last executing test programs: 12.745310749s ago: executing program 4 (id=1694): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x2, 0x1, 0x1, 0x3}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="fc3c48e0918eef7d6f88fee32276370ff73ea260199cb00e9a81f439e9462ea76212178ec147706e9b105ea3399dfa5c7ae87ab7282b15396b545049e1b0057e695b083ad2ed57f18210d18f85414d", 0x4f}, {&(0x7f0000000100)="6aba064caa01ff1466be847e4ee6369751424ff21cc5c377203fe9c9e4df24f5b420cd55dec41afb47210624ce1b8ece5f472298f93cc2f95393556828405852daeefa3f4ebc85f6cd2d691c62c67f26e5d6b4fa655fd435c0a3640ea5235b5f502b2b5713", 0x65}], 0x2, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x238}, 0x800) 12.647282027s ago: executing program 4 (id=1695): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x9e05, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 12.647111847s ago: executing program 4 (id=1696): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xe84f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) eventfd(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4ab, &(0x7f0000000000)="$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") lchown(&(0x7f0000000600)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000002500000000000000370001000400000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 12.495057499s ago: executing program 4 (id=1700): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000280)='./file0\x00', 0x0) select(0x40, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x80000000, 0xd, 0x8, 0x80000000, 0xfffffffffffffffa}, &(0x7f00000001c0)={0x0, 0xdb2000000000000, 0x8, 0x0, 0x5, 0xe8}, &(0x7f0000000240)={0x7fffffff, 0x171, 0xfff, 0x3, 0x0, 0x9, 0x1, 0xd}, &(0x7f00000002c0)) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) shmget(0x0, 0xa000, 0x2, &(0x7f0000ff3000/0xa000)=nil) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x4, 0xe8000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x22, 0x2, 0x11) io_setup(0x6, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8, 0x1, r4}, {0x8}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x40}}, 0x24000804) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 11.562373085s ago: executing program 4 (id=1719): syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1d58, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r3, {0x10}, {}, {0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1d28, 0x2, [@TCA_CGROUP_EMATCHES={0x1e0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x3}, "47cab97b3cf1cc34cf524f47db6c643f5c413542cca28f5ea3e0037a0bc2ad4f2364b379dfc3ad34f2d6d24b5e598cc953e134dd296dd7527c5b8f7fb7d57b0b44f2e0db110eb9a756b0e65fc171b95225b0e7c88728a4d70352d2daf7371815bad6b1717b31c03eff9da51684e4cdeafa4468f385f2d55e957770bc8842b1a9b58498fb5291dff37021b01ed5"}}]}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x24}, {0xffffffff, 0x8, 0x3, 0x5, 0x9, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x4, 0x2, 0xfffc}, {0x8000, 0x7, 0x2, "f9bec487adec0c"}}}, @TCF_EM_META={0xec, 0x3, 0x0, 0x0, {{0x8}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x41, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="54c6b5c2431e318652", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="8ab2e9a85e322706", @TCF_META_TYPE_VAR="7cacce14c68874", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="39af1c39ab326f", @TCF_META_TYPE_VAR="1edb17d5e674d9a0e9", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="66a80d25ea"]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="2987695738", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="6c25c8b89c3cad69", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8a2a0c50b2a80098", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="3d05b0cfdf969f4ed1", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x40}, {{0x1}, {0x0, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_CGROUP_POLICE={0x20, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_CGROUP_POLICE={0x458, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfff, 0x4, 0x8, 0x1000, 0x5, 0x2, 0x3, 0x7fff, 0x7, 0x0, 0x2, 0x0, 0x20, 0x3, 0x6, 0x80000000, 0x0, 0xfffffffd, 0xffff, 0xfffffc00, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3, 0xfffff001, 0x8, 0x8, 0x101, 0x1, 0x7, 0x2, 0x4, 0x9, 0x5, 0x6, 0xa5, 0x10, 0x5, 0x80000000, 0x2, 0x8, 0xffff, 0x8, 0x7, 0x80000001, 0x735281cf, 0x9, 0x8, 0x4, 0xfffffff7, 0x1, 0x8, 0x5, 0x1, 0x392fa4b7, 0x8000, 0xff, 0x0, 0x800, 0x733, 0xfff, 0x7, 0x80, 0x9, 0xfff, 0x0, 0x2, 0xffffeb69, 0x5, 0x9, 0x6, 0x2, 0xfffffffd, 0x7, 0x1, 0x3, 0x65, 0x0, 0x5, 0x7ff, 0x8, 0x3, 0x1, 0x2b, 0x8000, 0x4, 0xdad7, 0x8001, 0xfe, 0x0, 0x2, 0x6d88, 0xfffff801, 0x0, 0x3ae, 0x9, 0x3, 0x10000, 0x0, 0x6, 0x249b, 0x7, 0x6, 0x8, 0xd, 0x7, 0x3, 0x4, 0xff, 0x2, 0x1000, 0xa3, 0x47, 0x0, 0x8, 0x10000, 0x81, 0xce1, 0x7f, 0x8, 0x2, 0x1, 0x40, 0x5, 0x4, 0x2, 0x0, 0x80, 0x2, 0x2, 0x4, 0x9, 0x9, 0x5b2a, 0x5449, 0x401, 0x2, 0x10, 0x1, 0x2, 0xfffffff9, 0x5, 0xffff, 0xc2, 0xfffffdf4, 0x1, 0xc49, 0x8, 0x81, 0xa, 0x4, 0x638, 0x7, 0x5, 0x4, 0xfffffff8, 0x95, 0x1, 0x1, 0x3, 0x2, 0x6, 0x9, 0x6, 0x6b, 0x8, 0x6, 0xfffffff8, 0x7, 0x80, 0x4, 0x7, 0x5, 0x5c, 0x3, 0x7ff, 0x1ff, 0x0, 0x4, 0x81, 0x8, 0x4c, 0xa, 0x9, 0x5, 0xffffffff, 0x596e, 0x67cb, 0x4, 0x5, 0x9, 0x1, 0x8, 0x8001, 0x10000, 0x0, 0x6, 0xd48, 0x5, 0x8000, 0x1a0, 0xf, 0xffff, 0x7f, 0x8, 0xfff, 0x18, 0x9, 0x7f, 0x5, 0x9, 0x9, 0x200, 0x8, 0x5, 0x839, 0x0, 0x5, 0x51a, 0x5, 0x9, 0x7, 0x5, 0xfffffff9, 0xe, 0xc, 0xc3, 0x8, 0x2, 0xe, 0x5, 0x2, 0x4, 0x5, 0x8, 0x3ff, 0x2, 0x6, 0x2, 0xd9, 0xa, 0x5, 0x6, 0x1ff, 0x7fffffff, 0x9, 0x6, 0x3, 0x9, 0x816, 0x4, 0xffffffc0, 0x90000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x0, 0x5, 0x3, 0x1, {0x0, 0x0, 0x3, 0x0, 0x81}, {0x6, 0x0, 0x7, 0x1, 0x4, 0x8}, 0xc, 0x5, 0x800}}]}, @TCA_CGROUP_EMATCHES={0x16cc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x174, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xfffa}, {0x484, 0x5, 0x0, "631e722aed"}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x1, 0x4, 0xca}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR='>5e', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='$]', @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="46f557ed"]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d25aa54d9e3ce569", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="c3653a27524c"]}]}}, @TCF_EM_IPT={0xb4, 0x2, 0x0, 0x0, {{0x8000, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "f0da8d73ef724836d6e8778e5fecfce65c4e7ea1a4b1bd3137d6238e72106602f7eea379c1cec40afffaa5d365f3fe54209110eb67cf7ab0ceb0c0bd0432885753fc7df312eee4be08ccd0caf8524d859408c53c61b8a883d4c3d06d2420505951cc614014a6ebc1d64f41ede8e967751b2714d18c20fd4d5b6cca9ce20d4041da"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x7}, {0x6, 0x5, 0x2, 0x3, 0xf, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1}, {0x5, 0x7f, 0x7, 0x6, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x8000}, {0x7, 0x4, 0x0, "f981bfbe"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe576, 0x3, 0x5}, {0xffffffff, 0xc, 0x4, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x101}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="d5", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f2c77e474038bf0484c9"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xe0, 0x3, 0x9}, {0x4, 0xe7b, 0x3, 0x5}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x401, 0x4, 0xff}, [@TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="e4", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="9743e3c0", @TCF_META_TYPE_VAR="8218b2087ddb5684bd3a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3e, 0x3}, {0x100, 0x4e, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xffff, 0x3, 0x8}, {0x4, 0x5, 0x5, 0x8}}}, @TCF_EM_CONTAINER={0xb8, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x7ff}, "1d4c0fdcf780631217d7980c9900192ab4beb907b4946f26ecc3fd6f86f6a9f062b7c56daa55e02d44355e4d6e5bfbc889691984658eb3fc0dc784acb65ddc83f1732dea02194af059738eba7603f94b260c8a16db00246f652f2dc752323c91078e3c1e49bdb9d2bbba8086fbe4467ad6deae4db48c099a4b8e814a6e71a15c9fa7cddafc549d7074451822fd925aeb9b634761fd3a1a6afba7c38dde827b17cf9924bec4d8e38863"}}, @TCF_EM_META={0x78, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_VAR="35f16cdbe7", @TCF_META_TYPE_VAR="572052bcd7ed4ba0", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="f605b3d057b8", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="0f5a04e1a2", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xf, 0x1}, {0x9}}}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7f319c18", @TCF_META_TYPE_VAR="a252", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="ae56b9d3259cad8299", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x4}, {0x8, 0x6, 0x0, "8f4e071531a3"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x4b}, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3fcf, 0x3, 0xa}, {0x8, 0xfff, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x113c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x800}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0xf800, 0x0, 0x2}, "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"}}, @TCF_EM_IPT={0xf0, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xae, 0x5, "5767a09fe2bd5916c47f12645777685f84cc317a26f1397ac536db963e75db75e69f150e5258af9d7a166f55761dd96a931f4b19552471a4b85b0cf923925d8d9c4cba31ddd64b4e6700cc2bc7099aedd6d3d7ab695ca841c5607e6c53baf60d0f261e34e9ca6dcbcfe05f4774c3f49399f4d2e792d7d2cad82319b16cdfae070c81f6704b667e9216f93f715956813f636a205b877ff81d3a27bc6f8a84a00cf51ba3fb79534ea753d8"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9083, 0x7, 0x52d3}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x2}, {0x2, 0x4, 0x0, "551f2040"}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd0, 0x7, 0xd32}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x70, 0x1, 0x0, 0x0, {{0x6, 0x0, 0xfe4}, "825c270251281afc5ea231746d8ae968b85f1a057629677434cbbc381a95dc86568e3c0f437fafee5a8a6bc6129efac7b862951aecec3743486449ab772da61bdb45bc17da3090b7e6401a13541181767b17018c5011d7f1fbed4d4ab57fd3eb8f62100d"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x9}, {0x90000, 0x6, 0x9, 0x6, 0x1, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0xfff}, {0x3, 0x3, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x2}, {0x200, 0x1, 0x3, 0xe9a6}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x101}, {0x3, 0x3, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xa, 0x7, 0xc}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x9, 0xa}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x8000}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1ff, 0x3, 0xffff}, {0x80, 0x9, 0x7, 0x100}}}, @TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1}, {0x6}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x35, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="2b574fe8ae", @TCF_META_TYPE_VAR="62bd55f13f9e", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="04b7fb04b6", @TCF_META_TYPE_VAR="31e9a797c3cae5", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="1139e87c1f54", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="5977f95f7148f9a499", @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x7}, {0x8, 0x7, 0x9, 0x4, 0x0, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x1d58}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 11.345716823s ago: executing program 4 (id=1722): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="00e2976d4d1554c484fb60f8f7110968fd53bb529f2a9fb08da7dc097cdb60487f9ccd4717a18098a0cd6423840f379145ed4df4cc79e3229573773c797ec98c67a97cd783d30a447e3392abe5a5dd902beab7daa703d305a40ce5eacaf2b03b7a4ed6b8422921976ebc1ca3163c388428ca6301d92865a6271ec1e3a9f74f7d027503860dc6e64706617ee605d1a0d350c8086055c5ad3b5d28ad5e676a51f2731721b18043e6b2b4862e36a16fb2ac7b82975fb3a613d78e", 0xb9}, {&(0x7f0000000300)="a3871d3d947e16a48405a16e619af0d18e6880bdb2cd2ea37f5045684a1ceb7eb1f5227237d78d35f722822c6e8dff17385af195e62d665c8554839fc786a96ba5c6597635f59f7b7cba38dc0623f7b2d0565220bc25740ce6a0525764bb02ba6acd480a", 0x64}, {&(0x7f0000000380)="8d5f71b250edb433b088d720f01058efd1b4eda94f777c449f0ea9df01b98f75fc13c772739cba9f6d53421b7e93d8c66f0c46e12b15fb227a00ae1388fbd4b872dee01f9e9e0b1c78db986a286eb65d0af85c51db8657bfc3f7fb7738a85c89a6b84e77e58161695335b6b4f69820931cd611443822842edbbb67cbe2cc7c4fdf88ed7817571d638b853c0ce320cabc63ad9ae569d8209799d5a951e6aec7a1b6fcee30251292b9b9e672c0e7bf93d2bb84f76ae41abc0d0620e24bd78348485450da", 0xc3}], 0x3, &(0x7f0000000480)=[{0xe8, 0x110, 0x6, "d955ef0ad9fd5d6ef2c6f40c989dea1470b01375c7edbc99bb0bae853fa825520555f59689e05f49e982a5cc061e389a9197604e9ef7bd5a42799abf01e188d0af850ada07e3ca8a42ec5422975b1de98267992793bf3298a8fad2a679db1bd7c7927b240f2bb3caac0358fb1b612a461385600a662676f3198c0a1610dcb727589c7d90ac467a1498543ce1e9c43bfd75ab78f5f1a9ea7a44d32e8cbc26f55155209b710d58f99ee2d1ff431c9f14f717efe056c26bb52f138098f8f6cc8456f7e35cf21c233c072d7e36788632f682ff"}], 0xe8}, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0x100000025) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1d, 0x2, 0x6) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) 1.985698867s ago: executing program 1 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0xe0, {}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 1.985393777s ago: executing program 1 (id=1914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x9, 0x70bd2d, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0xfff8}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) bind$inet(r0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) socket$kcm(0x2, 0x2, 0x73) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x5a3a0}], 0xc}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.650148745s ago: executing program 2 (id=1924): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000007b8af8ff00000000bfa3edffffffffff06020000f8ffffffb703000008772980933da4f7d800000085000000030000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0xffffffffffffff04) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x81001) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000340)={0x0, 0xb1, "0a697f1f843c167e1c274f2fce2bda3cac94892b8241fcc2734756c886f937f791fe0bd34f163bc8abc2c976fe3dd8a42e9e9e55ebf5cc929a804298bdb7511332c88265f7b8647dfbb424c8cab2e03124b9fe34d21299c58482e2bafa5d5f265a372cee36f50c0384cdfcfc00719f434201581fd36d0f403961bfaa764a31587149b3b5bce5aeab5787aa19a7c160b74f0d4f936aea45f117fceab2a9abe9508ad11bb99599c9376cdd2cc879ff9186ea"}) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020600000000000000000000000000000500040000000000020000000000000011000300686173683a69702c706f7274000000000c0007800800124000000000"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000140)=@OVL_FILEID_V0={0x82, 0xfb, {0x0, 0xfb, 0x82, 0x1, 0xe, "c6324f2f4b348c8b2b6005c6c6d6b67d", "cb913a8cbe7b61ab30d09d3ece06807db2090875cd14bb04ea02a163f53eb922f88dbf40985c22e9d89c7ebe995f2c86ea714fa01aedbd5280e33e50dcf3374ffbd3dff201e9ae630a0d68c50800ae59dc1c0601bc73b61924c0f2c2e4abd819cacafcb3f42327d037bfd3e377"}}, 0x204000) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 1.142438206s ago: executing program 1 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa00}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 1.125196878s ago: executing program 1 (id=1934): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/144], 0x90) 1.067102492s ago: executing program 1 (id=1935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00'}, 0x10) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc00000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x8, 0x1501, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r7, @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 750.718948ms ago: executing program 2 (id=1936): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 687.526104ms ago: executing program 2 (id=1937): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000280)='./file0\x00', 0x0) select(0x40, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x80000000, 0xd, 0x8, 0x80000000, 0xfffffffffffffffa}, &(0x7f00000001c0)={0x0, 0xdb2000000000000, 0x8, 0x0, 0x5, 0xe8}, &(0x7f0000000240)={0x7fffffff, 0x171, 0xfff, 0x3, 0x0, 0x9, 0x1, 0xd}, &(0x7f00000002c0)) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) shmget(0x0, 0xa000, 0x2, &(0x7f0000ff3000/0xa000)=nil) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x4, 0xe8000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x22, 0x2, 0x11) io_setup(0x6, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8, 0x1, r4}, {0x8}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x40}}, 0x24000804) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) pipe2(&(0x7f0000000040), 0x4000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) 573.687523ms ago: executing program 0 (id=1938): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="30000000000f0000e600000000000000d96e6c8d5e85080045"], 0x30}], 0x1}, 0x0) 573.177563ms ago: executing program 0 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000030000080000001800018004"], 0x48}}, 0x0) 571.254273ms ago: executing program 0 (id=1941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x0, 0x1, '\x00'}], 0x18, 0xe000}, 0x5}], 0x1, 0x8000) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r3, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@link_local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffd61) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000036c0)=ANY=[], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000f0ea03010000000000000000000000000a1400000000000a0000"], 0x28}}, 0x0) 352.209171ms ago: executing program 3 (id=1942): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x34000) 299.136576ms ago: executing program 0 (id=1943): perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300), 0x10) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x1c, 0x18, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd71}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000380)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000026c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x400}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='swiotlb_bounced\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x80, 0x0, 0x0, 0x6, 0x4001, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x8072}, 0x0, 0x9, 0xed, 0xf, 0xcd4f, 0x0, 0x3, 0x0, 0x6, 0x0, 0xe5ae3a7}, 0x0, 0xd, r2, 0x0) io_uring_setup(0x4f34, &(0x7f0000001240)={0x0, 0x2000000, 0x80}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) eventfd2(0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080), 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000a1ad7d2c95"], &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0xbf, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xfffffffe, 0x5, 0xa00, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) 298.934685ms ago: executing program 3 (id=1944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0xffea}, {@in=@multicast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 298.764595ms ago: executing program 2 (id=1945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x50, 0x2, 0x6, 0x801, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x50}, 0x1, 0x0, 0x500000000000000}, 0x0) 295.598146ms ago: executing program 0 (id=1946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b0e00000000000300001800000008000300", @ANYRES32=r2, @ANYBLOB="200030801c000180050003"], 0x3c}}, 0x0) 293.575786ms ago: executing program 2 (id=1947): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") r0 = socket(0x11, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x107, 0xa, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000280)='./bus/file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) renameat2(r2, &(0x7f00000001c0)='./bus/file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x0) 292.400056ms ago: executing program 3 (id=1948): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x1400, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018148103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 230.273551ms ago: executing program 3 (id=1949): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x22c, 0x2c, 0xd27, 0x0, 0x34000, {0xb, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x1e3, 0x2, [@TCA_BASIC_EMATCHES={0x1b4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x4}, "48fd876b06e91864c5df816d9ebadd90e51a04e4e44802e4990398dba7672c82358c9c61d5e48e1639fa793638294da69ff48661521c5c1b19b6b5223fdc4debb98820d1fd6dfb0d3233b28201b6437483d21ea91acd211c61cd23a0c8dc870382f5bb4b2c95e5fad4a1779cb0a7245d5aafaf755fe5e9bb9f3200f11d4794d83238482b7eb09dafe4f8387784654dea89f34f0bfe882fcce59dc195786f02e4cb540783b9e797cf346cfaa8bf11e5a75b9e95d04741338abd46f6c47008551e84760cf415266370607b5d38722e97fa07f1b9dca676"}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x81, 0x0, 0x9}}}, @TCF_EM_META={0x9c, 0x0, 0x0, 0x0, {{0x8001}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f4220121a878fb31", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f6c8505dc0a675ee79", @TCF_META_TYPE_VAR='a', @TCF_META_TYPE_VAR='7', @TCF_META_TYPE_VAR="d6c0d6c024f24cfb8ead"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x0, 0x1}, {0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xff}, {0x0, 0x7f}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x7, 0x2}, {0x1}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2b2d0e377612fd8e", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2}, {0x0, 0xd2, 0x2}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="2bf302", @TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00\x00']}]}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x0, "8cde9d8bc2b503ab7fc2"}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2d6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}]}}]}, 0x22c}}, 0x0) 202.171993ms ago: executing program 1 (id=1950): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0xa, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) poll(&(0x7f0000000100), 0x0, 0xe7f1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000800) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xbee}]}, 0x2c}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080012"], 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) 133.862869ms ago: executing program 3 (id=1951): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000003, 0x42031, 0xffffffffffffffff, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000540)=ANY=[@ANYRES16], 0x118) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_clone(0x40000000, &(0x7f0000000340)="7a50714a03fd7a7585fbb54b988ffb90aa8ba1b5435d1f8d0c0c8e7226aafce6bdb962cbf9d0de247f0cb6015c24820a860ce5e3adaa790853ef34d8c0e041531180df53166f04bf28c3b550e7810b831fc0ddb134902eda769fb7115707f36f113d2c32365b01ed8bd9aea069182eb9a3279fe89f597cc185acfeb1339e906ad6df0d472d5cddd08cd8fdd505", 0x8d, &(0x7f00000004c0), &(0x7f00000000c0), &(0x7f0000000400)="3b4bc30f005f629d699d823ea4d73b78fcccecfa0d89673f363d11cbaad5389bb6ee58e7825f52f9cd9d5f1b2a4061516784a43fbefd927705722bfd86b917fb96593813b282e4d061df44757038640dcc75470fdc689681719ae5959d79228e0ba3a17b9d4ed75231e04bb8eded2151d599beeecd7cbe3b0e8d8c6655426d6e7d23edf4d49d6bdfe138fb97ccf5b61dbb7b85c17c8b159538790c17959079f676ea4d6aa471f28004") ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r2) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xfffffffffffffe4e, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000002c0)={0x6, 0x3}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) mq_open(&(0x7f0000000040)='\x00', 0x40, 0x10c, &(0x7f0000000500)={0x7fffffff, 0x5, 0x8, 0x10}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = syz_pidfd_open(r6, 0x0) process_mrelease(r7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="ec001cdaf228b2d210039c960000100001080000", @ANYRES32=r11, @ANYBLOB="0000000000000000cc001a80180002800a000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280560001801100000000000000080000000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000800000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000070020010000000000000000000000000001000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c00"], 0xec}}, 0x0) 133.540979ms ago: executing program 0 (id=1952): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = eventfd(0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) dup(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000008180)='./bus\x00', 0x198101c, &(0x7f00000003c0)=ANY=[], 0x1, 0x8150, &(0x7f0000018440)="$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") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd747c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x33fe0}}, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 44.312346ms ago: executing program 2 (id=1953): unshare(0x62040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090032000300302b0000600000000100330081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 3 (id=1954): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000000)=""/79, &(0x7f0000000080)=0x4f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={@desc={0x1, 0x0, @desc2}}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x608, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4bc, 0x1, 0x5, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x9}, 0xe, 0x0, 0x9, 0xf, 0xd, 'syz0\x00', "dbf274229099183dd162c1c79143601ab184323b77d3a2dc02db38b5c42011c7", "90508b8727854cdb2178a06607c68e05abc33b73f1c6639def585e1aeba71325", [{0x5, 0x6e8, {0x2, 0x3}}, {0x3, 0x1f5d, {0x3, 0x2}}, {0x70, 0x101, {0x1, 0xe4d}}, {0x1, 0x0, {0x2, 0x2}}, {0x5, 0xc6e8, {0x2, 0x5}}, {0x67a, 0x7ff, {0x0, 0x6}}, {0x1, 0x3ff, {0x1, 0x1ff}}, {0x1, 0x5, {0x3, 0x5}}, {0x4, 0x7, {0x2, 0xf74f}}, {0x4, 0x9, {0x3, 0x200}}, {0xd, 0x7, {0x1, 0x5}}, {0x0, 0x5, {0x3, 0x4}}, {0x6, 0x101, {0x0, 0x4}}, {0xc, 0x4, {0x3, 0x5}}, {0x4, 0x0, {0x3}}, {0x5b, 0x8, {0x0, 0x5}}, {0x3b8, 0x0, {0x7, 0x4}}, {0x3, 0xff, {0x1, 0x2eb}}, {0xca4, 0x7fff, {0x0, 0x7372}}, {0x8, 0x1, {0x0, 0x8000}}, {0x81, 0xc63, {0x3, 0xd61}}, {0x8, 0x1, {0x2, 0xffff0000}}, {0x6, 0x8, {0x0, 0xffff}}, {0x9, 0xb, {0x1, 0x2}}, {0x9, 0xfff2, {0x3, 0x6865}}, {0x92, 0x3, {0x2, 0x1}}, {0x0, 0xa, {0x3, 0xd}}, {0x7, 0x4, {0x1, 0x5}}, {0x2e, 0x93, {0x1, 0x4}}, {0x5, 0x80, {0x3, 0x6}}, {0x4, 0xfffa, {0x3, 0x1000}}, {0x2, 0x5, {0x0, 0x7}}, {0xc, 0x8b, {0x2, 0x80000000}}, {0x6, 0x2, {0x1, 0x8001}}, {0x9, 0x9, {0x2, 0x10000}}, {0x0, 0xe, {0x0, 0xffffffff}}, {0x2, 0xffff, {0x0, 0x457}}, {0x3, 0xfc01, {0x2, 0x3ff}}, {0xa5f, 0x2, {0x2, 0x7}}, {0x9, 0x0, {0x1, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x80000001}, 0x7, 0x8, 0x0, 0x3b32, 0x10, 'syz1\x00', "6e0157aac9af12d5dab839812a99099a19dc0f107c6607d4e40375deadfeb720", "dc338778e83fcf21206bc50a13ded17e9c198679ed805b35bd272a57c500e372", [{0xfffa, 0x8, {0x3, 0x200}}, {0x985f, 0x7, {0x3, 0x101}}, {0x5, 0x8, {0x6, 0x7fff}}, {0x0, 0x1, {0x0, 0xc00000}}, {0x2f4b, 0x3, {0x0, 0x7}}, {0x3, 0x9, {0x3, 0x5}}, {0x3, 0x9, {0x2, 0x2}}, {0xe1db, 0x9, {0x2, 0x9}}, {0xffff, 0x6, {0x1, 0x5}}, {0x6, 0xfffe, {0x2, 0x98b}}, {0x8, 0x4, {0x0, 0x400}}, {0x9, 0x0, {0x3, 0x9}}, {0x906, 0x1, {0x0, 0x637}}, {0x6, 0x400, {0x2, 0xfffffff7}}, {0x3, 0x1, {0x2, 0xfffffff9}}, {0xfff7, 0x1, {0x1, 0x41bb}}, {0x4, 0x8, {0x2, 0x1}}, {0x1, 0x9, {0x3, 0x9}}, {0xc91a, 0x0, {0x1, 0x40}}, {0xa570, 0x8, {0x2, 0x9be1}}, {0x7, 0x3, {0x2, 0xe243}}, {0xb74, 0x9, {0x3, 0x2}}, {0xc, 0x6, {0x1, 0x7fffffff}}, {0x101, 0xfffd, {0x2, 0x42}}, {0x0, 0x77b8, {0x2, 0x2}}, {0x2, 0xe78d, {0x3, 0x80000001}}, {0x0, 0x9, {0x2}}, {0x3, 0x0, {0x1, 0x80}}, {0x6, 0x3, {0x2, 0x1}}, {0x2, 0x5, {0x3, 0x7}}, {0x7e4, 0x9, {0x0, 0x7}}, {0x8, 0xfffd, {0x1, 0x80}}, {0x76, 0x36, {0x1, 0x37}}, {0x7f, 0xc, {0x0, 0x7}}, {0xe32a, 0x6, {0x3, 0xffffffff}}, {0x3fe, 0xb5a5, {0x1, 0x2}}, {0x5, 0x80, {0x0, 0x5}}, {0xd, 0x1, {0x3, 0x3}}, {0x4, 0x5, {0x1, 0xa}}, {0x4, 0xc, {0x0, 0x7ff}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x50}, 0x1) io_uring_enter(r2, 0x546f, 0xd01b, 0x0, &(0x7f0000000740)={[0x7]}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)=@acquire={0x1a0, 0x17, 0x200, 0x70bd2d, 0x25dfdbfe, {{@in=@local, 0x4d4, 0x2b}, @in=@loopback, {@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e22, 0x8, 0xe, 0x0, 0xa0, 0x73, 0x0, r4}, {{@in6=@mcast2, @in6=@private0, 0x4e22, 0x6, 0x4e23, 0x2, 0x2, 0x20, 0x80, 0x1d, 0x0, r5}, {0x8, 0x8, 0x5, 0x95, 0x7, 0x7fffffff, 0x4, 0x3ff}, {0xdbe6, 0x146, 0x5, 0x1}, 0x100, 0x6e6bb9, 0x1, 0x1, 0x0, 0x2}, 0x3, 0xb, 0x81, 0x70bd25}, [@replay_thresh={0x8, 0xb, 0xfffffff7}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @tfcpad={0x8, 0x16, 0x4}, @proto={0x5, 0x19, 0x6c}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd26, 0x70bd2b, 0x70bd2b, 0x70bd2a, 0x3}}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0xfb, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @policy_type={0xa}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003600)=[{0x2, 0x1, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/175, 0xaf}], &(0x7f0000001d00)=[0x6, 0x2, 0x10001, 0x8, 0x3, 0x4]}, {0x1, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)=""/11, 0xb}], &(0x7f0000001dc0)=[0x8, 0x8, 0x1, 0x559, 0x8000000000000000]}, {0x2, 0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e00)=""/102, 0x66}, {&(0x7f0000001e80)=""/244, 0xf4}], &(0x7f0000001fc0)=[0x3, 0x3, 0x6, 0x8000000000000001]}, {0x3, 0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000002080)=""/39, 0x27}, {&(0x7f00000020c0)=""/186, 0xba}], &(0x7f00000021c0)=[0x9]}, {0x7, 0x1, 0x0, &(0x7f0000003540)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/199, 0xc7}, {&(0x7f0000003300)}, {&(0x7f0000003340)=""/88, 0x58}, {&(0x7f00000033c0)=""/29, 0x1d}, {&(0x7f0000003400)=""/56, 0x38}, {&(0x7f0000003440)=""/246, 0xf6}], &(0x7f00000035c0)=[0x4, 0x8000000000000000, 0x20]}], 0x5) sendmsg$qrtr(r2, &(0x7f0000003bc0)={&(0x7f00000036c0)={0x2a, 0x4, 0x8000}, 0xc, &(0x7f0000003800)=[{&(0x7f0000003700)="9074f0bca101af162871e513c390a94e8baef4262227c2815452831bbe93b76fd30a108ca9ace18acce961bcb28efae209dea04508bae6c38295f9482615e75df475e3278bc6bcbbeafd9d3eb02c7ca12cd0d8a0be99421733aed247987c2c4fc51b68c459a1ee49c5602a14e39f1e2a2a47e33e87bd45d8a25c1bd0b684dfe366216d5e8938813181a1acb7aa025179efc427f9e7b4342c202df0871bc195b4960d9ec99f21ff54ad9d785cb3d06d6a9b867bd7f95afbe3a23c02036d02ca5d64530b830620b3d50a5ba0b311550df199c01f487578cdc4cc83561718bce0e561c9324a", 0xe4}], 0x1, &(0x7f0000003840)=[{0x38, 0x102, 0x80000001, "2574255aab4e355aada5eac2ffe8ca171bead7d5630cc7666ee97754424f55f52bd5"}, {0xd0, 0x112, 0x5, "b06a10c72c3af952078c310c997115d832f29c7061cba96dd3e8a751c449f85deb4a96f87db038c4f9977b33370bcd57ba2d052fc44a0a395fe2df7c105d7910756cd3ef07069750899919ed1a8a8a21739c3cf4b8bbede9f85466fbe8802e58cb5e9852d23cc6c2fa6de1a28624e8ba644a9af3ad248da9d68c7373d54227231b3e0a011fa8d85fd94cae5cc1f55a34060aa554a5648f5f4c9fd2e855318b143bd1f50c1d8695cb6aeefa0b03c1c37058cb71c227f1e85938a68422"}, {0xc8, 0x11, 0x7, "f3bfc26e018571ac7e2e1fd952f145aff1e0465eb842be5cc5c7ad396f5f31bb237682e8405c63ef66e5e988ae85d27ab3820fc5c9d80f94cc90203122dabdceac358fdefe08169c8e43f51d7906f52e61682518c4dfafabfb179fbeb4a7d829521a68cdec36c679434ee84811279999b0470eea4177a8c3c1b1e72f1ec2d1c6f92162d0c8f33fa106c89c2360fa112ec919a4db1d35acae42faf47eadc99d649d77b6e2b522ae767b1162a9ffde5a8c238a45906629"}, {0xa8, 0x118, 0xb80, "d329b22401bec950eb17abc0b8ebef92871ef6f43d21a9f9217369ad4753d824acc9e7ccf54fb63f82b53394dbcb6d6ec709cac188a1a7d77a39d04c5f7219dbda533bcd02b8ea0e2ac1730e32ea20e0ef5f88a0324232c42c771b9067ae458de4d715f58ec9306334b447598bb70618bfeb43c966b9c3493d94318bf32d888c6a667dea65a2be29e0506a50369b700213351520"}, {0xe8, 0x108, 0x8, "399fdde106d2441c6bb3f7e0da1bfe83fd699e2799dbb13b4336b25f2d11716f1353d550af611f1704003d254a9808a8bdc695e5471df15eb732aceb8d350b81d0a6d5e7b6a6c18674ed91ee0e9446d270605d34796ca6d3665bf8a27c8e93501c21c1c39e3596f2c673b509f30c89ad3f2b744f3a0f9e12333524db1eb257097489ab7539807f5e944536162b259b304c2d8ba8b168fb4e1a15d7d4876f5b9dc5db4f698feeaa4206f1716ee7f4d90948a54f4e287df426d328192ce11ce691c46c8e4b207efb66483d69811d8020c7fae460cd2c4680"}], 0x360, 0x9000}, 0x38) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000003c00)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000003c40)=0x723, 0x4) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000003c80)=0x34b2024a, 0xd, 0x6) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000003cc0)={@mcast1, 0x0}, &(0x7f0000003d00)=0x14) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000003d40)={0x2}) socket$inet_dccp(0x2, 0x6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004000)={0x18, 0x10, &(0x7f0000003dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffe0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003e40)='GPL\x00', 0x80000000, 0x34, &(0x7f0000003e80)=""/52, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003ec0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000003f00)={0x4, 0xd, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000003f40)=[r3, r3, r3], &(0x7f0000003f80)=[{0x3, 0x2, 0x7, 0x7}, {0x0, 0x1, 0x10, 0x5}, {0x3, 0x5, 0xa, 0x1}, {0x3, 0x1, 0x0, 0xc}, {0x4, 0x3, 0xd, 0x3}, {0x2, 0x3, 0xb}, {0x0, 0x4, 0x0, 0x8}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000040c0)={&(0x7f0000003d80)='btrfs_sync_file\x00', r7}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000042c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004280)={&(0x7f0000004140)={0x138, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_MASTER={0xc8, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x100, 0x3, 0x701, 0x1]}]}, 0x138}, 0x1, 0x0, 0x0, 0xc880}, 0x4040) sendfile(r2, r0, &(0x7f0000004300)=0x5, 0x84) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000004340)={0x1d, r6}, 0x10) time(&(0x7f0000004380)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004400)={'gre0\x00', &(0x7f00000043c0)=@ethtool_cmd={0x1e, 0x0, 0x9, 0x6, 0x9, 0x81, 0x33, 0xe9, 0x0, 0xc, 0xddca, 0x1000, 0x4, 0xbf, 0x76, 0x3622fadb, [0x2, 0x3]}}) kernel console output (not intermixed with test programs): address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.412305][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.424245][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.426006][ T8364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.448656][ T7953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.457429][ T7953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.466187][ T7953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.475267][ T7953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.486341][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.504114][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.532774][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.578046][ T8375] loop2: detected capacity change from 0 to 512 [ 96.588729][ T8375] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 96.595897][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 96.602412][ T8375] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 96.633166][ T8375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.657818][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'. [ 96.675119][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.708785][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 96.708799][ T29] audit: type=1326 audit(2000000061.350:37098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.748001][ T29] audit: type=1326 audit(2000000061.380:37099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.771536][ T29] audit: type=1326 audit(2000000061.380:37100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.795078][ T29] audit: type=1326 audit(2000000061.380:37101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.818456][ T29] audit: type=1326 audit(2000000061.380:37102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.841963][ T29] audit: type=1326 audit(2000000061.380:37103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.865431][ T29] audit: type=1326 audit(2000000061.380:37104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.888903][ T29] audit: type=1326 audit(2000000061.380:37105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.912364][ T29] audit: type=1326 audit(2000000061.380:37106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.935730][ T29] audit: type=1326 audit(2000000061.380:37107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 96.963841][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 96.975020][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1271'. [ 97.031273][ T8409] loop0: detected capacity change from 0 to 128 [ 97.032053][ T8408] loop2: detected capacity change from 0 to 512 [ 97.044261][ T8408] EXT4-fs: dax option not supported [ 97.061288][ T8403] netlink: 'syz.4.1271': attribute type 10 has an invalid length. [ 97.114238][ T8403] veth0_vlan: left promiscuous mode [ 97.131870][ T8403] veth0_vlan: entered promiscuous mode [ 97.138524][ T3074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.149146][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 97.171003][ T8403] team0: Device veth0_vlan failed to register rx_handler [ 97.201771][ T8409] loop0: detected capacity change from 0 to 1024 [ 97.215552][ T8409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.235789][ T8411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1271'. [ 97.258868][ T8409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 97.272647][ T8409] System zones: 0-1, 3-12 [ 97.277824][ T8409] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.293963][ T8418] loop2: detected capacity change from 0 to 512 [ 97.304886][ T8418] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 97.314574][ T8418] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 97.323742][ T8418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.359206][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.371171][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 97.452348][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 97.458283][ T8423] loop0: detected capacity change from 0 to 512 [ 97.461349][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 97.481051][ T8423] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.1280: casefold flag without casefold feature [ 97.497628][ T8423] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1280: couldn't read orphan inode 15 (err -117) [ 97.513151][ T8423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.536641][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.553016][ T8393] delete_channel: no stack [ 97.579935][ T8431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=8431 comm=syz.4.1285 [ 97.645217][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.722179][ T8447] loop4: detected capacity change from 0 to 512 [ 97.729494][ T8447] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 97.739286][ T8447] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 97.748773][ T8447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.776187][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.467224][ T8461] loop2: detected capacity change from 0 to 2048 [ 98.603678][ T8503] netlink: 'syz.3.1309': attribute type 33 has an invalid length. [ 98.608003][ T8504] loop0: detected capacity change from 0 to 512 [ 98.636896][ T8504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.654005][ T8504] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.665252][ T8504] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1308: corrupted xattr block 32: invalid header [ 98.666280][ T8512] team0 (unregistering): Port device team_slave_0 removed [ 98.687351][ T8504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.696480][ T8504] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1308: corrupted xattr block 32: invalid header [ 98.699631][ T8512] team0 (unregistering): Port device team_slave_1 removed [ 98.718377][ T8504] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1308: corrupted xattr block 32: invalid header [ 98.733205][ T8512] team0 (unregistering): Port device netdevsim1 removed [ 98.753094][ T8504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.764961][ T8516] batadv_slave_0: entered promiscuous mode [ 98.771681][ T8507] batadv_slave_0: left promiscuous mode [ 98.796199][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.322354][ T8467] delete_channel: no stack [ 99.583227][ T8567] program syz.3.1327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.902882][ T8582] 9pnet_fd: Insufficient options for proto=fd [ 99.965259][ T8591] team0: Device ipvlan0 failed to register rx_handler [ 99.982236][ T8591] loop0: detected capacity change from 0 to 512 [ 99.989110][ T8591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.999735][ T8591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 100.007905][ T8591] System zones: 1-12 [ 100.012429][ T8591] EXT4-fs (loop0): 1 truncate cleaned up [ 100.018649][ T8591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.031963][ T8591] syz.0.1337 (8591): attempted to duplicate a private mapping with mremap. This is not supported. [ 100.246766][ T8612] loop4: detected capacity change from 0 to 128 [ 100.764268][ T8631] tmpfs: Unknown parameter 'nræ´ìµP‘él›ä' [ 100.778657][ T8631] __nla_validate_parse: 3 callbacks suppressed [ 100.778666][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1348'. [ 100.802999][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.874119][ T8636] netlink: 432 bytes leftover after parsing attributes in process `syz.0.1350'. [ 100.887805][ T8636] syz_tun: entered promiscuous mode [ 100.894284][ T8636] batadv_slave_0: entered promiscuous mode [ 100.937608][ T8643] FAULT_INJECTION: forcing a failure. [ 100.937608][ T8643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.950807][ T8643] CPU: 0 PID: 8643 Comm: syz.0.1353 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 100.960869][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.970924][ T8643] Call Trace: [ 100.974246][ T8643] [ 100.977231][ T8643] dump_stack_lvl+0xf2/0x150 [ 100.981881][ T8643] dump_stack+0x15/0x20 [ 100.986079][ T8643] should_fail_ex+0x229/0x230 [ 100.990772][ T8643] should_fail+0xb/0x10 [ 100.994957][ T8643] should_fail_usercopy+0x1a/0x20 [ 101.000055][ T8643] _copy_from_user+0x1e/0xd0 [ 101.004634][ T8643] input_event_from_user+0x126/0x1e0 [ 101.009945][ T8643] ? input_inject_event+0xe1/0x100 [ 101.015120][ T8643] evdev_write+0x288/0x420 [ 101.019598][ T8643] ? __pfx_evdev_write+0x10/0x10 [ 101.024538][ T8643] vfs_write+0x28b/0x900 [ 101.028829][ T8643] ? __fget_files+0x1da/0x210 [ 101.033508][ T8643] ksys_write+0xeb/0x1b0 [ 101.037775][ T8643] __x64_sys_write+0x42/0x50 [ 101.042411][ T8643] x64_sys_call+0x27ef/0x2d70 [ 101.047113][ T8643] do_syscall_64+0xc9/0x1c0 [ 101.051622][ T8643] ? clear_bhb_loop+0x55/0xb0 [ 101.056329][ T8643] ? clear_bhb_loop+0x55/0xb0 [ 101.060993][ T8643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.066889][ T8643] RIP: 0033:0x7fbd242c0bd9 [ 101.071295][ T8643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.090951][ T8643] RSP: 002b:00007fbd23542048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.099470][ T8643] RAX: ffffffffffffffda RBX: 00007fbd2444ef60 RCX: 00007fbd242c0bd9 [ 101.107477][ T8643] RDX: 0000000000001068 RSI: 0000000020000040 RDI: 0000000000000006 [ 101.115455][ T8643] RBP: 00007fbd235420a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.123424][ T8643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.131379][ T8643] R13: 000000000000000b R14: 00007fbd2444ef60 R15: 00007ffef0421028 [ 101.139363][ T8643] [ 101.164145][ T8647] netlink: 'syz.0.1355': attribute type 10 has an invalid length. [ 101.184045][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.192295][ T8647] bond0: (slave team0): Enslaving as an active interface with an up link [ 101.202088][ T8651] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 101.205524][ T8653] loop2: detected capacity change from 0 to 512 [ 101.218166][ T8651] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 101.246038][ T8653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.281037][ T8653] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.349229][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 101.408688][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 101.463317][ T8678] loop4: detected capacity change from 0 to 256 [ 101.471858][ T8678] FAT-fs (loop4): bogus logical sector size 8 [ 101.478029][ T8678] FAT-fs (loop4): Can't find a valid FAT filesystem [ 101.485654][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.545669][ T8681] loop4: detected capacity change from 0 to 4096 [ 101.567323][ T3481] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 101.642877][ T8689] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 101.703795][ T8693] syz_tun: entered promiscuous mode [ 101.710648][ T8693] batadv_slave_1: entered promiscuous mode [ 101.716766][ T8693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.724950][ T8693] Cannot create hsr debugfs directory [ 101.943446][ T8702] loop4: detected capacity change from 0 to 512 [ 101.954520][ T8702] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 101.967897][ T8702] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 101.975815][ T8702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.999410][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.100455][ T8705] hub 6-0:1.0: USB hub found [ 102.105278][ T8705] hub 6-0:1.0: 8 ports detected [ 102.168500][ T8707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1376'. [ 102.189110][ T8711] netlink: 'syz.0.1378': attribute type 4 has an invalid length. [ 102.232372][ T8718] FAULT_INJECTION: forcing a failure. [ 102.232372][ T8718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.245480][ T8718] CPU: 0 PID: 8718 Comm: syz.3.1381 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 102.255534][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.265591][ T8718] Call Trace: [ 102.268864][ T8718] [ 102.271774][ T8718] dump_stack_lvl+0xf2/0x150 [ 102.276366][ T8718] dump_stack+0x15/0x20 [ 102.280574][ T8718] should_fail_ex+0x229/0x230 [ 102.285242][ T8718] should_fail+0xb/0x10 [ 102.289387][ T8718] should_fail_usercopy+0x1a/0x20 [ 102.294474][ T8718] copy_page_from_iter_atomic+0x410/0xda0 [ 102.300246][ T8718] ? shmem_write_begin+0xa0/0x1c0 [ 102.305260][ T8718] ? shmem_write_begin+0x10c/0x1c0 [ 102.310370][ T8718] generic_perform_write+0x21a/0x410 [ 102.315720][ T8718] ? __pfx_shmem_write_end+0x10/0x10 [ 102.321049][ T8718] shmem_file_write_iter+0xc8/0xf0 [ 102.326150][ T8718] do_iter_readv_writev+0x339/0x3e0 [ 102.331394][ T8718] vfs_writev+0x2e0/0x880 [ 102.335740][ T8718] __se_sys_pwritev2+0x10c/0x1d0 [ 102.340692][ T8718] __x64_sys_pwritev2+0x78/0x90 [ 102.345552][ T8718] x64_sys_call+0x274f/0x2d70 [ 102.350265][ T8718] do_syscall_64+0xc9/0x1c0 [ 102.354758][ T8718] ? clear_bhb_loop+0x55/0xb0 [ 102.359493][ T8718] ? clear_bhb_loop+0x55/0xb0 [ 102.364243][ T8718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.370170][ T8718] RIP: 0033:0x7f0b4f228bd9 [ 102.374589][ T8718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.394411][ T8718] RSP: 002b:00007f0b4e4aa048 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 102.402938][ T8718] RAX: ffffffffffffffda RBX: 00007f0b4f3b6f60 RCX: 00007f0b4f228bd9 [ 102.410893][ T8718] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000005 [ 102.418850][ T8718] RBP: 00007f0b4e4aa0a0 R08: 0000000000000000 R09: 0000000000000003 [ 102.426838][ T8718] R10: 0000000000001800 R11: 0000000000000246 R12: 0000000000000002 [ 102.434855][ T8718] R13: 000000000000000b R14: 00007f0b4f3b6f60 R15: 00007ffe5dacae58 [ 102.442864][ T8718] [ 102.478214][ T8723] gre0: entered promiscuous mode [ 102.483460][ T8723] vlan2: entered promiscuous mode [ 102.494176][ T8723] gre0: left promiscuous mode [ 102.575929][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 102.575943][ T29] audit: type=1400 audit(2000000067.210:37322): avc: denied { map } for pid=8732 comm="syz.3.1388" path="socket:[23337]" dev="sockfs" ino=23337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 102.621398][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 102.647460][ T8737] netlink: 'syz.3.1389': attribute type 4 has an invalid length. [ 102.674896][ T29] audit: type=1326 audit(2000000067.310:37323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.699329][ T29] audit: type=1326 audit(2000000067.310:37324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.722916][ T29] audit: type=1326 audit(2000000067.310:37325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.746396][ T29] audit: type=1326 audit(2000000067.310:37326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.769852][ T29] audit: type=1326 audit(2000000067.310:37327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.793441][ T29] audit: type=1326 audit(2000000067.310:37328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.816834][ T29] audit: type=1326 audit(2000000067.310:37329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.840331][ T29] audit: type=1326 audit(2000000067.310:37330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.863847][ T29] audit: type=1326 audit(2000000067.310:37331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a050bbd9 code=0x7ffc0000 [ 102.906288][ T8760] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1394'. [ 102.915746][ T8760] gretap0: entered promiscuous mode [ 102.930627][ T8762] loop0: detected capacity change from 0 to 1024 [ 102.939759][ T8762] EXT4-fs (loop0): inodes count not valid: 32 vs 67 [ 103.029122][ T8766] loop0: detected capacity change from 0 to 512 [ 103.038276][ T8766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.051000][ T8766] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.062172][ T8766] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1398: corrupted xattr block 32: invalid header [ 103.075604][ T8766] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 103.084658][ T8766] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1398: corrupted xattr block 32: invalid header [ 103.098078][ T8766] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1398: corrupted xattr block 32: invalid header [ 103.111471][ T8766] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 103.131741][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.212708][ T8780] netlink: 'syz.0.1403': attribute type 4 has an invalid length. [ 103.448687][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1407'. [ 103.511893][ T8809] loop2: detected capacity change from 0 to 256 [ 103.818715][ T8824] loop4: detected capacity change from 0 to 512 [ 103.846535][ T8824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 103.877298][ T8824] System zones: 1-12 [ 103.888303][ T8824] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1417: invalid indirect mapped block 8 (level 2) [ 103.933845][ T8824] EXT4-fs (loop4): Remounting filesystem read-only [ 103.954607][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 103.966176][ T8824] EXT4-fs (loop4): 1 truncate cleaned up [ 103.987833][ T8824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.013430][ T8824] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 104.021356][ T8824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.049802][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.056981][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.065609][ T8825] bridge_slave_0: entered allmulticast mode [ 104.076288][ T8825] bridge_slave_0: entered promiscuous mode [ 104.094557][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.096972][ T8824] loop4: detected capacity change from 0 to 512 [ 104.101708][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.129990][ T8824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.138418][ T8825] bridge_slave_1: entered allmulticast mode [ 104.160935][ T8824] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.164420][ T8825] bridge_slave_1: entered promiscuous mode [ 104.210704][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.226235][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.250772][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.288355][ T8825] team0: Port device team_slave_0 added [ 104.319169][ T8825] team0: Port device team_slave_1 added [ 104.366183][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.373163][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.399275][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.447483][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.454525][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.480466][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.513918][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881112f3400: rx timeout, send abort [ 104.513971][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881112f2400: rx timeout, send abort [ 104.514007][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881112f3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.514054][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881112f2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.552959][ T8825] hsr_slave_0: entered promiscuous mode [ 104.553629][ T8825] hsr_slave_1: entered promiscuous mode [ 104.556659][ T8825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.556671][ T8825] Cannot create hsr debugfs directory [ 104.568488][ T8880] netlink: 'syz.4.1430': attribute type 10 has an invalid length. [ 104.735267][ T8825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.776941][ T8848] delete_channel: no stack [ 104.795931][ T8825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.832963][ T8825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.986277][ T8825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.063953][ T8825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.075994][ T8825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.122217][ T8825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.150256][ T8825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.252656][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.271571][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.271912][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'. [ 105.289898][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.297043][ T7836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.307552][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.314659][ T7836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.343916][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'. [ 105.354953][ T8825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.435046][ T8938] netlink: 'syz.3.1450': attribute type 9 has an invalid length. [ 105.450531][ T8938] bond0: entered promiscuous mode [ 105.455590][ T8938] bond_slave_0: entered promiscuous mode [ 105.461432][ T8938] bond_slave_1: entered promiscuous mode [ 105.467206][ T8938] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 105.481043][ T8938] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.497234][ T8938] bond0: left promiscuous mode [ 105.502025][ T8938] bond_slave_0: left promiscuous mode [ 105.507574][ T8938] bond_slave_1: left promiscuous mode [ 105.513032][ T8938] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 105.546243][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.665688][ T8825] veth0_vlan: entered promiscuous mode [ 105.679365][ T8825] veth1_vlan: entered promiscuous mode [ 105.691334][ T8970] FAULT_INJECTION: forcing a failure. [ 105.691334][ T8970] name failslab, interval 1, probability 0, space 0, times 0 [ 105.704051][ T8970] CPU: 1 PID: 8970 Comm: syz.3.1459 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 105.714157][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.724204][ T8970] Call Trace: [ 105.727511][ T8970] [ 105.730432][ T8970] dump_stack_lvl+0xf2/0x150 [ 105.735039][ T8970] dump_stack+0x15/0x20 [ 105.739268][ T8970] should_fail_ex+0x229/0x230 [ 105.743944][ T8970] ? kvmalloc_node_noprof+0x72/0x170 [ 105.749229][ T8970] __should_failslab+0x92/0xa0 [ 105.753990][ T8970] should_failslab+0x9/0x20 [ 105.758497][ T8970] __kmalloc_node_noprof+0xa8/0x380 [ 105.763752][ T8970] kvmalloc_node_noprof+0x72/0x170 [ 105.768876][ T8970] alloc_netdev_mqs+0x568/0x8b0 [ 105.773776][ T8970] br_add_bridge+0x35/0xc0 [ 105.778299][ T8970] br_ioctl_stub+0x2b9/0x5d0 [ 105.782896][ T8970] ? do_vfs_ioctl+0x99e/0x1560 [ 105.787725][ T8970] ? __pfx_br_ioctl_stub+0x10/0x10 [ 105.792834][ T8970] sock_ioctl+0x439/0x640 [ 105.797164][ T8970] ? __pfx_sock_ioctl+0x10/0x10 [ 105.802081][ T8970] __se_sys_ioctl+0xd3/0x150 [ 105.806758][ T8970] __x64_sys_ioctl+0x43/0x50 [ 105.811434][ T8970] x64_sys_call+0x1581/0x2d70 [ 105.816133][ T8970] do_syscall_64+0xc9/0x1c0 [ 105.820699][ T8970] ? clear_bhb_loop+0x55/0xb0 [ 105.825451][ T8970] ? clear_bhb_loop+0x55/0xb0 [ 105.830166][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.836121][ T8970] RIP: 0033:0x7f0b4f228bd9 [ 105.840594][ T8970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.860204][ T8970] RSP: 002b:00007f0b4e4aa048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.868646][ T8970] RAX: ffffffffffffffda RBX: 00007f0b4f3b6f60 RCX: 00007f0b4f228bd9 [ 105.876644][ T8970] RDX: 0000000020000040 RSI: 00000000000089a0 RDI: 0000000000000006 [ 105.884635][ T8970] RBP: 00007f0b4e4aa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.892602][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.900566][ T8970] R13: 000000000000000b R14: 00007f0b4f3b6f60 R15: 00007ffe5dacae58 [ 105.908552][ T8970] [ 105.937980][ T8825] veth0_macvtap: entered promiscuous mode [ 105.953762][ T8825] veth1_macvtap: entered promiscuous mode [ 105.974978][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.985433][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.995332][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.005771][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.015690][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.026134][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.036020][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.046449][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.050006][ T8904] delete_channel: no stack [ 106.056324][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.071444][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.081280][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.091711][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.103859][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.118816][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.129350][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.139390][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.149820][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.159798][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.170338][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.180303][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.190752][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.200564][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.211011][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.220824][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.231249][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.251417][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.253686][ T8987] loop0: detected capacity change from 0 to 2048 [ 106.269130][ T8825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.277997][ T8825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.286708][ T8825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.295517][ T8825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.314800][ T8987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.328565][ T8995] __nla_validate_parse: 3 callbacks suppressed [ 106.328579][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 106.341595][ T8987] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.1466: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 106.346126][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 106.363297][ T8987] EXT4-fs (loop0): Remounting filesystem read-only [ 106.393743][ T9001] 9pnet: Could not find request transport: f4 [ 106.483109][ T8997] loop2: detected capacity change from 0 to 1024 [ 106.483305][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 106.492916][ T8997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.506822][ T9011] netlink: 'syz.1.1415': attribute type 5 has an invalid length. [ 106.511201][ T8997] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 106.514734][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 106.525585][ T8997] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 106.544617][ T8997] EXT4-fs (loop2): group descriptors corrupted! [ 106.686453][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.727926][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 106.754336][ T9032] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1481'. [ 106.765288][ T9033] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1481'. [ 106.795797][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 106.798422][ T9041] loop0: detected capacity change from 0 to 1024 [ 106.819927][ T9041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.841292][ T9044] loop2: detected capacity change from 0 to 256 [ 106.847952][ T9044] FAT-fs (loop2): Unrecognized mount option "vfat" or missing value [ 106.848355][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.898548][ T9051] loop2: detected capacity change from 0 to 512 [ 106.908189][ T9051] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 106.928461][ T9051] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 106.936688][ T9051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.963734][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.986136][ T9049] loop4: detected capacity change from 0 to 2048 [ 106.988934][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 107.018208][ T9062] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 107.045427][ T9066] FAULT_INJECTION: forcing a failure. [ 107.045427][ T9066] name failslab, interval 1, probability 0, space 0, times 0 [ 107.058129][ T9066] CPU: 0 PID: 9066 Comm: syz.0.1493 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 107.068215][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.078256][ T9066] Call Trace: [ 107.081588][ T9066] [ 107.084504][ T9066] dump_stack_lvl+0xf2/0x150 [ 107.089134][ T9066] dump_stack+0x15/0x20 [ 107.093350][ T9066] should_fail_ex+0x229/0x230 [ 107.098135][ T9066] ? hid_allocate_device+0x2f/0x1c0 [ 107.103334][ T9066] __should_failslab+0x92/0xa0 [ 107.108088][ T9066] should_failslab+0x9/0x20 [ 107.112610][ T9066] kmalloc_trace_noprof+0x4b/0x2a0 [ 107.117946][ T9066] hid_allocate_device+0x2f/0x1c0 [ 107.122981][ T9066] uhid_dev_create2+0xbd/0x2c0 [ 107.127771][ T9066] uhid_char_write+0x232/0x5c0 [ 107.132532][ T9066] ? __pfx_uhid_char_write+0x10/0x10 [ 107.137807][ T9066] vfs_write+0x28b/0x900 [ 107.142042][ T9066] ? __fget_files+0x1da/0x210 [ 107.146763][ T9066] ksys_write+0xeb/0x1b0 [ 107.151002][ T9066] __x64_sys_write+0x42/0x50 [ 107.155582][ T9066] x64_sys_call+0x27ef/0x2d70 [ 107.160261][ T9066] do_syscall_64+0xc9/0x1c0 [ 107.164755][ T9066] ? clear_bhb_loop+0x55/0xb0 [ 107.169436][ T9066] ? clear_bhb_loop+0x55/0xb0 [ 107.174191][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.180079][ T9066] RIP: 0033:0x7fbd242c0bd9 [ 107.184487][ T9066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.204125][ T9066] RSP: 002b:00007fbd23542048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.212533][ T9066] RAX: ffffffffffffffda RBX: 00007fbd2444ef60 RCX: 00007fbd242c0bd9 [ 107.220496][ T9066] RDX: 0000000000000119 RSI: 0000000020000900 RDI: 0000000000000004 [ 107.228455][ T9066] RBP: 00007fbd235420a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.236485][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.244443][ T9066] R13: 000000000000000b R14: 00007fbd2444ef60 R15: 00007ffef0421028 [ 107.252504][ T9066] [ 107.306043][ T9072] loop0: detected capacity change from 0 to 764 [ 107.324531][ T9079] netlink: 'syz.4.1494': attribute type 2 has an invalid length. [ 107.350633][ T3480] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 107.417337][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 107.513735][ T9091] loop2: detected capacity change from 0 to 2048 [ 107.625907][ T9119] tmpfs: Bad value for 'nr_inodes' [ 107.629729][ T9119] netlink: 'syz.3.1515': attribute type 10 has an invalid length. [ 107.644433][ T9119] bond0: (slave netdevsim1): Releasing backup interface [ 107.646566][ T9121] loop1: detected capacity change from 0 to 512 [ 107.654718][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 107.654731][ T29] audit: type=1400 audit(2000000072.280:37551): avc: denied { read } for pid=9116 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.663940][ T9121] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.663957][ T9121] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 107.663970][ T9121] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 107.676266][ T9123] loop0: detected capacity change from 0 to 512 [ 107.702639][ T9119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24592 sclass=netlink_route_socket pid=9119 comm=syz.3.1515 [ 107.739655][ T9123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.764700][ T9123] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.823969][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.893370][ T9142] loop1: detected capacity change from 0 to 512 [ 107.914117][ T9142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.927346][ T9147] 9pnet_fd: Insufficient options for proto=fd [ 107.939938][ T29] audit: type=1326 audit(2000000072.580:37552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 107.967005][ T9142] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.978190][ T29] audit: type=1326 audit(2000000072.600:37553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 108.001659][ T29] audit: type=1326 audit(2000000072.600:37554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 108.025134][ T29] audit: type=1326 audit(2000000072.600:37555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 108.048640][ T29] audit: type=1326 audit(2000000072.600:37556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 108.072113][ T29] audit: type=1326 audit(2000000072.600:37557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 108.095454][ T29] audit: type=1326 audit(2000000072.600:37558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 108.119087][ T29] audit: type=1326 audit(2000000072.610:37559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 108.142663][ T29] audit: type=1326 audit(2000000072.610:37560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.0.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 108.278518][ T9161] netlink: 'syz.0.1529': attribute type 12 has an invalid length. [ 108.434803][ T9163] netlink: 'syz.3.1530': attribute type 4 has an invalid length. [ 108.633192][ T9177] FAULT_INJECTION: forcing a failure. [ 108.633192][ T9177] name failslab, interval 1, probability 0, space 0, times 0 [ 108.645878][ T9177] CPU: 1 PID: 9177 Comm: syz.0.1536 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 108.655945][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 108.666056][ T9177] Call Trace: [ 108.669328][ T9177] [ 108.672251][ T9177] dump_stack_lvl+0xf2/0x150 [ 108.676854][ T9177] dump_stack+0x15/0x20 [ 108.681086][ T9177] should_fail_ex+0x229/0x230 [ 108.685819][ T9177] ? audit_log_d_path+0x96/0x250 [ 108.690342][ T9175] loop2: detected capacity change from 0 to 2048 [ 108.690784][ T9177] __should_failslab+0x92/0xa0 [ 108.701824][ T9177] should_failslab+0x9/0x20 [ 108.706364][ T9177] kmalloc_trace_noprof+0x4b/0x2a0 [ 108.711534][ T9177] audit_log_d_path+0x96/0x250 [ 108.716298][ T9177] ? get_file_rcu+0xf4/0x110 [ 108.720944][ T9177] ? __rcu_read_unlock+0x4e/0x70 [ 108.725889][ T9177] audit_log_d_path_exe+0x45/0x80 [ 108.730993][ T9177] audit_log_task+0x155/0x180 [ 108.735725][ T9177] audit_seccomp+0x68/0x130 [ 108.740275][ T9177] __seccomp_filter+0x6fa/0x1180 [ 108.745239][ T9177] ? lookup_ioctx+0x25/0x1e0 [ 108.749832][ T9177] ? __get_user_nocheck_8+0x20/0x20 [ 108.755042][ T9177] __secure_computing+0x9f/0x1c0 [ 108.760002][ T9177] syscall_trace_enter+0xd1/0x1f0 [ 108.764380][ T9185] tap0: tun_chr_ioctl cmd 1074025694 [ 108.765014][ T9177] ? fpregs_assert_state_consistent+0x83/0xa0 [ 108.776353][ T9177] do_syscall_64+0xaa/0x1c0 [ 108.780897][ T9177] ? clear_bhb_loop+0x55/0xb0 [ 108.785609][ T9177] ? clear_bhb_loop+0x55/0xb0 [ 108.790299][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.796174][ T9177] RIP: 0033:0x7fbd242bf6bc [ 108.800565][ T9177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 108.820318][ T9177] RSP: 002b:00007fbd23542040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.828740][ T9177] RAX: ffffffffffffffda RBX: 00007fbd2444ef60 RCX: 00007fbd242bf6bc [ 108.836739][ T9177] RDX: 000000000000000f RSI: 00007fbd235420b0 RDI: 000000000000000c [ 108.844686][ T9177] RBP: 00007fbd235420a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.852680][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.860630][ T9177] R13: 000000000000000b R14: 00007fbd2444ef60 R15: 00007ffef0421028 [ 108.868617][ T9177] [ 108.911900][ T8825] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 109.066244][ T9208] FAULT_INJECTION: forcing a failure. [ 109.066244][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 109.066265][ T9208] CPU: 1 PID: 9208 Comm: syz.2.1545 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 109.066288][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 109.066301][ T9208] Call Trace: [ 109.066307][ T9208] [ 109.105154][ T9208] dump_stack_lvl+0xf2/0x150 [ 109.105184][ T9208] dump_stack+0x15/0x20 [ 109.105214][ T9208] should_fail_ex+0x229/0x230 [ 109.118572][ T9208] ? __nf_conntrack_alloc+0xcd/0x280 [ 109.118599][ T9208] __should_failslab+0x92/0xa0 [ 109.118625][ T9208] should_failslab+0x9/0x20 [ 109.133265][ T9208] kmem_cache_alloc_noprof+0x4c/0x290 [ 109.133296][ T9208] __nf_conntrack_alloc+0xcd/0x280 [ 109.133365][ T9208] init_conntrack+0x191/0x970 [ 109.133392][ T9208] nf_conntrack_in+0x899/0xf20 [ 109.153326][ T9208] ipv4_conntrack_local+0xc9/0x150 [ 109.153350][ T9208] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 109.153396][ T9208] nf_hook_slow+0x86/0x1b0 [ 109.153417][ T9208] __ip_local_out+0x2d6/0x300 [ 109.173372][ T9208] ? __pfx_dst_output+0x10/0x10 [ 109.173399][ T9208] __ip_queue_xmit+0xb35/0xbf0 [ 109.173427][ T9208] ip_queue_xmit+0x38/0x50 [ 109.173489][ T9208] ? __pfx_ip_queue_xmit+0x10/0x10 [ 109.173514][ T9208] __tcp_transmit_skb+0x15b0/0x1970 [ 109.173607][ T9208] ? skb_release_data+0x583/0x5a0 [ 109.173640][ T9208] tcp_connect+0x1dea/0x2200 [ 109.173665][ T9208] tcp_sendmsg_fastopen+0x1f0/0x4f0 [ 109.173760][ T9208] ? __pfx_tcp_sendmsg+0x10/0x10 [ 109.173788][ T9208] tcp_sendmsg_locked+0x2445/0x2640 [ 109.173817][ T9208] ? xa_load+0xb9/0xe0 [ 109.173881][ T9208] ? cgroup_rstat_updated+0x99/0x550 [ 109.173915][ T9208] ? __rcu_read_unlock+0x4e/0x70 [ 109.174036][ T9208] ? avc_has_perm_noaudit+0x1cc/0x210 [ 109.174066][ T9208] ? avc_has_perm+0xd4/0x160 [ 109.174087][ T9208] ? _raw_spin_unlock_bh+0x36/0x40 [ 109.174114][ T9208] ? __pfx_tcp_sendmsg+0x10/0x10 [ 109.174182][ T9208] tcp_sendmsg+0x30/0x50 [ 109.174277][ T9208] inet_sendmsg+0x77/0xd0 [ 109.174302][ T9208] __sock_sendmsg+0x102/0x180 [ 109.174323][ T9208] sock_write_iter+0x164/0x1b0 [ 109.174354][ T9208] ? __pfx_sock_write_iter+0x10/0x10 [ 109.174454][ T9208] io_write+0x395/0xa40 [ 109.174475][ T9208] io_issue_sqe+0x150/0xc80 [ 109.174566][ T9208] ? io_prep_rw+0x415/0x440 [ 109.174586][ T9208] io_submit_sqes+0x6c5/0x1080 [ 109.174607][ T9208] ? __rcu_read_unlock+0x4e/0x70 [ 109.304188][ T9208] ? xa_load+0xb9/0xe0 [ 109.304215][ T9208] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 109.304240][ T9208] ? __fget_files+0x1da/0x210 [ 109.304295][ T9208] ? fput+0x13b/0x180 [ 109.304315][ T9208] ? ksys_write+0x178/0x1b0 [ 109.304341][ T9208] __x64_sys_io_uring_enter+0x78/0x90 [ 109.304365][ T9208] x64_sys_call+0x25ab/0x2d70 [ 109.304461][ T9208] do_syscall_64+0xc9/0x1c0 [ 109.304489][ T9208] ? clear_bhb_loop+0x55/0xb0 [ 109.304513][ T9208] ? clear_bhb_loop+0x55/0xb0 [ 109.304596][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.304622][ T9208] RIP: 0033:0x7fc5658e0bd9 [ 109.304655][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.304670][ T9208] RSP: 002b:00007fc564b62048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 109.304689][ T9208] RAX: ffffffffffffffda RBX: 00007fc565a6ef60 RCX: 00007fc5658e0bd9 [ 109.304702][ T9208] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 109.405470][ T9208] RBP: 00007fc564b620a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.405484][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.405496][ T9208] R13: 000000000000000b R14: 00007fc565a6ef60 R15: 00007fff4955cfe8 [ 109.429389][ T9208] [ 109.487812][ T9222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34323 sclass=netlink_route_socket pid=9222 comm=syz.3.1548 [ 109.571725][ T9233] xt_hashlimit: max too large, truncated to 1048576 [ 109.583271][ T9233] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 109.593804][ T9233] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 109.600177][ T9233] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 109.609320][ T9233] hsr_slave_0: left promiscuous mode [ 109.617622][ T9237] loop2: detected capacity change from 0 to 512 [ 109.624675][ T9233] hsr_slave_1: left promiscuous mode [ 109.646261][ T9233] bridge0: port 3(hsr0) entered disabled state [ 109.655108][ T9237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.672108][ T9237] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.686396][ T9233] hsr0 (unregistering): left allmulticast mode [ 109.692721][ T9233] hsr0 (unregistering): left promiscuous mode [ 109.698908][ T9233] bridge0: port 3(hsr0) entered disabled state [ 109.729680][ T9237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.882423][ T9252] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 109.918920][ T9242] loop2: detected capacity change from 0 to 2048 [ 109.953886][ T9259] FAULT_INJECTION: forcing a failure. [ 109.953886][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 109.966599][ T9259] CPU: 1 PID: 9259 Comm: syz.3.1561 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 109.976661][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 109.986708][ T9259] Call Trace: [ 109.989979][ T9259] [ 109.992984][ T9259] dump_stack_lvl+0xf2/0x150 [ 109.997582][ T9259] dump_stack+0x15/0x20 [ 110.001732][ T9259] should_fail_ex+0x229/0x230 [ 110.006417][ T9259] ? skb_clone+0x154/0x1f0 [ 110.010964][ T9259] __should_failslab+0x92/0xa0 [ 110.015725][ T9259] should_failslab+0x9/0x20 [ 110.020286][ T9259] kmem_cache_alloc_noprof+0x4c/0x290 [ 110.025661][ T9259] skb_clone+0x154/0x1f0 [ 110.029971][ T9259] __netlink_deliver_tap+0x2bd/0x4c0 [ 110.035251][ T9259] netlink_unicast+0x63b/0x660 [ 110.040019][ T9259] netlink_sendmsg+0x5ca/0x6e0 [ 110.044770][ T9259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.050130][ T9259] __sock_sendmsg+0x140/0x180 [ 110.054803][ T9259] ____sys_sendmsg+0x312/0x410 [ 110.059592][ T9259] __sys_sendmsg+0x1e9/0x280 [ 110.064286][ T9259] __x64_sys_sendmsg+0x46/0x50 [ 110.069119][ T9259] x64_sys_call+0xb25/0x2d70 [ 110.073715][ T9259] do_syscall_64+0xc9/0x1c0 [ 110.078303][ T9259] ? clear_bhb_loop+0x55/0xb0 [ 110.083041][ T9259] ? clear_bhb_loop+0x55/0xb0 [ 110.087790][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.093683][ T9259] RIP: 0033:0x7f0b4f228bd9 [ 110.098095][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.117707][ T9259] RSP: 002b:00007f0b4e4aa048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.126145][ T9259] RAX: ffffffffffffffda RBX: 00007f0b4f3b6f60 RCX: 00007f0b4f228bd9 [ 110.134218][ T9259] RDX: 0000000000000000 RSI: 0000000020000cc0 RDI: 0000000000000006 [ 110.142185][ T9259] RBP: 00007f0b4e4aa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.150180][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.158147][ T9259] R13: 000000000000000b R14: 00007f0b4f3b6f60 R15: 00007ffe5dacae58 [ 110.166115][ T9259] [ 110.258393][ T9265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27677 sclass=netlink_route_socket pid=9265 comm=syz.0.1562 [ 110.349096][ T9278] netlink: 'syz.2.1566': attribute type 16 has an invalid length. [ 110.356650][ T9276] loop0: detected capacity change from 0 to 512 [ 110.369610][ T9279] loop4: detected capacity change from 0 to 512 [ 110.384065][ T9279] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.400913][ T9276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.413613][ T9276] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.425782][ T9279] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.432366][ T9279] EXT4-fs error (device loop4): __ext4_iget:4906: inode #15: block 1627517706: comm syz.4.1568: invalid block [ 110.446049][ T9276] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1567: corrupted xattr block 32: invalid header [ 110.467689][ T9279] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1568: couldn't read orphan inode 15 (err -117) [ 110.474823][ T9276] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 110.489038][ T9279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.502995][ T9276] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1567: corrupted xattr block 32: invalid header [ 110.503120][ T9276] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1567: corrupted xattr block 32: invalid header [ 110.503541][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.503577][ T9276] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 110.531082][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.569695][ T9292] loop4: detected capacity change from 0 to 512 [ 110.597190][ T9292] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1571: casefold flag without casefold feature [ 110.628778][ T9292] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1571: couldn't read orphan inode 15 (err -117) [ 110.651163][ T9292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.705509][ T9291] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.712677][ T9291] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.733388][ T9291] bridge0: entered promiscuous mode [ 110.794993][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.882539][ T9320] bond1: (slave macvlan2): Opening slave failed [ 110.939397][ T9325] netlink: 'syz.4.1580': attribute type 39 has an invalid length. [ 110.957927][ T9325] veth1_macvtap: left promiscuous mode [ 111.081150][ T9334] xt_hashlimit: max too large, truncated to 1048576 [ 111.099359][ T9334] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 111.128286][ T9334] syz_tun: left promiscuous mode [ 111.134129][ T9334] batadv_slave_1: left promiscuous mode [ 111.272379][ T9348] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20002 [ 111.292831][ T9350] netlink: 'syz.3.1587': attribute type 4 has an invalid length. [ 111.502901][ T9372] xt_hashlimit: max too large, truncated to 1048576 [ 111.523863][ T9372] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 111.551124][ T9372] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 111.557609][ T9372] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 111.578940][ T9372] hsr_slave_0: left promiscuous mode [ 111.590157][ T9372] hsr_slave_1: left promiscuous mode [ 111.740994][ T9380] netlink: 'syz.2.1599': attribute type 4 has an invalid length. [ 111.818932][ T7835] IPVS: starting estimator thread 0... [ 111.875939][ T9391] loop4: detected capacity change from 0 to 512 [ 111.900598][ T9391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.916887][ T9384] IPVS: using max 2976 ests per chain, 148800 per kthread [ 111.942241][ T9391] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.953906][ T9399] __nla_validate_parse: 12 callbacks suppressed [ 111.953917][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 112.001898][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.106670][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 112.147148][ T9414] netlink: 'syz.4.1611': attribute type 4 has an invalid length. [ 112.162034][ T7834] IPVS: starting estimator thread 0... [ 112.286848][ T9417] IPVS: using max 2832 ests per chain, 141600 per kthread [ 112.300041][ T9421] loop4: detected capacity change from 0 to 512 [ 112.314200][ T9421] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 112.339010][ T9421] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 112.355582][ T9421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.370629][ T9432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1616'. [ 112.725920][ T9474] netlink: 'syz.0.1623': attribute type 4 has an invalid length. [ 113.030528][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.067837][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 113.067849][ T29] audit: type=1400 audit(2000000077.710:37619): avc: denied { mounton } for pid=9510 comm="syz.3.1632" path="/proc/1197/cgroup" dev="proc" ino=27849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 113.135643][ T9520] loop0: detected capacity change from 0 to 2048 [ 113.179269][ T9520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.219600][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.303306][ T9532] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 113.725022][ T29] audit: type=1326 audit(2000000078.360:37620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.4.1646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88a050bbd9 code=0x0 [ 113.841944][ T9551] loop4: detected capacity change from 0 to 512 [ 113.855792][ T9551] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 113.889806][ T9551] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 113.915845][ T9551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.030717][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1648'. [ 114.260665][ T9579] loop2: detected capacity change from 0 to 2048 [ 114.279072][ T9579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.293266][ T9579] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 114.301098][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 114.341145][ T29] audit: type=1400 audit(2000000078.980:37621): avc: denied { write } for pid=9578 comm="syz.2.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 114.363011][ T9585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1658'. [ 114.380207][ T3600] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 114.392476][ T3600] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.392476][ T3600] [ 114.402124][ T3600] EXT4-fs (loop2): Total free blocks count 0 [ 114.408120][ T3600] EXT4-fs (loop2): Free/Dirty block details [ 114.414094][ T3600] EXT4-fs (loop2): free_blocks=0 [ 114.419071][ T3600] EXT4-fs (loop2): dirty_blocks=0 [ 114.424122][ T3600] EXT4-fs (loop2): Block reservation details [ 114.430178][ T3600] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 114.440826][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.515548][ T9587] usb usb5: usbfs: process 9587 (syz.2.1659) did not claim interface 0 before use [ 114.569532][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.608403][ T29] audit: type=1326 audit(2000000079.250:37622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 114.631975][ T29] audit: type=1326 audit(2000000079.250:37623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 114.672856][ T29] audit: type=1326 audit(2000000079.300:37624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 114.696489][ T29] audit: type=1326 audit(2000000079.300:37625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 114.720051][ T29] audit: type=1326 audit(2000000079.300:37626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 114.743434][ T29] audit: type=1326 audit(2000000079.300:37627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 114.767069][ T29] audit: type=1326 audit(2000000079.300:37628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 115.440310][ T9590] delete_channel: no stack [ 115.514272][ T9619] netlink: 'syz.2.1670': attribute type 7 has an invalid length. [ 115.592790][ T9625] loop2: detected capacity change from 0 to 512 [ 115.602734][ T9625] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 115.612839][ T9625] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 115.620895][ T9625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.643010][ T9627] loop4: detected capacity change from 0 to 128 [ 115.669960][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.712202][ T9624] syz.4.1672: attempt to access beyond end of device [ 115.712202][ T9624] loop4: rw=2049, sector=207, nr_sectors = 128 limit=128 [ 115.726224][ T9624] syz.4.1672: attempt to access beyond end of device [ 115.726224][ T9624] loop4: rw=2049, sector=207, nr_sectors = 1 limit=128 [ 115.739623][ T9624] Buffer I/O error on dev loop4, logical block 207, lost async page write [ 115.748710][ T9624] syz.4.1672: attempt to access beyond end of device [ 115.748710][ T9624] loop4: rw=2049, sector=207, nr_sectors = 1 limit=128 [ 115.762169][ T9624] Buffer I/O error on dev loop4, logical block 207, lost async page write [ 115.788091][ T9631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1674'. [ 115.797077][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 115.914115][ T9631] loop2: detected capacity change from 0 to 8192 [ 115.940775][ T9646] FAULT_INJECTION: forcing a failure. [ 115.940775][ T9646] name failslab, interval 1, probability 0, space 0, times 0 [ 115.953474][ T9646] CPU: 1 PID: 9646 Comm: syz.4.1679 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 115.963610][ T9646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 115.973658][ T9646] Call Trace: [ 115.976929][ T9646] [ 115.979853][ T9646] dump_stack_lvl+0xf2/0x150 [ 115.984450][ T9646] dump_stack+0x15/0x20 [ 115.988683][ T9646] should_fail_ex+0x229/0x230 [ 115.993419][ T9646] ? rtnl_newlink+0x5d/0x1690 [ 115.998102][ T9646] __should_failslab+0x92/0xa0 [ 116.002914][ T9646] should_failslab+0x9/0x20 [ 116.007443][ T9646] kmalloc_trace_noprof+0x4b/0x2a0 [ 116.012662][ T9646] rtnl_newlink+0x5d/0x1690 [ 116.017165][ T9646] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 116.023412][ T9646] ? __rmqueue_pcplist+0xee9/0x1080 [ 116.028617][ T9646] ? __rcu_read_unlock+0x4e/0x70 [ 116.033628][ T9646] ? avc_has_perm_noaudit+0x1cc/0x210 [ 116.039019][ T9646] ? selinux_capable+0x1f2/0x260 [ 116.043988][ T9646] ? security_capable+0x64/0x80 [ 116.048895][ T9646] ? ns_capable+0x7d/0xb0 [ 116.053274][ T9646] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.058334][ T9646] rtnetlink_rcv_msg+0x85e/0x910 [ 116.063276][ T9646] ? memcg_list_lru_alloc+0xd2/0x740 [ 116.068613][ T9646] ? __memcg_slab_post_alloc_hook+0x1f9/0x650 [ 116.074680][ T9646] ? mod_objcg_state+0x2e2/0x4e0 [ 116.079700][ T9646] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 116.085240][ T9646] ? xas_load+0x3ae/0x3d0 [ 116.089670][ T9646] ? kmem_cache_free+0xd8/0x280 [ 116.094579][ T9646] ? nlmon_xmit+0x51/0x60 [ 116.098921][ T9646] ? __kfree_skb+0x102/0x150 [ 116.103515][ T9646] ? consume_skb+0x57/0x180 [ 116.108015][ T9646] ? nlmon_xmit+0x51/0x60 [ 116.112338][ T9646] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 116.117634][ T9646] ? __dev_queue_xmit+0xb21/0x1e50 [ 116.122749][ T9646] ? ref_tracker_free+0x3a5/0x410 [ 116.127773][ T9646] netlink_rcv_skb+0x12c/0x230 [ 116.132547][ T9646] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.138087][ T9646] rtnetlink_rcv+0x1c/0x30 [ 116.142510][ T9646] netlink_unicast+0x58d/0x660 [ 116.147314][ T9646] netlink_sendmsg+0x5ca/0x6e0 [ 116.152077][ T9646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.157359][ T9646] __sock_sendmsg+0x140/0x180 [ 116.162053][ T9646] ____sys_sendmsg+0x312/0x410 [ 116.167003][ T9646] __sys_sendmsg+0x1e9/0x280 [ 116.171603][ T9646] __x64_sys_sendmsg+0x46/0x50 [ 116.176358][ T9646] x64_sys_call+0xb25/0x2d70 [ 116.180967][ T9646] do_syscall_64+0xc9/0x1c0 [ 116.185469][ T9646] ? clear_bhb_loop+0x55/0xb0 [ 116.190176][ T9646] ? clear_bhb_loop+0x55/0xb0 [ 116.194842][ T9646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.200779][ T9646] RIP: 0033:0x7f88a050bbd9 [ 116.205262][ T9646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.224933][ T9646] RSP: 002b:00007f889f78d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.233394][ T9646] RAX: ffffffffffffffda RBX: 00007f88a0699f60 RCX: 00007f88a050bbd9 [ 116.241360][ T9646] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 116.249370][ T9646] RBP: 00007f889f78d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.257329][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.265371][ T9646] R13: 000000000000000b R14: 00007f88a0699f60 R15: 00007ffd04d9ab38 [ 116.273376][ T9646] [ 116.801462][ T9664] loop0: detected capacity change from 0 to 256 [ 116.841629][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1686'. [ 116.851797][ T9664] FAT-fs (loop0): codepage cp866 not found [ 117.198424][ T9655] delete_channel: no stack [ 117.250943][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'. [ 117.365626][ T9696] loop2: detected capacity change from 0 to 1024 [ 117.377307][ T9698] loop4: detected capacity change from 0 to 512 [ 117.389386][ T9696] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.1692: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 117.406481][ T9696] EXT4-fs error (device loop2): ext4_quota_enable:7037: comm syz.2.1692: Bad quota inode: 3, type: 0 [ 117.418732][ T9698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 117.432036][ T9698] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.436921][ T9696] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 117.467229][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 117.476728][ T9696] EXT4-fs (loop2): mount failed [ 117.551089][ T9708] loop4: detected capacity change from 0 to 512 [ 117.581144][ T9708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.607353][ T9708] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.626852][ T9708] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1696: corrupted xattr block 32: invalid header [ 117.649920][ T9708] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 117.650015][ T9708] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1696: corrupted xattr block 32: invalid header [ 117.650170][ T9708] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1696: corrupted xattr block 32: invalid header [ 117.650274][ T9708] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 117.680389][ T7095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.743331][ T9720] loop0: detected capacity change from 0 to 512 [ 117.753102][ T9720] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 117.753573][ T9720] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 117.754039][ T9720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.782370][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.830982][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1703'. [ 117.873199][ T9732] dvmrp1: entered allmulticast mode [ 117.879281][ T9732] dvmrp1: left allmulticast mode [ 118.095060][ T9746] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1709'. [ 118.295776][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 118.295791][ T29] audit: type=1400 audit(2000000082.930:37836): avc: denied { setopt } for pid=9751 comm="syz.0.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.295947][ T9752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1712'. [ 118.491351][ T9764] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1715'. [ 118.528921][ T9761] team0: Device ipvlan0 failed to register rx_handler [ 118.530352][ T9766] loop2: detected capacity change from 0 to 512 [ 118.561396][ T9766] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 118.574100][ T9721] delete_channel: no stack [ 118.603010][ T9766] serio: Serial port pts0 [ 118.740959][ T9781] loop0: detected capacity change from 0 to 1024 [ 118.772293][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'. [ 118.799208][ T9781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.958411][ T9789] loop0: detected capacity change from 0 to 256 [ 119.007127][ T3481] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 119.203489][ T9803] chnl_net:caif_netlink_parms(): no params data found [ 119.236265][ T29] audit: type=1326 audit(2000000083.870:37837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.259827][ T29] audit: type=1326 audit(2000000083.870:37838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.284498][ T29] audit: type=1326 audit(2000000083.870:37839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.308056][ T29] audit: type=1326 audit(2000000083.870:37840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.331673][ T29] audit: type=1326 audit(2000000083.870:37841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.355490][ T29] audit: type=1326 audit(2000000083.870:37842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.379247][ T29] audit: type=1326 audit(2000000083.870:37843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.402768][ T29] audit: type=1326 audit(2000000083.870:37844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.426317][ T29] audit: type=1326 audit(2000000083.870:37845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4f228bd9 code=0x7ffc0000 [ 119.470528][ T9803] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.477629][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.485053][ T9803] bridge_slave_0: entered allmulticast mode [ 119.493064][ T9803] bridge_slave_0: entered promiscuous mode [ 119.501646][ T9803] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.503706][ T9822] delete_channel: no stack [ 119.508743][ T9803] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.522614][ T9803] bridge_slave_1: entered allmulticast mode [ 119.529271][ T9803] bridge_slave_1: entered promiscuous mode [ 119.538390][ T3613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.570542][ T9803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.576922][ T9832] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1731'. [ 119.582306][ T9803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.597685][ T9832] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1731'. [ 119.611533][ T3613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.632653][ T9803] team0: Port device team_slave_0 added [ 119.647061][ T9803] team0: Port device team_slave_1 added [ 119.651301][ T9839] loop2: detected capacity change from 0 to 512 [ 119.672627][ T9803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.679668][ T9803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.705671][ T9803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.708945][ T9839] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.717730][ T9803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.733655][ T9803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.759560][ T9803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.774539][ T3613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.807418][ T9803] hsr_slave_0: entered promiscuous mode [ 119.813546][ T9803] hsr_slave_1: entered promiscuous mode [ 119.832063][ T3613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.921386][ T3613] bridge_slave_1: left allmulticast mode [ 119.927120][ T3613] bridge_slave_1: left promiscuous mode [ 119.932962][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.959761][ T3613] bridge_slave_0: left allmulticast mode [ 119.965408][ T3613] bridge_slave_0: left promiscuous mode [ 119.971171][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.078984][ T3613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.089426][ T3613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.099763][ T3613] bond0 (unregistering): Released all slaves [ 120.199906][ T9885] 8021q: VLANs not supported on lo [ 120.223087][ T3613] hsr_slave_0: left promiscuous mode [ 120.233262][ T3613] hsr_slave_1: left promiscuous mode [ 120.244834][ T3613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.252333][ T3613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.266656][ T3613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.274120][ T3613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.300214][ T3613] veth1_macvtap: left promiscuous mode [ 120.305748][ T3613] veth0_macvtap: left promiscuous mode [ 120.311337][ T3613] veth1_vlan: left promiscuous mode [ 120.316644][ T3613] veth0_vlan: left promiscuous mode [ 120.416230][ T3613] team0 (unregistering): Port device team_slave_1 removed [ 120.428409][ T3613] team0 (unregistering): Port device team_slave_0 removed [ 120.575596][ T9803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.587483][ T9803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.610393][ T9803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.621723][ T9803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.771227][ T9861] delete_channel: no stack [ 120.802035][ T9803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.821366][ T9803] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.834490][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.841621][ T7834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.871287][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.878404][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.904997][ T9925] syz.3.1753[9925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.905054][ T9925] syz.3.1753[9925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.933553][ T9926] loop0: detected capacity change from 0 to 2048 [ 120.952059][ T9925] 9pnet_fd: Insufficient options for proto=fd [ 120.994005][ T9803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.085595][ T9803] veth0_vlan: entered promiscuous mode [ 121.096416][ T9803] veth1_vlan: entered promiscuous mode [ 121.097278][ T9942] vhci_hcd: invalid port number 32 [ 121.107150][ T9942] vhci_hcd: default hub control req: 0000 v0000 i0020 l0 [ 121.115054][ T9803] veth0_macvtap: entered promiscuous mode [ 121.139928][ T9803] veth1_macvtap: entered promiscuous mode [ 121.162415][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.172113][ T9950] loop2: detected capacity change from 0 to 2048 [ 121.172951][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.189016][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.199597][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.209667][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.211024][ T9950] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.220283][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.237905][ T9950] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 121.244975][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.257223][ T9950] EXT4-fs (loop2): This should not happen!! Data will be lost [ 121.257223][ T9950] [ 121.257237][ T9950] EXT4-fs (loop2): Total free blocks count 0 [ 121.257248][ T9950] EXT4-fs (loop2): Free/Dirty block details [ 121.267821][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.277449][ T9950] EXT4-fs (loop2): free_blocks=2415919104 [ 121.277466][ T9950] EXT4-fs (loop2): dirty_blocks=16 [ 121.277540][ T9950] EXT4-fs (loop2): Block reservation details [ 121.283506][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.289386][ T9950] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 121.293291][ T9950] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.299226][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.305107][ T9950] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.310088][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.365232][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.377592][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.386332][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.396860][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.406970][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.417553][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.427455][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.437988][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.447804][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.458344][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.468353][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.478793][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.488622][ T9803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.499074][ T9803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.512622][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.532456][ T9803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.541274][ T9803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.550160][ T9803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.558889][ T9803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.572376][ T9964] FAULT_INJECTION: forcing a failure. [ 121.572376][ T9964] name failslab, interval 1, probability 0, space 0, times 0 [ 121.585333][ T9964] CPU: 0 PID: 9964 Comm: syz.2.1760 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 121.595479][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 121.605546][ T9964] Call Trace: [ 121.608806][ T9964] [ 121.611717][ T9964] dump_stack_lvl+0xf2/0x150 [ 121.616292][ T9964] dump_stack+0x15/0x20 [ 121.620459][ T9964] should_fail_ex+0x229/0x230 [ 121.625119][ T9964] ? kstrdup_const+0x3e/0x50 [ 121.629766][ T9964] __should_failslab+0x92/0xa0 [ 121.634511][ T9964] should_failslab+0x9/0x20 [ 121.639036][ T9964] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 121.645191][ T9964] kstrdup+0x3a/0x80 [ 121.649070][ T9964] kstrdup_const+0x3e/0x50 [ 121.653547][ T9964] __kernfs_new_node+0x41/0x380 [ 121.658375][ T9964] ? rb_insert_color+0x6a/0x290 [ 121.663330][ T9964] ? up_write+0x30/0xf0 [ 121.667480][ T9964] ? kernfs_activate+0x256/0x270 [ 121.672401][ T9964] kernfs_new_node+0xc8/0x140 [ 121.677069][ T9964] kernfs_create_link+0x6c/0x120 [ 121.682085][ T9964] sysfs_do_create_link_sd+0x6b/0xf0 [ 121.687370][ T9964] sysfs_create_link+0x51/0x70 [ 121.692125][ T9964] device_add_class_symlinks+0x159/0x1e0 [ 121.697786][ T9964] device_add+0x36c/0x790 [ 121.702109][ T9964] netdev_register_kobject+0x100/0x230 [ 121.707628][ T9964] register_netdevice+0x8b9/0xdd0 [ 121.712682][ T9964] br_dev_newlink+0x25/0xe0 [ 121.717178][ T9964] ? __pfx_br_dev_newlink+0x10/0x10 [ 121.722384][ T9964] rtnl_newlink+0xefd/0x1690 [ 121.726967][ T9964] ? mutex_spin_on_owner+0xc6/0x170 [ 121.732162][ T9964] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 121.738462][ T9964] ? _raw_spin_unlock+0x26/0x50 [ 121.743294][ T9964] ? __mutex_lock+0x221/0x8e0 [ 121.747964][ T9964] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.752970][ T9964] rtnetlink_rcv_msg+0x85e/0x910 [ 121.758017][ T9964] ? memcg_list_lru_alloc+0xd2/0x740 [ 121.763309][ T9964] ? mod_objcg_state+0x2e2/0x4e0 [ 121.768253][ T9964] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 121.773759][ T9964] ? xas_load+0x3ae/0x3d0 [ 121.778120][ T9964] ? kmem_cache_free+0xd8/0x280 [ 121.782967][ T9964] ? nlmon_xmit+0x51/0x60 [ 121.787280][ T9964] ? __kfree_skb+0x102/0x150 [ 121.791922][ T9964] ? consume_skb+0x57/0x180 [ 121.796407][ T9964] ? nlmon_xmit+0x51/0x60 [ 121.800724][ T9964] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 121.806046][ T9964] ? __dev_queue_xmit+0xb21/0x1e50 [ 121.811260][ T9964] ? ref_tracker_free+0x3a5/0x410 [ 121.816284][ T9964] netlink_rcv_skb+0x12c/0x230 [ 121.821095][ T9964] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.826570][ T9964] rtnetlink_rcv+0x1c/0x30 [ 121.831018][ T9964] netlink_unicast+0x58d/0x660 [ 121.835859][ T9964] netlink_sendmsg+0x5ca/0x6e0 [ 121.840610][ T9964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.845916][ T9964] __sock_sendmsg+0x140/0x180 [ 121.850577][ T9964] ____sys_sendmsg+0x312/0x410 [ 121.855428][ T9964] __sys_sendmsg+0x1e9/0x280 [ 121.860084][ T9964] __x64_sys_sendmsg+0x46/0x50 [ 121.864876][ T9964] x64_sys_call+0xb25/0x2d70 [ 121.869491][ T9964] do_syscall_64+0xc9/0x1c0 [ 121.874013][ T9964] ? clear_bhb_loop+0x55/0xb0 [ 121.878721][ T9964] ? clear_bhb_loop+0x55/0xb0 [ 121.883391][ T9964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.889287][ T9964] RIP: 0033:0x7fc5658e0bd9 [ 121.893688][ T9964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.913408][ T9964] RSP: 002b:00007fc564b62048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.921820][ T9964] RAX: ffffffffffffffda RBX: 00007fc565a6ef60 RCX: 00007fc5658e0bd9 [ 121.929779][ T9964] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 121.937739][ T9964] RBP: 00007fc564b620a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.945710][ T9964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.953680][ T9964] R13: 000000000000000b R14: 00007fc565a6ef60 R15: 00007fff4955cfe8 [ 121.961658][ T9964] [ 122.039387][ T9966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1763'. [ 122.062055][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 122.101496][ T9972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=9972 comm=syz.3.1766 [ 122.139359][ T9978] loop2: detected capacity change from 0 to 512 [ 122.163877][ T9978] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 122.179486][ T9978] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 122.293268][ T9999] netlink: 'syz.2.1775': attribute type 7 has an invalid length. [ 122.302031][T10000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1774'. [ 122.316603][T10006] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1776'. [ 122.334503][T10006] loop2: detected capacity change from 0 to 2048 [ 122.377147][T10006] loop2: p2 < > [ 122.382880][ C0] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0 [ 122.438645][ T3481] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.542297][T10019] loop2: detected capacity change from 0 to 512 [ 122.551382][T10019] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 122.562069][T10019] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 123.111773][T10042] tipc: Started in network mode [ 123.116677][T10042] tipc: Node identity ac14140f, cluster identity 4711 [ 123.124948][T10042] tipc: New replicast peer: 255.255.255.255 [ 123.131070][T10042] tipc: Enabled bearer , priority 10 [ 123.162963][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 123.192805][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 123.216549][T10056] loop1: detected capacity change from 0 to 512 [ 123.233125][T10056] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 123.250193][T10056] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 123.306860][ T29] kauditd_printk_skb: 1297 callbacks suppressed [ 123.306875][ T29] audit: type=1400 audit(2000000087.940:39143): avc: denied { create } for pid=10062 comm="syz.3.1796" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r" [ 123.307274][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 123.313214][ T29] audit: type=1400 audit(2000000087.940:39144): avc: denied { associate } for pid=10062 comm="syz.3.1796" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r" [ 123.369283][ T29] audit: type=1400 audit(2000000087.940:39145): avc: denied { read append open } for pid=10062 comm="syz.3.1796" path="/460/bus" dev="tmpfs" ino=2481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r" [ 123.398122][T10074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1800'. [ 123.416491][T10076] netlink: 'syz.0.1801': attribute type 4 has an invalid length. [ 123.443489][ T29] audit: type=1400 audit(2000000088.010:39146): avc: denied { unlink } for pid=3090 comm="syz-executor" name="bus" dev="tmpfs" ino=2481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r" [ 123.468757][T10082] SELinux: syz.3.1804 (10082) set checkreqprot to 1. This is no longer supported. [ 123.479977][T10025] delete_channel: no stack [ 123.498304][ T29] audit: type=1400 audit(2000000088.110:39147): avc: denied { setcheckreqprot } for pid=10081 comm="syz.3.1804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.524109][T10085] loop0: detected capacity change from 0 to 512 [ 123.553335][T10094] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1807'. [ 123.555902][T10085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.577748][T10085] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 123.593622][T10085] EXT4-fs (loop0): 1 truncate cleaned up [ 123.629547][T10102] loop2: detected capacity change from 0 to 512 [ 123.636981][T10102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.638079][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 123.668082][T10102] EXT4-fs (loop2): 1 truncate cleaned up [ 123.697480][T10114] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1815'. [ 123.707848][T10112] netlink: 'syz.0.1813': attribute type 4 has an invalid length. [ 123.730025][T10116] loop0: detected capacity change from 0 to 512 [ 123.747955][T10116] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.759580][T10116] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1817: corrupted xattr block 32: invalid header [ 123.759726][T10116] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 123.759748][T10116] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1817: corrupted xattr block 32: invalid header [ 123.759879][T10116] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1817: corrupted xattr block 32: invalid header [ 123.760035][T10116] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 123.821757][ T7834] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/2 [ 123.821873][ T7834] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 123.825646][T10122] loop2: detected capacity change from 0 to 512 [ 123.858202][T10122] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.870705][T10120] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1816'. [ 123.882270][T10120] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.1816: corrupted inode contents [ 123.884129][T10114] loop1: detected capacity change from 0 to 512 [ 123.894507][T10120] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.1816: mark_inode_dirty error [ 123.916451][ T29] audit: type=1326 audit(2000000088.550:39148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 123.923344][T10120] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.1816: corrupted inode contents [ 123.940257][ T29] audit: type=1326 audit(2000000088.550:39149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 123.975751][T10120] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1816: mark_inode_dirty error [ 123.976300][ T29] audit: type=1326 audit(2000000088.590:39150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 124.011192][ T29] audit: type=1326 audit(2000000088.590:39151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 124.034797][ T29] audit: type=1326 audit(2000000088.590:39152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd242c0bd9 code=0x7ffc0000 [ 124.060234][T10114] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.076702][T10114] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.1815: corrupted inode contents [ 124.089582][T10114] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.1815: mark_inode_dirty error [ 124.101283][T10114] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.1815: corrupted inode contents [ 124.113285][T10114] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.1815: mark_inode_dirty error [ 124.126956][ T7834] tipc: Node number set to 2886997007 [ 124.137848][T10127] delete_channel: no stack [ 124.193087][T10135] loop0: detected capacity change from 0 to 512 [ 124.201436][T10135] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 124.211182][T10135] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 124.237991][T10140] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.286334][T10147] loop1: detected capacity change from 0 to 512 [ 124.413510][T10159] 9pnet_fd: Insufficient options for proto=fd [ 124.522076][T10169] netlink: 'syz.3.1830': attribute type 6 has an invalid length. [ 124.819148][T10188] loop1: detected capacity change from 0 to 764 [ 124.859605][T10200] FAULT_INJECTION: forcing a failure. [ 124.859605][T10200] name failslab, interval 1, probability 0, space 0, times 0 [ 124.872270][T10200] CPU: 0 PID: 10200 Comm: syz.3.1842 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 124.882419][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 124.892467][T10200] Call Trace: [ 124.895740][T10200] [ 124.898661][T10200] dump_stack_lvl+0xf2/0x150 [ 124.903315][T10200] dump_stack+0x15/0x20 [ 124.907519][T10200] should_fail_ex+0x229/0x230 [ 124.912191][T10200] ? skb_clone+0x154/0x1f0 [ 124.916726][T10200] __should_failslab+0x92/0xa0 [ 124.921520][T10200] should_failslab+0x9/0x20 [ 124.926022][T10200] kmem_cache_alloc_noprof+0x4c/0x290 [ 124.931420][T10200] skb_clone+0x154/0x1f0 [ 124.935721][T10200] __netlink_deliver_tap+0x2bd/0x4c0 [ 124.941001][T10200] netlink_sendskb+0x123/0x140 [ 124.945875][T10200] netlink_unicast+0x291/0x660 [ 124.950749][T10200] netlink_ack+0x4c2/0x4f0 [ 124.955168][T10200] netlink_rcv_skb+0x19c/0x230 [ 124.959949][T10200] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.965483][T10200] rtnetlink_rcv+0x1c/0x30 [ 124.969916][T10200] netlink_unicast+0x58d/0x660 [ 124.974679][T10200] netlink_sendmsg+0x5ca/0x6e0 [ 124.979514][T10200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.984783][T10200] __sock_sendmsg+0x140/0x180 [ 124.989447][T10200] ____sys_sendmsg+0x312/0x410 [ 124.994215][T10200] __sys_sendmsg+0x1e9/0x280 [ 124.998932][T10200] __x64_sys_sendmsg+0x46/0x50 [ 125.003683][T10200] x64_sys_call+0xb25/0x2d70 [ 125.008262][T10200] do_syscall_64+0xc9/0x1c0 [ 125.012903][T10200] ? clear_bhb_loop+0x55/0xb0 [ 125.017570][T10200] ? clear_bhb_loop+0x55/0xb0 [ 125.022236][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.028118][T10200] RIP: 0033:0x7f0b4f228bd9 [ 125.032521][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.052133][T10200] RSP: 002b:00007f0b4e4aa048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.060544][T10200] RAX: ffffffffffffffda RBX: 00007f0b4f3b6f60 RCX: 00007f0b4f228bd9 [ 125.068512][T10200] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 125.076501][T10200] RBP: 00007f0b4e4aa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.084593][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.092558][T10200] R13: 000000000000000b R14: 00007f0b4f3b6f60 R15: 00007ffe5dacae58 [ 125.100564][T10200] [ 125.108891][T10188] loop1: detected capacity change from 0 to 256 [ 125.153132][T10132] delete_channel: no stack [ 125.203327][T10208] loop2: detected capacity change from 0 to 512 [ 125.216241][T10211] devtmpfs: Unknown parameter 'nr_inodts' [ 125.217155][T10208] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 125.233182][T10208] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 125.234577][T10214] loop1: detected capacity change from 0 to 512 [ 125.256747][T10214] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1848: invalid block [ 125.271293][T10214] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1848: invalid indirect mapped block 4294967295 (level 1) [ 125.285459][T10214] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1848: invalid indirect mapped block 4294967295 (level 1) [ 125.299787][T10214] EXT4-fs (loop1): 2 truncates cleaned up [ 125.306247][T10217] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 125.312889][T10217] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.320568][T10217] vhci_hcd vhci_hcd.0: Device attached [ 125.332177][T10218] vhci_hcd: connection closed [ 125.332228][ T67] vhci_hcd: stop threads [ 125.341271][ T67] vhci_hcd: release socket [ 125.345691][ T67] vhci_hcd: disconnect device [ 125.345796][T10221] loop2: detected capacity change from 0 to 2048 [ 125.368448][T10223] loop1: detected capacity change from 0 to 764 [ 125.368732][T10221] EXT4-fs mount: 28 callbacks suppressed [ 125.368743][T10221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.404727][T10223] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 125.418503][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.494232][T10236] loop2: detected capacity change from 0 to 512 [ 125.513896][T10238] loop0: detected capacity change from 0 to 512 [ 125.516357][T10228] loop1: detected capacity change from 0 to 512 [ 125.530342][T10228] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 125.541040][T10236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.545425][T10228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 125.554146][T10236] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.565201][T10238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.572791][T10228] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.585595][T10238] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.594033][T10236] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1855: corrupted xattr block 32: invalid header [ 125.615451][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.617888][T10228] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1852: bg 0: block 361: padding at end of block bitmap is not set [ 125.627179][T10236] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 125.639500][T10228] EXT4-fs (loop1): Remounting filesystem read-only [ 125.654219][T10236] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1855: corrupted xattr block 32: invalid header [ 125.670556][T10228] EXT4-fs (loop1): 1 truncate cleaned up [ 125.671273][T10236] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1855: corrupted xattr block 32: invalid header [ 125.690842][T10236] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 125.693724][T10228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 125.712110][T10228] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 125.719132][T10228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 125.735839][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.763504][T10246] loop0: detected capacity change from 0 to 256 [ 125.786185][T10246] FAT-fs (loop0): codepage cp866 not found [ 125.825278][ T3480] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.839637][T10228] veth0_vlan: left promiscuous mode [ 125.846426][T10228] veth0_vlan: entered promiscuous mode [ 125.900546][T10260] loop1: detected capacity change from 0 to 512 [ 125.915249][T10260] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 125.926474][T10260] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 125.953709][T10265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4376 sclass=netlink_route_socket pid=10265 comm=syz.2.1863 [ 125.964298][T10260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.060252][T10274] FAULT_INJECTION: forcing a failure. [ 126.060252][T10274] name failslab, interval 1, probability 0, space 0, times 0 [ 126.073306][T10274] CPU: 0 PID: 10274 Comm: syz.2.1866 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 126.083457][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 126.093497][T10274] Call Trace: [ 126.096761][T10274] [ 126.099722][T10274] dump_stack_lvl+0xf2/0x150 [ 126.104307][T10274] dump_stack+0x15/0x20 [ 126.108453][T10274] should_fail_ex+0x229/0x230 [ 126.113118][T10274] ? __kernfs_new_node+0x6a/0x380 [ 126.118201][T10274] __should_failslab+0x92/0xa0 [ 126.122970][T10274] should_failslab+0x9/0x20 [ 126.127463][T10274] kmem_cache_alloc_noprof+0x4c/0x290 [ 126.132829][T10274] __kernfs_new_node+0x6a/0x380 [ 126.137717][T10274] ? rb_insert_color+0x263/0x290 [ 126.142648][T10274] ? up_write+0x30/0xf0 [ 126.146887][T10274] ? kernfs_activate+0x256/0x270 [ 126.151842][T10274] kernfs_new_node+0xc8/0x140 [ 126.156559][T10274] __kernfs_create_file+0x49/0x180 [ 126.161687][T10274] ? __pfx_dev_attr_store+0x10/0x10 [ 126.166878][T10274] sysfs_add_file_mode_ns+0x136/0x1c0 [ 126.172319][T10274] internal_create_group+0x464/0x9b0 [ 126.177614][T10274] sysfs_create_groups+0x3c/0xe0 [ 126.182586][T10274] device_add_attrs+0x69/0x400 [ 126.187370][T10274] ? kobject_put+0x107/0x180 [ 126.192041][T10274] device_add+0x38d/0x790 [ 126.196422][T10274] netdev_register_kobject+0x100/0x230 [ 126.201881][T10274] register_netdevice+0x8b9/0xdd0 [ 126.207007][T10274] br_dev_newlink+0x25/0xe0 [ 126.211501][T10274] ? __pfx_br_dev_newlink+0x10/0x10 [ 126.216758][T10274] rtnl_newlink+0xefd/0x1690 [ 126.221342][T10274] ? __mutex_lock+0x55/0x8e0 [ 126.225917][T10274] ? __pfx_rtnl_newlink+0x10/0x10 [ 126.230928][T10274] rtnetlink_rcv_msg+0x85e/0x910 [ 126.235856][T10274] ? memcg_list_lru_alloc+0xd2/0x740 [ 126.241128][T10274] ? mod_objcg_state+0x2e2/0x4e0 [ 126.246075][T10274] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 126.251525][T10274] ? xas_load+0x3ae/0x3d0 [ 126.255891][T10274] ? kmem_cache_free+0xd8/0x280 [ 126.260840][T10274] ? nlmon_xmit+0x51/0x60 [ 126.265216][T10274] ? __kfree_skb+0x102/0x150 [ 126.269810][T10274] ? consume_skb+0x57/0x180 [ 126.274324][T10274] ? nlmon_xmit+0x51/0x60 [ 126.278676][T10274] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 126.283974][T10274] ? __dev_queue_xmit+0xb21/0x1e50 [ 126.289118][T10274] ? ref_tracker_free+0x3a5/0x410 [ 126.294156][T10274] netlink_rcv_skb+0x12c/0x230 [ 126.298918][T10274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.304372][T10274] rtnetlink_rcv+0x1c/0x30 [ 126.308824][T10274] netlink_unicast+0x58d/0x660 [ 126.313648][T10274] netlink_sendmsg+0x5ca/0x6e0 [ 126.318403][T10274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.323677][T10274] __sock_sendmsg+0x140/0x180 [ 126.328384][T10274] ____sys_sendmsg+0x312/0x410 [ 126.333268][T10274] __sys_sendmsg+0x1e9/0x280 [ 126.337855][T10274] __x64_sys_sendmsg+0x46/0x50 [ 126.342639][T10274] x64_sys_call+0xb25/0x2d70 [ 126.347230][T10274] do_syscall_64+0xc9/0x1c0 [ 126.351764][T10274] ? clear_bhb_loop+0x55/0xb0 [ 126.356528][T10274] ? clear_bhb_loop+0x55/0xb0 [ 126.361243][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.367131][T10274] RIP: 0033:0x7fc5658e0bd9 [ 126.371535][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.391218][T10274] RSP: 002b:00007fc564b62048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.399640][T10274] RAX: ffffffffffffffda RBX: 00007fc565a6ef60 RCX: 00007fc5658e0bd9 [ 126.407740][T10274] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 126.415707][T10274] RBP: 00007fc564b620a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.423662][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.431616][T10274] R13: 000000000000000b R14: 00007fc565a6ef60 R15: 00007fff4955cfe8 [ 126.439581][T10274] [ 126.458313][ T9803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.640005][T10292] loop1: detected capacity change from 0 to 512 [ 126.808311][T10292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.830138][T10292] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.873731][ T9803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.969702][T10307] loop1: detected capacity change from 0 to 512 [ 126.984021][T10307] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 126.995105][T10307] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 127.003321][T10307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.024195][ T9803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.268078][T10333] loop0: detected capacity change from 0 to 4096 [ 127.276855][T10333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.327147][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.430657][T10338] loop2: detected capacity change from 0 to 512 [ 127.442580][T10338] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 127.452471][T10338] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 127.462785][T10338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.486085][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.584627][T10358] loop2: detected capacity change from 0 to 2048 [ 127.657730][ T3481] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.721045][T10381] __nla_validate_parse: 5 callbacks suppressed [ 127.721059][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1901'. [ 127.774901][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 127.791009][T10390] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [RP]L3 index 0 [ 127.814418][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 127.856664][T10396] FAULT_INJECTION: forcing a failure. [ 127.856664][T10396] name failslab, interval 1, probability 0, space 0, times 0 [ 127.869425][T10396] CPU: 1 PID: 10396 Comm: syz.2.1907 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 127.879589][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 127.889779][T10396] Call Trace: [ 127.893043][T10396] [ 127.895959][T10396] dump_stack_lvl+0xf2/0x150 [ 127.900549][T10396] dump_stack+0x15/0x20 [ 127.904722][T10396] should_fail_ex+0x229/0x230 [ 127.909389][T10396] ? getname_flags+0x86/0x360 [ 127.914053][T10396] __should_failslab+0x92/0xa0 [ 127.918810][T10396] should_failslab+0x9/0x20 [ 127.923459][T10396] kmem_cache_alloc_noprof+0x4c/0x290 [ 127.929001][T10396] getname_flags+0x86/0x360 [ 127.933495][T10396] user_path_at_empty+0x2c/0x120 [ 127.938492][T10396] __se_sys_mount+0x24b/0x2d0 [ 127.943213][T10396] __x64_sys_mount+0x67/0x80 [ 127.947793][T10396] x64_sys_call+0x25c9/0x2d70 [ 127.952539][T10396] do_syscall_64+0xc9/0x1c0 [ 127.957034][T10396] ? clear_bhb_loop+0x55/0xb0 [ 127.961702][T10396] ? clear_bhb_loop+0x55/0xb0 [ 127.966453][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.972364][T10396] RIP: 0033:0x7fc5658e0bd9 [ 127.976761][T10396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.996365][T10396] RSP: 002b:00007fc564b62048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.004773][T10396] RAX: ffffffffffffffda RBX: 00007fc565a6ef60 RCX: 00007fc5658e0bd9 [ 128.012787][T10396] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 0000000000000000 [ 128.020799][T10396] RBP: 00007fc564b620a0 R08: 0000000020000480 R09: 0000000000000000 [ 128.028763][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.036721][T10396] R13: 000000000000000b R14: 00007fc565a6ef60 R15: 00007fff4955cfe8 [ 128.044690][T10396] [ 128.112135][T10408] loop2: detected capacity change from 0 to 512 [ 128.121387][T10408] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.134591][T10408] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 128.144978][T10408] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 128.153671][T10408] System zones: 0-2, 18-18, 34-34 [ 128.161748][T10408] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 128.176726][T10408] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1912: bg 0: block 408: padding at end of block bitmap is not set [ 128.193130][T10408] EXT4-fs (loop2): Remounting filesystem read-only [ 128.199919][T10408] EXT4-fs (loop2): 1 truncate cleaned up [ 128.211133][T10408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.229303][T10408] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 128.237301][T10408] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.397473][T10425] loop2: detected capacity change from 0 to 1024 [ 128.412431][T10425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.436866][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.581224][T10453] loop0: detected capacity change from 0 to 512 [ 128.600355][T10387] delete_channel: no stack [ 128.609001][T10453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.623271][T10453] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.634142][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 128.643609][T10457] netlink: 'syz.2.1924': attribute type 15 has an invalid length. [ 128.651511][T10457] netlink: 'syz.2.1924': attribute type 18 has an invalid length. [ 128.671374][ T6957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.778717][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'. [ 128.792592][T10474] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 128.796098][ T3613] bond0: (slave bond_slave_0): interface is now down [ 128.808850][ T3613] bond0: (slave bond_slave_1): interface is now down [ 128.810319][T10472] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.815664][ T29] kauditd_printk_skb: 847 callbacks suppressed [ 128.815675][ T29] audit: type=1400 audit(2000000093.440:40000): avc: denied { sqpoll } for pid=10470 comm="syz.3.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.824112][T10472] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 128.831219][ T3613] bond0: (slave bond_slave_0): interface is now down [ 128.863574][ T3613] bond0: (slave bond_slave_1): interface is now down [ 128.871904][T10476] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 128.883947][T10476] bond1 (unregistering): Released all slaves [ 128.886834][ T3609] bond0: (slave bond_slave_0): interface is now down [ 128.896686][ T3609] bond0: (slave bond_slave_1): interface is now down [ 128.916870][ T3609] bond0: (slave bond_slave_0): interface is now down [ 128.923611][ T3609] bond0: (slave bond_slave_1): interface is now down [ 128.930591][ T3609] bond0: now running without any active interface! [ 129.230289][T10482] chnl_net:caif_netlink_parms(): no params data found [ 129.276878][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.283996][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.294219][T10482] bridge_slave_0: entered allmulticast mode [ 129.300940][T10482] bridge_slave_0: entered promiscuous mode [ 129.308384][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.315487][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.323075][T10482] bridge_slave_1: entered allmulticast mode [ 129.329806][T10482] bridge_slave_1: entered promiscuous mode [ 129.352210][T10482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.363710][T10482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.388379][T10482] team0: Port device team_slave_0 added [ 129.395102][T10482] team0: Port device team_slave_1 added [ 129.414956][T10482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.421972][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.447975][T10482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.463453][T10501] digital: digital_start_poll: Unknown protocol [ 129.470175][T10482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.477137][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.503124][T10482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.532476][ T29] audit: type=1326 audit(2000000094.170:40001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.556744][ T29] audit: type=1326 audit(2000000094.170:40002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.631943][T10482] hsr_slave_0: entered promiscuous mode [ 129.639336][ T29] audit: type=1326 audit(2000000094.180:40003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.663588][ T29] audit: type=1326 audit(2000000094.180:40004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.687148][ T29] audit: type=1326 audit(2000000094.180:40005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.711437][ T29] audit: type=1326 audit(2000000094.180:40006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.734919][ T29] audit: type=1326 audit(2000000094.180:40007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.759149][ T29] audit: type=1326 audit(2000000094.180:40008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.782833][ T29] audit: type=1326 audit(2000000094.180:40009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.2.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5658e0bd9 code=0x7ffc0000 [ 129.809967][T10482] hsr_slave_1: entered promiscuous mode [ 129.815562][T10502] delete_channel: no stack [ 129.821367][T10482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.831092][T10482] Cannot create hsr debugfs directory [ 129.929898][T10528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5144 sclass=netlink_route_socket pid=10528 comm=syz.3.1948 [ 129.932799][T10529] loop2: detected capacity change from 0 to 512 [ 129.958969][T10482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.983417][T10529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.997987][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1949'. [ 130.007591][T10529] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.027227][T10529] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.1947: corrupted inode contents [ 130.048535][T10482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.063866][T10529] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.1947: mark_inode_dirty error [ 130.087070][T10529] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.1947: corrupted inode contents [ 130.099082][T10529] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1947: mark_inode_dirty error [ 130.113017][T10482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.138289][T10546] netlink: 'syz.3.1951': attribute type 21 has an invalid length. [ 130.146189][T10546] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1951'. [ 130.168699][ T7953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.198034][T10482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.209018][ T3090] ================================================================== [ 130.217109][ T3090] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 130.224578][ T3090] [ 130.226898][ T3090] read-write to 0xffff888128718bd0 of 8 bytes by task 10549 on cpu 1: [ 130.235130][ T3090] shmem_recalc_inode+0x36/0x1b0 [ 130.240084][ T3090] shmem_get_folio_gfp+0x7d4/0xb70 [ 130.245194][ T3090] shmem_write_begin+0xa0/0x1c0 [ 130.250047][ T3090] generic_perform_write+0x1d5/0x410 [ 130.255429][ T3090] shmem_file_write_iter+0xc8/0xf0 [ 130.260550][ T3090] __kernel_write_iter+0x24f/0x4e0 [ 130.265665][ T3090] dump_user_range+0x3a7/0x550 [ 130.270431][ T3090] elf_core_dump+0x1aeb/0x1c30 [ 130.275197][ T3090] do_coredump+0xff6/0x1860 [ 130.279701][ T3090] get_signal+0xdc1/0x1080 [ 130.284118][ T3090] arch_do_signal_or_restart+0x95/0x4b0 [ 130.289752][ T3090] irqentry_exit_to_user_mode+0x94/0x130 [ 130.295392][ T3090] irqentry_exit+0x12/0x50 [ 130.299816][ T3090] exc_general_protection+0x33d/0x4d0 [ 130.305184][ T3090] asm_exc_general_protection+0x26/0x30 [ 130.310729][ T3090] [ 130.313047][ T3090] read to 0xffff888128718bd0 of 8 bytes by task 3090 on cpu 0: [ 130.320584][ T3090] shmem_getattr+0x42/0x200 [ 130.325091][ T3090] vfs_getattr+0x19b/0x1e0 [ 130.329513][ T3090] vfs_statx+0x140/0x320 [ 130.333755][ T3090] vfs_fstatat+0xcd/0x100 [ 130.338082][ T3090] __se_sys_newfstatat+0x58/0x260 [ 130.343117][ T3090] __x64_sys_newfstatat+0x55/0x70 [ 130.348153][ T3090] x64_sys_call+0x1451/0x2d70 [ 130.352832][ T3090] do_syscall_64+0xc9/0x1c0 [ 130.357349][ T3090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.363249][ T3090] [ 130.365564][ T3090] value changed: 0x0000000000000023 -> 0x0000000000000026 [ 130.372665][ T3090] [ 130.374982][ T3090] Reported by Kernel Concurrency Sanitizer on: [ 130.381130][ T3090] CPU: 0 PID: 3090 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 130.391372][ T3090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 130.401430][ T3090] ================================================================== [ 130.416869][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1950'. [ 130.441539][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1950'. [ 130.450714][T10551] netlink: 'syz.1.1950': attribute type 18 has an invalid length. [ 130.504627][T10482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.523955][T10482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.560114][T10482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.571157][T10482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.704681][T10482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.731919][T10482] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.750829][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.758002][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.782930][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.790033][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.837701][T10541] loop0: detected capacity change from 0 to 65536 [ 130.898893][ T3481] I/O error, dev loop0, sector 65408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 130.941051][T10482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.039778][T10541] netlink: 'syz.0.1952': attribute type 6 has an invalid length. [ 131.115373][T10482] veth0_vlan: entered promiscuous mode [ 131.123904][T10482] veth1_vlan: entered promiscuous mode [ 131.140155][T10482] veth0_macvtap: entered promiscuous mode [ 131.148233][T10482] veth1_macvtap: entered promiscuous mode [ 131.158839][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.169292][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.179205][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.189867][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.199740][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.210156][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.220030][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.230563][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.240474][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.250931][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.260739][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.271228][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.281042][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.291562][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.302719][T10482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.315891][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.326342][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.336299][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.346757][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.356669][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.367105][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.376984][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.387431][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.397265][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.407725][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.417533][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.427984][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.437822][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.448506][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.459998][T10482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.471256][T10482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.480078][T10482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.488885][T10482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.497580][T10482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0