=1326 audit(1723191763.463:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6324d379f9 code=0x7ffc0000 [ 57.094170][ T29] audit: type=1326 audit(1723191763.463:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6324d379f9 code=0x7ffc0000 [ 57.160488][ T4889] loop2: detected capacity change from 0 to 1024 [ 57.271966][ T4923] netlink: 'syz.2.413': attribute type 29 has an invalid length. [ 57.289395][ T4923] netlink: 'syz.2.413': attribute type 29 has an invalid length. [ 57.304711][ T4923] netlink: 'syz.2.413': attribute type 32 has an invalid length. [ 57.312510][ T4923] __nla_validate_parse: 2 callbacks suppressed [ 57.312521][ T4923] netlink: 664 bytes leftover after parsing attributes in process `syz.2.413'. [ 57.334705][ T4923] netlink: 'syz.2.413': attribute type 29 has an invalid length. [ 57.402118][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 57.411049][ T4930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.414'. [ 57.614369][ T4935] loop2: detected capacity change from 0 to 1024 [ 57.775033][ T4948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.417'. [ 57.807199][ T4950] loop1: detected capacity change from 0 to 512 [ 57.826587][ T4950] loop1: detected capacity change from 0 to 128 [ 57.924776][ T4958] loop4: detected capacity change from 0 to 512 [ 57.987205][ T4958] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.156488][ T4970] loop2: detected capacity change from 0 to 512 [ 58.163019][ T4970] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.177125][ T4970] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 58.186249][ T4970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 58.194305][ T4970] System zones: 1-12 [ 58.198892][ T4970] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.423: corrupted in-inode xattr: e_value size too large [ 58.296992][ T4970] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.423: couldn't read orphan inode 15 (err -117) [ 58.404146][ T4970] netlink: 68 bytes leftover after parsing attributes in process `syz.2.423'. [ 58.503710][ T4970] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 58.557896][ T4987] loop4: detected capacity change from 0 to 512 [ 58.593231][ T4987] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.622378][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 58.661172][ T4993] batman_adv: batadv3: Interface deactivated: netdevsim0 [ 58.668299][ T4993] batman_adv: batadv3: Removing interface: netdevsim0 [ 58.695825][ T4993] batman_adv: batadv4: Adding interface: netdevsim0 [ 58.702447][ T4993] batman_adv: batadv4: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.737029][ T4995] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #12: block 32: comm syz.4.425: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.767804][ T4993] batman_adv: batadv4: Interface activated: netdevsim0 [ 58.786309][ T4997] loop3: detected capacity change from 0 to 128 [ 58.804297][ T4997] EXT4-fs: quotafile must be on filesystem root [ 58.987818][ T5011] loop1: detected capacity change from 0 to 128 [ 59.005090][ T5009] loop2: detected capacity change from 0 to 256 [ 59.023890][ T5009] FAT-fs (loop2): Directory bread(block 1285) failed [ 59.037565][ T5009] FAT-fs (loop2): Directory bread(block 1285) failed [ 59.045469][ T5011] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.045825][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.056439][ T5009] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 59.064746][ T5011] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.084505][ T5011] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.120055][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 59.141633][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.188323][ T5015] bridge_slave_0 (unregistering): left allmulticast mode [ 59.195455][ T5015] bridge_slave_0 (unregistering): left promiscuous mode [ 59.202429][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.210484][ T5020] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.225840][ T5020] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.240975][ T5011] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.256258][ T5011] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.271460][ T5011] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.286795][ T5011] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.302067][ T5011] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.317339][ T5011] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.333029][ T5011] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.348431][ T5011] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.370371][ T5011] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.386429][ T5011] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.388744][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 59.411466][ T5011] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.427431][ T5011] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.444631][ T5024] loop4: detected capacity change from 0 to 128 [ 59.479090][ T5020] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.495045][ T5020] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.497982][ T5031] loop3: detected capacity change from 0 to 512 [ 59.517332][ T5032] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.435: No space for directory leaf checksum. Please run e2fsck -D. [ 59.523980][ T5031] EXT4-fs: Ignoring removed i_version option [ 59.533248][ T5032] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.435: checksumming directory block 0 [ 59.557220][ T5030] loop4: detected capacity change from 0 to 512 [ 59.566563][ T5031] ext4: Unknown parameter 'mask' [ 59.575454][ T5011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.604604][ T5030] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.639281][ T5037] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.646743][ T5037] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.692453][ T5044] bridge_slave_1: left allmulticast mode [ 59.698187][ T5044] bridge_slave_1: left promiscuous mode [ 59.704067][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.721845][ T5044] bridge_slave_0: left allmulticast mode [ 59.727643][ T5044] bridge_slave_0: left promiscuous mode [ 59.733362][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.761551][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 59.784850][ T5046] loop4: detected capacity change from 0 to 128 [ 59.809108][ T5046] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.839249][ T5046] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.004763][ T4044] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 60.012340][ T4044] FAT-fs (loop4): Filesystem has been set read-only [ 60.024126][ T4044] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 60.167367][ T5072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 60.181282][ T5070] loop2: detected capacity change from 0 to 256 [ 60.243254][ T5077] loop3: detected capacity change from 0 to 2048 [ 60.254189][ T5077] ext4: Unknown parameter 'mask' [ 60.275114][ T4044] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.304904][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.378747][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.419117][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.419608][ T5086] loop3: detected capacity change from 0 to 128 [ 60.441371][ T5086] EXT4-fs: Ignoring removed nobh option [ 60.456391][ T5086] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.497698][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.712815][ T55] bridge_slave_1: left allmulticast mode [ 60.719174][ T55] bridge_slave_1: left promiscuous mode [ 60.725043][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.764299][ T55] bridge_slave_0: left allmulticast mode [ 60.770116][ T55] bridge_slave_0: left promiscuous mode [ 60.776151][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.101671][ C1] ================================================================== [ 61.109777][ C1] BUG: KCSAN: data-race in can_send / can_send [ 61.115947][ C1] [ 61.118274][ C1] read-write to 0xffff888113bc2470 of 8 bytes by interrupt on cpu 0: [ 61.126341][ C1] can_send+0x576/0x5d0 [ 61.130503][ C1] bcm_can_tx+0x314/0x420 [ 61.134842][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 61.140143][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 61.145360][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 61.150402][ C1] handle_softirqs+0xc3/0x280 [ 61.155099][ C1] irq_exit_rcu+0x3e/0x90 [ 61.159444][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 61.165087][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 61.171081][ C1] inetdev_event+0x617/0xb10 [ 61.175674][ C1] raw_notifier_call_chain+0x6f/0x1d0 [ 61.181058][ C1] call_netdevice_notifiers_info+0xae/0x100 [ 61.186977][ C1] unregister_netdevice_many_notify+0x834/0x1110 [ 61.193313][ C1] unregister_netdevice_many+0x19/0x20 [ 61.198775][ C1] cleanup_net+0x417/0x830 [ 61.203195][ C1] process_scheduled_works+0x483/0x9a0 [ 61.208653][ C1] worker_thread+0x526/0x700 [ 61.213245][ C1] kthread+0x1d1/0x210 [ 61.217317][ C1] ret_from_fork+0x4b/0x60 [ 61.221730][ C1] ret_from_fork_asm+0x1a/0x30 [ 61.226488][ C1] [ 61.228805][ C1] read-write to 0xffff888113bc2470 of 8 bytes by interrupt on cpu 1: [ 61.236861][ C1] can_send+0x576/0x5d0 [ 61.241006][ C1] bcm_can_tx+0x314/0x420 [ 61.245328][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 61.250609][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 61.255801][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 61.260823][ C1] handle_softirqs+0xc3/0x280 [ 61.265499][ C1] irq_exit_rcu+0x3e/0x90 [ 61.269824][ C1] sysvec_apic_timer_interrupt+0x37/0x80 [ 61.275454][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 61.281435][ C1] [ 61.283741][ C1] value changed: 0x0000000000007b0d -> 0x0000000000007b0e [ 61.290832][ C1] [ 61.293138][ C1] Reported by Kernel Concurrency Sanitizer on: [ 61.299272][ C1] CPU: 1 UID: 0 PID: 3260 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 61.310125][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 61.320184][ C1] ================================================================== [ 61.433085][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.456001][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.478146][ T55] bond0 (unregistering): Released all slaves [ 61.560098][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 61.589376][ T55] hsr_slave_0: left promiscuous mode [ 61.607050][ T55] hsr_slave_1: left promiscuous mode [ 61.616994][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.624543][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.646901][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.654407][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.674057][ T55] veth1_macvtap: left promiscuous mode [ 61.679627][ T55] veth0_macvtap: left promiscuous mode [ 61.685239][ T55] veth1_vlan: left promiscuous mode [ 61.690499][ T55] veth0_vlan: left promiscuous mode [ 61.794990][ T55] team0 (unregistering): Port device team_slave_1 removed [ 61.809957][ T55] team0 (unregistering): Port device team_slave_0 removed [ 61.917736][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.924942][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.933225][ T5080] bridge_slave_0: entered allmulticast mode [ 61.942714][ T5080] bridge_slave_0: entered promiscuous mode [ 61.951044][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.958228][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.969098][ T5080] bridge_slave_1: entered allmulticast mode [ 61.975815][ T5080] bridge_slave_1: entered promiscuous mode [ 62.009350][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.034333][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.062899][ T5080] team0: Port device team_slave_0 added [ 62.071651][ T5080] team0: Port device team_slave_1 added [ 62.091205][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.098182][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.124108][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.157406][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.164431][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.190343][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.226756][ T5080] hsr_slave_0: entered promiscuous mode [ 62.244152][ T5080] hsr_slave_1: entered promiscuous mode [ 62.255093][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.262656][ T5080] Cannot create hsr debugfs directory [ 62.569070][ T5080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.578678][ T5080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.589956][ T5080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.598596][ T5080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.651423][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.663497][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.689356][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.696502][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.708192][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.715276][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.733216][ T5080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.743708][ T5080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.828364][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.999267][ T5080] veth0_vlan: entered promiscuous mode [ 63.009171][ T5080] veth1_vlan: entered promiscuous mode [ 63.028859][ T5080] veth0_macvtap: entered promiscuous mode [ 63.040665][ T5080] veth1_macvtap: entered promiscuous mode [ 63.051821][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.062313][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.072720][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.083136][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.092974][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.103973][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.113775][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.124298][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.140771][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.160813][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.171906][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.181783][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.192232][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.202617][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.213043][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.222855][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.233875][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.248458][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.270068][ T5080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.278988][ T5080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.287795][ T5080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.296521][ T5080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0