last executing test programs: 22.138604316s ago: executing program 0 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x90020, &(0x7f0000000980)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030343030302c6d6f64653d30303030303030303030303030303030303030303336342c6d6f64653d3031373737373737373739bd03103737373737373737372c6d6f64653d30303030303030303030303030303030303030303031302c6d6f64653d30303030303030303030303030303030303030120c4836a1bbe5b4746578743d757365725f752c7063723d30303030303030303030303030303030303031372c7375626a5f747970653d6170707273655f747970653d696d617369672c7065726d69745f646972656374696f2c636f6e74657874", @ANYBLOB="65f20f"]) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$packet(0x11, 0x0, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @random="30185c73ee10"}, 0x10) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6, @local}, 0x10) fdatasync(r2) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 22.09494008s ago: executing program 0 (id=28): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) getgroups(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000080)="9000000003001f154f8a152f35aca0f9665ca77e2440bbc2849ac00aea4506bb6b1662499acc98f26eace15d02e5a7aba360440ba95c3453716803815a6d940f0476c052287d32daac76b4d4507e639a4f752b5761a4d58e640b800bad1f78932a64133263e79cda200bca06c6d4dfaef76428262018d01fd74721a0baa25083577a867a3681f09d689e78e539ea011a895483e2c8ba5e2729c50bd6859c9a15c7e6dfac46f0fd6564979157ccb0d800c8989a9d84ca428cef2cc816", 0xbc, 0x24040014, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 22.067746562s ago: executing program 0 (id=29): io_uring_setup(0x96b, &(0x7f0000000340)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) r7 = epoll_create1(0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0xfffffffd, 0x0, 0x10, 0x19, 0x0, 0x60}}) dup3(r8, r7, 0x0) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1) r9 = socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000400)='FROZEN\x00', 0x7) setuid(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 6.264214832s ago: executing program 0 (id=175): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) (fail_nth: 22) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 6.04076896s ago: executing program 0 (id=225): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'geneve0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./bus\x00', 0x10, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x81, 0x374, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000007c0)="76293e22a44315c484a293b33007d7e5a52b7ea1287e13f740416e8ea0445dbe208ee1582c025b560a35a79d3733f57818ef918b32535a0a7ecac64110e548d859b28c5d05c093824f", 0x49, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000d40), 0x35c, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="74726152733d66002c7266646e6f3da5c3cddfe2acaa79553eca1d10a5c40e59ef1de4915772d7dc65c1ed5646a4de35fc85fd5c7d472bfa20613f2d28132bf8929e80fe1f2ea12de915ed5af3ba0840df1df4376dc1332fc85d1f78773ad03971b584a77d25246aff1e5f960000000000005d115448fc41a0e96c59c613c89d75a5d86661020000000000000019c496b0fbf93924cd5473c038c9f6b8c12fbbfccc458e30beedd04050a106006a3e2c2fd615e8f9bc8600222773fc5813f5c51d189495822291aa00000000003cf466e0671fa2b911b5c87c570194a762275ab357f8d50895d23ba346215eeb08000000f004d156fa51ae7e56a4cdfe707be06f8924df6861e24c1e1307103611f8fdb892cdab640d45da9b0a539c670e752681727a6575c3bb0e0a3d2eec5a5f2455dbb94c6bcff2b0fe73f45de1c3c1f857452389b44a8673391fe118c6281e40b686654283335272a70b2f2d3c3287adcc55272805a9e4b904fbe9ab13767fe153510be74683", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) keyctl$search(0xa, 0x0, &(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x3}, r3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900)="28757ad66d1c90abc44f04a27894e8833ba96d2ed10ea3b37eb648e071b3735880a448e4fdcf44882e9601e9465fb89baecf45335407245b0aeec74c4079c58db7d8993451988c0c56b95a1c760d43f4be56c56a40a2a3c9af84f41b02aebe5f0d6624017b79639daf8cc435ad4d70c25a844d02", 0x74, r2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x6, 0x66ee, &(0x7f0000000f40)="6f1284b5b42f93147170361cf2c529322d5c7053321fd6c109c679c678343fd629b779f32cf8726bd23f899af552fd28929a55fac2858c8aed3d5104816c513f9c1de553a281e2bf875bcbc6672883be"}) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x400, 0x44) openat(r8, &(0x7f0000000200)='./bus/../file0\x00', 0x103240, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x80000, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x545c, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000a40), 0x4) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000180)={0x945, 0x0, 0xd3, 0x0, 0x0, "371452d4c6c8725f10037465a35527a082b1f9"}) 5.075272598s ago: executing program 0 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'netpci0\x00', 0x4}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0xfffffffffffffedc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 4.208485389s ago: executing program 2 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000001000000200000009000200"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x601, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_NEWSETELEM={0x654, 0xc, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x614, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffe00}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "cea06dfcdc4adf802a99498ede3e3574f08c7d913726c2595c6cd8408e51ce597d03ed3daaa30f199f5268e89c7c198df6aeaf651e2c6970fd2a1ce43ec927dd6c5cdbe12f06185b8e622f2364701b383f8b489817973973790e442634c6402d08100e989c58c4291e8ca7a48ead64e6bb16f2411ac2402594f4b3ac7a8a35e6c1d94d42efbd8263ec9691336b8c953df38bfc5201be48dd4783325199d297b2d5f9c5225e10a1ea98201697768c584c5df19fbb800b569b371a61437a6f42647f14c5d4d79691dd561d1343dae4b4a149972d55c33736ad0846feb8c0490a2b9a5c736115d27f596fb35ff5dabca5cb"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "18f25489ca66bbffbffb3eb7f4e2b19da988d204b1e0"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9b}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x522}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFTA_DATA_VALUE={0x29, 0x1, "fd1c1725045448e251203afb0d0046eebf35ca107609eeb62c1a07a46e8a721659d6eaee29"}, @NFTA_DATA_VALUE={0x53, 0x1, "6e088074b5a729220baae125c369acddf6174820f05c429750f8d122203e9e1d5c03a81b7eea856f8d8473b2e514de89fc54ad00edd3be8f54b3ffeb9017a3bcc7c3b180d0db184988836c48665ad8"}]}]}, {0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "53ad8f9687e27c64268d07e08988ede38e873116"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd61}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "8ea43a04a4e34cc0256ddd83ef0cf19ff534ac511a8fc3efaab51b694005d188e9b2a8596fe0de2044ab364d0fbf8fcb07b9fc620fdb86690214cdc7cc9a1301f2f70185a0c42437ddecef29888ccb51de44844e25506728e9c0a2cbefdeb2cdb260ab93d2b6d7c187364bb2c7e0512cf2cc6e4644bdbd10af3bfd5e697f7f474272ef"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "7e605d2fe846c5e0e5750c86e1ee6f9ed1daeb181af67b628a71838cc60b37faa6747acded6381c1a55c194961c838e4a10bb9c626166c42ea27d978b5ad025c5d8da265f0933d6bc9a085514e2c2777e2abcda5886563015c6698f06b7598b158d849697e75c93d1aeb4673919cc6d77b0bec2bb79a1cf16eac66decba48919cfc86afa20d6a62414fa01e465376c7ed5b52bab6f35ecece57fbe32728c513d6037b4eeeb642b149fc7ab189b516752717a9cb97964efea37775911075bb4725772423595d144"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}]}]}]}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_DELRULE={0x120, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xeb, 0x7, 0x1, 0x0, "0d56cc733473449e39ac61422ee8f8bcc2480d87e99402975db0f8767903faab64a949d745259f55130279b528e45e006e652bcb613251766d6cc514ea83bfa320002c73a67ebea0992a2cfd5f0f5265f223df18e1338376b44bd98ce4cba640cbd52d8a9100a82fc568a559e3ad90ade074c3d2da82855df290cc1f74bc17ada52e240ea9d6fa0992329836ae37dff884976e7ffcfe0861316cb9cf24bc13f5380d06e2e9b9ad6eddd616f422eb3307ea527f6406ef68d5c7cadf05e98843d7d2ac717dd5679dfd4541145dd7336f335ba80526e5a56eacc2ec05c3c84a3c53f071a5f981ef14"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x0, 0x0, 0x0, {0x6952f0fb02b2ffc6, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0xe4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xce, 0x6, "9e053efd984a14c4cdb40464688be00892fa94c8e2b531f5a0f5b11b1e8092eb0d6583ad265d1541824d8e7ae74ca1d3af8314af98fb243ad8d5108cfe12e424613a25805a0bd76efad2479881be3709d93ff4bba3cc60e95439cb99cfbd748b72ff274d14a33798a6c837d6d747d76f878298a9b97bcc075a952796a916bbbbc134690caf55dd3eed92ac3c2e6e643ab2e5f24fd52372d6c64dd1544e57683956ce21455b2cfeedcdaaf1a7d56d0ca7bca1a3a7ceff84ee0f573a3ab704d02427875c0fea32b7189e97"}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x687, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "d79d29a2573ed6fc65d0524a8a20acd6d4b45ac923ee950173d9a41cf2b99a7ed0769ed954d851deadf809867dd63638c0650191e05781ccfd28f026a47a3f602b9b499e9da3a2019504aa5f179f6816b36a49552a87930ad4a24fcbdd1943cc5e97403d0915bc5cef9207da02329853d6b0a63fb649b3e73f2613a71f39e3f8f67723c92daa0f7c22c703ea70c70b76eae688f0c685252586eaccef639961a005c24104d6aafb645e021e6f4c5f2467772909b31ba6e8"}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0xacc}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000080)='./mnt\x00', 0x93d0a2, &(0x7f0000000200), 0xbb, 0x262, &(0x7f0000000780)="$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") r2 = io_uring_setup(0x17ba, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0xfffffffc, 0x0, &(0x7f00000017c0)}, 0xfeed) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) nanosleep(&(0x7f00000000c0)={0x0, 0xfffffffffffffff7}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0xa0402, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x14113e, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@generic={0x62, 0x0, 0x0, 0x9000}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ftruncate(r4, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.07455637s ago: executing program 2 (id=250): mmap(&(0x7f0000301000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000680)={0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000100)={{0x9, 0x9}, 'port1\x00', 0x0, 0x80800, 0x7fff, 0x1, 0xec5b, 0x7, 0xc45, 0x0, 0x0, 0xf}) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r0, &(0x7f0000002f00)=[{&(0x7f0000000c00)=""/31, 0x1f}, {0x0}], 0x2) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 3.197216711s ago: executing program 2 (id=256): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x431, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)="d037943c6eace136cf46c8762ed65fb91c96d7e7143cb6309a06ea0a4d3e89a69abf4da9f1dd1e7f4cd4820fac30e3b65040aa", 0x33) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000000000001000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000bfb4af84"], 0x28}, 0x1, 0x0, 0x0, 0x8850}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0xfffffff8, 0x8, @local, @private2, 0x7810, 0x0, 0x3ff, 0xe5d}}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 2.935316312s ago: executing program 2 (id=262): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000540)={0x0, 0xffffffff004, 0x1}) truncate(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6dd896bf, 0x68}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d733ed806a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000020}, 0x24008040) 2.181663873s ago: executing program 2 (id=268): r0 = syz_open_procfs(0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000004) getdents64(r0, 0x0, 0x0) 1.822984422s ago: executing program 2 (id=273): r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0x5b, 0x80000000, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x700, 0x80, 0xd03, 0xfbd3}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', r1, 0x0, 0x4}, 0x48) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = dup3(r7, r6, 0x0) recvmmsg$unix(r8, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x58ca02a0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@fmask={'fmask', 0x3d, 0x36}}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@tz_utc}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@check_normal}, {}]}, 0x6, 0x2c9, &(0x7f0000000e40)="$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") memfd_create(&(0x7f0000000300)='+\x8b\x8a\x95mDV\v\xb0\\\xe9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb1\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L(\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xea\xd4L\xc4\xb3\xa2l>\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7Fe$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) recvfrom$l2tp6(r0, &(0x7f0000000300)=""/221, 0xdd, 0x40, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x8, 0x4, 0x5a, 0x0, 0xa, 0x1002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x1000, 0xd3}, 0x100021, 0x6, 0x70, 0x7, 0x3, 0x7f, 0x4, 0x0, 0xfffffff8, 0x0, 0x2d}, 0x0, 0x4, r2, 0x8) write$evdev(r9, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x80004509, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAON(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioperm(0x0, 0x20, 0x3f) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 1.542099725s ago: executing program 3 (id=278): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40015d242, 0x0) ftruncate(r1, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000200)="a3", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3}, 0x0, 0x0, r4, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e31, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLERRORu(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="260000000001001900637075655f7065726370755f73797300060000008de2cc9062c717032e7f1b0c6345fe5bc7141605ee3f182a7d0e9c6a8a3ca3cae8b8f389c9a0be6d8be4aa9adebe4759384606a3c366a5f1491edc3da1c26db781304222f9c4de4a5c8e64885efb516568df734c60d4ade2495377044721a17f87c52cf18bdf82358e3dfc4a60b19d21db47d676c9eb9f2b1071a36f3e1fcbcf86b9f07759b2ac10d7e05cf2e607d86cdc44c19676b7bdf11ae984dd2a0a78d0aae936bf99dcc166371a958b0f76feecdf9c6c24258ad9e869"], 0x26) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d2c757466383d304f757365667265652c7379735f696d6d757461626c652c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d312c756e695f786c6174653d302c00ec25a3507cac892f87ee53728f7ddf5e71148261b80af17fa429e87c8d4558e46aaa10eb02be363e78b9ba8b429097ec4a86221f8f6a161193006fb56e6076a09520a4cedce9f057040000000000000000"], 0x0, 0x275, &(0x7f0000000600)="$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") sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) 1.419113505s ago: executing program 3 (id=280): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), ""/16, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x80800004, 0x0, 0x0, 0x10, &(0x7f00000009c0), &(0x7f0000000340), 0x8, 0x54, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="34fffd6803000109000a1835f53d97734160848591310000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10048044}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x1, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x4, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x10, 0x80000001, 0x10000, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x69, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0x3d, 0x0, 0x6}, @noop, @rr={0x7, 0x13, 0xf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x1019ff, 0x0) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setsig(r8, 0xa, 0x21) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r8, 0x400, 0x2) read(r0, &(0x7f0000002340)=""/4096, 0x1000) 1.367391209s ago: executing program 1 (id=281): fcntl$setpipe(0xffffffffffffffff, 0x40a, 0x0) symlink(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x10) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000180)={'system_u:object_r:apm_bios_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x53) 1.319088523s ago: executing program 1 (id=282): r0 = syz_open_procfs(0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000004) getdents64(r0, 0x0, 0x0) 1.11106699s ago: executing program 1 (id=283): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="01800000000000002c00128009000100766c616e000000001c0002800600010000000000040003800c000200540a00001800000008000500", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0xba01}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="01800000000000002c00128009000100766c616e000000001c0002800600010000000000040003800c000200540a00001800000008000500", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0xba01}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x96d, 0xfffffff4, 0x8, 0x800, 0xffffffffffffffff, 0x1, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xe}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x4004}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) (async) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r6 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x81, 0x0) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x81, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) (async) shmctl$IPC_RMID(0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r7, 0x0, 0x0, 0x0) (async) fadvise64(r7, 0x0, 0x0, 0x0) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x6000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x100000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000900)}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000008ecf0d03a900a3370b053f162cfd4ca5ed8c2cec86acee10000000", @ANYRES32, @ANYRES32, @ANYBLOB="14010000000008000000000001000000597d70778f6a301f57086b13838db6f21c7c651fd28f91e01659b9dfe2fb5c", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200000090a24848c74e21652df039a9bb39d9b36e0fde6f2600016e2afa02d1d553a2fe1bb3508f3ed55e097e79d5573a18d564e5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYBLOB="8a9cf97c31fd4abfe3dac5f925b0a1fd48908c77d1880e8e9a692fd01d0edb7fee9eb3ebf6ca4b70602a3f0dbd2201cf3835540cf0671ab3780be4962ca8c114b8973eda8e729caa977f3acec931460ab337f245f8726d2d92527458f7d869ded6eaa1b04a7dc76da91f63879e28bbf3c7ce37cdd0ed2281d14e2a0020dad5ce8835b2f816741c1a5c4b75c8be9c306308", @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRESHEX=r2, @ANYBLOB="0000000020000000000000000100000001000000226ebaf0e9dcbbf2b77f5c4a816c2c7385878b668dfc71a27a8e9fa07998ee2077ecfd7b2e15f11bf138c5b8017d60decbfd6542ee972132749c8bcd38286a958a53d402120977419ebb369fd74b5b6cb8c0bb6bffd3aa26477474d71c8384af6c81632184b07aa3dff51c3883c6c6ba52375591325e4b1938", @ANYRES32, @ANYRES32, @ANYRES8=r8, @ANYRES32], 0xd8, 0x8000}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001100)=[{&(0x7f00000001c0)="d99e6ac8330114796271cd20df39580472b1cfb930fdf7a63257ec52a27fb3a3b933725b72ab0e997d954b2ee71a542cd1ccba7f21e4615fa171d185b5a1836a7432245522e2e752c88a38c1ee431f01adc650eb82866ea97812baa701aed099645d140b95c33b309c78ed15048dc76c63847fc4823f6ff1", 0x78}, {&(0x7f0000000c80)="9cc737b0c0cd14eb947eacef86116f9e3603375f4b57315916e6cd3bb6e42b9646871085e69d2d90d4729ee11b0c13260ccf337439d7d5231bbdec8549a60216596fd6cf0da8d2547807995009c8da243b06b74d792f94444abc459e5907addc0d207c3e7befafac813333320ab2f31fe1e72f2477", 0x75}, {&(0x7f0000000d00)="6db9dd338d2b6b9ac269a2527cb345de6d05e66f9d11c3e261672b2d02eb55b743cad3b704fc6d879df97e1f442152b00307f59b13395fda478d312b0dbfd2f9f41de45be746969bb22bc4e2ce3b8a50f9bdca6728f7eb4342ad958796bc4e94054bc6aea1f3866ce664e4c2b0f88ca01439a31ecc69aea5b6f652badbf550a052408aa7", 0x84}, {&(0x7f0000000dc0)="e6e810b1138e29f5c387869963bb1651a5f8d512864b9073d624127369a4b285301295709f4329bfa29915cc2278af44d3eecc471d4e9513aaf634aa61cd8c9268405eb311086f87e88244ba", 0x4c}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="3d0cce2909b8d3cb6fb994619f88aa11a1b2358fb68442faa0cc6d133ad8e6e7f068f4a9eeb630280f0f3244e38ca46e933601abc1059139b551dc370ad6f7a198", 0x41}, {&(0x7f0000000900)="5a0f1951bd588a009061813dc47b0ecf80df7e8e8648e13ea2137010554a3403a747c019a1d0c26ea3b68ee1a208ffce573104a1ea509013c5085c4fca61545fea69ad2c8704ea1de78cb98fcc3722f7b033ce9b1f131d6b864c3430ee33edeb62236c65a09e4272b9e95e26f1cdbab179716daf95c2ec5369f473edf5e54a4525bc28526426600074ae6748debe087c55d7088a", 0x94}, {&(0x7f0000000fc0)="6f79e79a8260b6732b0b0d667bd98070ad0161a1249ecbe45e6b7e2186f55e01288ec0479ac8484d6bf4f99819f56d85b0d58f06da", 0x35}, {&(0x7f0000001040)="11fa3c43e24881b83c686f8df9f87f0b4c4a15ea915cbb38b2def3474a1b0d3f15c372587586c54ecd7acfb5bf79aa95b80135c07e871f016dc644dec4efada85e3e7772", 0x44}, {&(0x7f00000010c0)="d364b6e72512b081d438ab9c2ed449ac6e58148d415aba8b4f29a6f94d767526f39a539808601c96aea5a8e19015766dff", 0x31}], 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="000000001c000000000000000100000001000000eccf08a8985902bc356d81b3b42908a179b29f31deffab447a81548a3095921b2b4c57607b9072fdded2e8620388f86d255d2bb097a1063685", @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x44005}}], 0x2, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000900)}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000008ecf0d03a900a3370b053f162cfd4ca5ed8c2cec86acee10000000", @ANYRES32, @ANYRES32, @ANYBLOB="14010000000008000000000001000000597d70778f6a301f57086b13838db6f21c7c651fd28f91e01659b9dfe2fb5c", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200000090a24848c74e21652df039a9bb39d9b36e0fde6f2600016e2afa02d1d553a2fe1bb3508f3ed55e097e79d5573a18d564e5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYBLOB="8a9cf97c31fd4abfe3dac5f925b0a1fd48908c77d1880e8e9a692fd01d0edb7fee9eb3ebf6ca4b70602a3f0dbd2201cf3835540cf0671ab3780be4962ca8c114b8973eda8e729caa977f3acec931460ab337f245f8726d2d92527458f7d869ded6eaa1b04a7dc76da91f63879e28bbf3c7ce37cdd0ed2281d14e2a0020dad5ce8835b2f816741c1a5c4b75c8be9c306308", @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRESHEX=r2, @ANYBLOB="0000000020000000000000000100000001000000226ebaf0e9dcbbf2b77f5c4a816c2c7385878b668dfc71a27a8e9fa07998ee2077ecfd7b2e15f11bf138c5b8017d60decbfd6542ee972132749c8bcd38286a958a53d402120977419ebb369fd74b5b6cb8c0bb6bffd3aa26477474d71c8384af6c81632184b07aa3dff51c3883c6c6ba52375591325e4b1938", @ANYRES32, @ANYRES32, @ANYRES8=r8, @ANYRES32], 0xd8, 0x8000}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001100)=[{&(0x7f00000001c0)="d99e6ac8330114796271cd20df39580472b1cfb930fdf7a63257ec52a27fb3a3b933725b72ab0e997d954b2ee71a542cd1ccba7f21e4615fa171d185b5a1836a7432245522e2e752c88a38c1ee431f01adc650eb82866ea97812baa701aed099645d140b95c33b309c78ed15048dc76c63847fc4823f6ff1", 0x78}, {&(0x7f0000000c80)="9cc737b0c0cd14eb947eacef86116f9e3603375f4b57315916e6cd3bb6e42b9646871085e69d2d90d4729ee11b0c13260ccf337439d7d5231bbdec8549a60216596fd6cf0da8d2547807995009c8da243b06b74d792f94444abc459e5907addc0d207c3e7befafac813333320ab2f31fe1e72f2477", 0x75}, {&(0x7f0000000d00)="6db9dd338d2b6b9ac269a2527cb345de6d05e66f9d11c3e261672b2d02eb55b743cad3b704fc6d879df97e1f442152b00307f59b13395fda478d312b0dbfd2f9f41de45be746969bb22bc4e2ce3b8a50f9bdca6728f7eb4342ad958796bc4e94054bc6aea1f3866ce664e4c2b0f88ca01439a31ecc69aea5b6f652badbf550a052408aa7", 0x84}, {&(0x7f0000000dc0)="e6e810b1138e29f5c387869963bb1651a5f8d512864b9073d624127369a4b285301295709f4329bfa29915cc2278af44d3eecc471d4e9513aaf634aa61cd8c9268405eb311086f87e88244ba", 0x4c}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="3d0cce2909b8d3cb6fb994619f88aa11a1b2358fb68442faa0cc6d133ad8e6e7f068f4a9eeb630280f0f3244e38ca46e933601abc1059139b551dc370ad6f7a198", 0x41}, {&(0x7f0000000900)="5a0f1951bd588a009061813dc47b0ecf80df7e8e8648e13ea2137010554a3403a747c019a1d0c26ea3b68ee1a208ffce573104a1ea509013c5085c4fca61545fea69ad2c8704ea1de78cb98fcc3722f7b033ce9b1f131d6b864c3430ee33edeb62236c65a09e4272b9e95e26f1cdbab179716daf95c2ec5369f473edf5e54a4525bc28526426600074ae6748debe087c55d7088a", 0x94}, {&(0x7f0000000fc0)="6f79e79a8260b6732b0b0d667bd98070ad0161a1249ecbe45e6b7e2186f55e01288ec0479ac8484d6bf4f99819f56d85b0d58f06da", 0x35}, {&(0x7f0000001040)="11fa3c43e24881b83c686f8df9f87f0b4c4a15ea915cbb38b2def3474a1b0d3f15c372587586c54ecd7acfb5bf79aa95b80135c07e871f016dc644dec4efada85e3e7772", 0x44}, {&(0x7f00000010c0)="d364b6e72512b081d438ab9c2ed449ac6e58148d415aba8b4f29a6f94d767526f39a539808601c96aea5a8e19015766dff", 0x31}], 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="000000001c000000000000000100000001000000eccf08a8985902bc356d81b3b42908a179b29f31deffab447a81548a3095921b2b4c57607b9072fdded2e8620388f86d255d2bb097a1063685", @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x44005}}], 0x2, 0x0) getuid() r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xfffffe87) setreuid(0x0, r11) (async) setreuid(0x0, r11) getegid() (async) getegid() getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)) 894.784207ms ago: executing program 1 (id=285): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='@\x00') perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e2}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 843.530371ms ago: executing program 1 (id=287): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) inotify_init() socket(0x15, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x200, 0x70bd2d, 0x25dfcbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x0) 774.209617ms ago: executing program 4 (id=288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3}}, 0x24}}, 0x0) 691.197534ms ago: executing program 1 (id=289): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), 0x0) setreuid(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) syz_io_uring_setup(0xec3, &(0x7f00000008c0)={0x0, 0x100000, 0x0, 0x1}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) 659.709176ms ago: executing program 4 (id=290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="852000000400000018430000f8ffffff00368384842700000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001a000000850000000600000018100000f120f63081c712291620d5c79ddad17245c816a60d415133930bddd3125e0559e00cd305da22a7e208ae1e0411fccd04b9c684e5de32cf32c6b160fc80a8f3f363883b6e426b7d2e211c806a86b59e96a8136d00ae8577c3c43e7a512407ad345ca699c2599555084d47142122908fa7b37271a67634dc63d65662dbf4", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='syzkaller\x00', 0x800, 0xcf, &(0x7f0000000140)=""/207, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x1], &(0x7f0000000340)=[{0x0, 0x2, 0x0, 0xb}, {0x0, 0x5, 0xc}, {0x4, 0x3, 0x10}, {0x8, 0x1, 0x7, 0x5}, {0x1, 0x1, 0x10, 0xb}], 0x10, 0x2}, 0x90) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ustat(0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") socket$rxrpc(0x21, 0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x109}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) (async) socket$unix(0x1, 0x5, 0x0) (async) socket$inet(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=ANY=[@ANYBLOB="05041000aa0739bfe991b0b8f52125d32a7408e69882eef2c8cf74109e35fd29efcd35a114f21f0144dc9a717bb8262a810b9700e97300000000000000000000000000000000000000000000000000000000254f62795b15dbdb0debd76049309e7d710f0d99bee7db686699a7d1ff8c0d3232179325a23bb466be9b3ed4cb723c427af47458dcf480f0eab05c71da60903352cce4037b4f9dcd696a2c64e2e4138b9aaff21844e90d98baa3610f4665a9460e2ea362c23826de49de66df906df5e2c986e47ff7635fe1f5d29163f2190b0349398bcd07", @ANYRESDEC, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3, @ANYRES64=0x0], 0x4}}, 0x20000000) (rerun: 64) sendfile(r5, r4, 0x0, 0x100000002) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x618, 0x428, 0x1d8, 0xd0, 0xd0, 0x1d8, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @local, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='rpcgss_context\x00', r0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) 570.623433ms ago: executing program 3 (id=291): fcntl$setpipe(0xffffffffffffffff, 0x40a, 0x0) symlink(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000180)={'system_u:object_r:apm_bios_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x53) 499.390439ms ago: executing program 3 (id=292): r0 = syz_open_procfs(0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000004) getdents64(r0, 0x0, 0x0) 499.146589ms ago: executing program 3 (id=293): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x64423ba0, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="38ea37e1e73b1d75432c37f40186bf945007834a2b1a384fec8e3f3133e13621551fb4568e7e043572c3a779df5765008c2ed1ca153060133e577feeafa60cf98562debc32ae2f6ba7b836ef729196cdce3a7027328a7e61b713f42cfe2de1138aab75fc342938898bafb97307a741626f85d9ee9054f2c068ddf4853af7263bfef7ffb217c246b79ed6004ea8a2b4f42e59433b3b23912ad0134cc843f6076ebe7bfcaa951baacc15cdc852dbfd03311205d3509fa2d16b0c8aa7eab15b1096ca557623c1f49fc813b826e2d1827179c65eb4d505de53a3d60cb843114079369b39f2257257167a85fab661c3a8b0e75ced", 0xf2}, {&(0x7f0000000280)="a44673d469454a65fba7e495194e2a93bb9e9706d5cf54f010d93f8ccee98ec3989f089467ae757b318ff27734ed6c74d595736292af58ca57c87970564df497eea0862b7c7b3788716cfa816c48a9c449da5210", 0x54}, {&(0x7f0000000c00)="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", 0x1000}], 0x3, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x89, 0x19, '\x00', [@calipso={0x7, 0x40, {0x0, 0x2, 0x5, 0xf, [0x6, 0x2, 0x5, 0x5, 0x20000000000006, 0x2, 0x800]}}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @private2}, @generic={0x1, 0x55, "715ae303cbb05b622668e2f1b67196900555c33acf2ac7882df2dfdb4f11fda8d917dbb1da8aa9a78739e4bb4799fdf75fb3197ed0945d8813a593b5316454e1be2c6018139c40e6c639a9ddf2917ab6440fa94221"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x3a, 0x10, 0x1, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @local, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}}}], 0x1a8}}], 0x1, 0x0) 465.591302ms ago: executing program 3 (id=294): perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6}, 0x18) r7 = dup(r5) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80200001200000829bd70002103004000000000496b872e834913c9000100000004000000ffffff7f81000000cae19cb24352ad29d60700000000000000a38f7af9fad348d72009fddde29f3d648d2b2fcd3a17754dfffbb888a556047b7e7c22386fd6490eb91687878f052cdffd35836e4bd9d80d28875c38b051b065ad8ada847dc2e9cf08c8b9c34da90486924217", @ANYRES32=r4, @ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x10}, 0x24008091) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) getpeername$l2tp6(r7, 0x0, 0x0) timer_create(0x8, &(0x7f00000026c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002700)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000580)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) listen(r8, 0x3) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 436.842914ms ago: executing program 4 (id=295): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800720, &(0x7f0000000ac0)={[{@jqfmt_vfsv1}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@bsdgroups}, {@nombcache}, {@usrjquota}]}, 0x3, 0x45e, &(0x7f0000000b80)="$eJzs289vFFUcAPDvTH+g/GpF/AGiVomx8UdLCyoHLxpNPGA00QMea1sIYaGG1kQIkWoMXkwMiZ6NRxP/Am9ejHoy8ap3Q0KUC+ipZmZnoLvstuyy7tbu55MM+97OW9779s3beTNvNoC+NZb9k0Rsj4jfImKkmq0tMFZ9uX71/OzfV8/PJrGy8tafSV7u2tXzs2XR8nPbisx4GpF+khSV1Fo8e+7kTKUyf6bITy6dem9y8ey5Z0+cmjk+f3z+9PThw4cOTr3w/PRzHYkzi+va3g8X9u157Z1Lr88evfTuT99m7d1e7F8dR7sG6vJjWeB/reTqyz5xp5VtMDtWpZPBHjaElmTHbNZdQ/n4H4mBuNl5I/Hqxz1tHPCfys5NW5rvXl4BNrEket0CoDfKE312/VtuXZp6bAhXXqpeAGVxXy+26p7BSIsyQ3XXt500FhFHl//5KtuiQ/chAADW8tnsl0fimUbzvzTuX1VuZ7GGMhoR90TEroi4NyJ2R8R9EXnZByLiwRbrr18aunX+k15uK7DblM3/XizWtmrnf+XsL0YHityOPP6h5NiJyvyB4m8yHkNbsvzUGnV8/8qvnzfbt3r+l21Z/eVcsGjH5cG6G3RzM0sz+aS0A658FLF3sFH8yY2VgCQi9kTE3tb+651l4sRT3+xrVmj9+NfQgXWmla8jnqz2/3LUxV9U8lD1ten65ORdUZk/MFkeFbf6+ZeLbzar/47i74Cs/7fWHv/1RUaT1eu1i63XcfH3T5te07R7/A8nb+c9NFy898HM0tKZqYjh5Eier3l/+uZny3xZPot/fH/j8b+r+ExWT3YQZAfxwxHxSEQ8WrT9sYh4PCL2rxH/jy8339dS/y+vUUmbsvjnGn7/3XgKoK7/W08MnPzhu/bjz/r/UJ4aL97Jv//WsU67Ku0fzQAAAPD/k+bPwCfpxI10mk5MVJ/h3x1b08rC4tLTxxbePz1XfVZ+NIbS8k7XyKr7oVNJeXOimp8u7hWX+w8W942/GLg7z0/MLlTmehw79LttTcZ/5o/6H7QAm0+jdbTp4R40BOi6+vGf1mYvvNHNxgBd5ffa0L/WGf9pt9oBdJ/zP/SvRuP/Ql3eWgBsTs7/0L+Mf+hfxj/0L+Mf+tKd/K5fop8Tkd524SQ2SJsbJpY3RjM2WqLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//3CA7eE=") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = socket(0x11, 0xa, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x970026, &(0x7f00000003c0)={[{}, {@gid}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 149.520488ms ago: executing program 4 (id=296): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a647300ed6dd26eea3837229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='@\x00') perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e2}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 103.746661ms ago: executing program 4 (id=297): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000500)='./file0\x00', 0x300001a, &(0x7f00000034c0)=ANY=[], 0xd, 0x2a9, &(0x7f0000000240)="$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") socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000006c288500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0x3, 0xffe0}, {0x6e7b54e60b991b95, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xe5}}, @TCA_RATE={0x6, 0x5, {0xb4, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x9}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xfa}}]}, 0x5c}, 0x1, 0x7a00}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 0s ago: executing program 4 (id=298): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x2400c044) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030040"], 0x8, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x0, 0x100, 0x5, 0x8, 0x1000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x48) r7 = fcntl$dupfd(r5, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 21.407641][ T29] audit: type=1400 audit(1721972887.403:81): avc: denied { read } for pid=2940 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 24.224751][ T29] audit: type=1400 audit(1721972890.223:82): avc: denied { mounton } for pid=3237 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.226028][ T3237] cgroup: Unknown subsys name 'net' [ 24.247566][ T29] audit: type=1400 audit(1721972890.223:83): avc: denied { mount } for pid=3237 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.274953][ T29] audit: type=1400 audit(1721972890.263:84): avc: denied { unmount } for pid=3237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.499916][ T3237] cgroup: Unknown subsys name 'rlimit' [ 24.622832][ T29] audit: type=1400 audit(1721972890.623:85): avc: denied { setattr } for pid=3237 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.646243][ T29] audit: type=1400 audit(1721972890.623:86): avc: denied { create } for pid=3237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.666812][ T29] audit: type=1400 audit(1721972890.623:87): avc: denied { write } for pid=3237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.686690][ T3247] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.687266][ T29] audit: type=1400 audit(1721972890.623:88): avc: denied { read } for pid=3237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.716451][ T29] audit: type=1400 audit(1721972890.623:89): avc: denied { mounton } for pid=3237 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.741233][ T29] audit: type=1400 audit(1721972890.623:90): avc: denied { mount } for pid=3237 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.790969][ T3237] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.839544][ T3254] chnl_net:caif_netlink_parms(): no params data found [ 25.866675][ T3255] chnl_net:caif_netlink_parms(): no params data found [ 25.944231][ T3254] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.951464][ T3254] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.958586][ T3254] bridge_slave_0: entered allmulticast mode [ 25.964994][ T3254] bridge_slave_0: entered promiscuous mode [ 25.992835][ T3254] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.000042][ T3254] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.007169][ T3254] bridge_slave_1: entered allmulticast mode [ 26.014071][ T3254] bridge_slave_1: entered promiscuous mode [ 26.037679][ T3255] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.044808][ T3255] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.052104][ T3255] bridge_slave_0: entered allmulticast mode [ 26.058576][ T3255] bridge_slave_0: entered promiscuous mode [ 26.073059][ T3254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.086074][ T3255] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.093204][ T3255] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.100338][ T3255] bridge_slave_1: entered allmulticast mode [ 26.106736][ T3255] bridge_slave_1: entered promiscuous mode [ 26.117618][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 26.127341][ T3254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.141580][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 26.162837][ T3255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.188765][ T3255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.206418][ T3254] team0: Port device team_slave_0 added [ 26.226315][ T3254] team0: Port device team_slave_1 added [ 26.250725][ T3255] team0: Port device team_slave_0 added [ 26.260836][ T3254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.267853][ T3254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.293886][ T3254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.305080][ T3254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.312154][ T3254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.338129][ T3254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.351879][ T3255] team0: Port device team_slave_1 added [ 26.357612][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 26.391310][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.398430][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.405599][ T3261] bridge_slave_0: entered allmulticast mode [ 26.412054][ T3261] bridge_slave_0: entered promiscuous mode [ 26.440989][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.448100][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.455244][ T3261] bridge_slave_1: entered allmulticast mode [ 26.461577][ T3261] bridge_slave_1: entered promiscuous mode [ 26.467973][ T3255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.474983][ T3255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.501087][ T3255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.516560][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.523745][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.530928][ T3258] bridge_slave_0: entered allmulticast mode [ 26.537612][ T3258] bridge_slave_0: entered promiscuous mode [ 26.550738][ T3254] hsr_slave_0: entered promiscuous mode [ 26.556771][ T3254] hsr_slave_1: entered promiscuous mode [ 26.567671][ T3255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.574673][ T3255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.600684][ T3255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.613790][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.620895][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.628040][ T3258] bridge_slave_1: entered allmulticast mode [ 26.634451][ T3258] bridge_slave_1: entered promiscuous mode [ 26.664374][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.674906][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.695224][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.705902][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.752499][ T3255] hsr_slave_0: entered promiscuous mode [ 26.758618][ T3255] hsr_slave_1: entered promiscuous mode [ 26.764510][ T3255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.772159][ T3255] Cannot create hsr debugfs directory [ 26.777804][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.785141][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.792616][ T3268] bridge_slave_0: entered allmulticast mode [ 26.799010][ T3268] bridge_slave_0: entered promiscuous mode [ 26.811417][ T3258] team0: Port device team_slave_0 added [ 26.817986][ T3261] team0: Port device team_slave_0 added [ 26.834751][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.841877][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.849140][ T3268] bridge_slave_1: entered allmulticast mode [ 26.855485][ T3268] bridge_slave_1: entered promiscuous mode [ 26.862635][ T3258] team0: Port device team_slave_1 added [ 26.874286][ T3261] team0: Port device team_slave_1 added [ 26.891756][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.898743][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.924678][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.950849][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.957921][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.983973][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.001376][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.008453][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.034384][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.045530][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.052527][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.078431][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.100632][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.127595][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.146520][ T3261] hsr_slave_0: entered promiscuous mode [ 27.152615][ T3261] hsr_slave_1: entered promiscuous mode [ 27.158681][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.166223][ T3261] Cannot create hsr debugfs directory [ 27.204772][ T3258] hsr_slave_0: entered promiscuous mode [ 27.211022][ T3258] hsr_slave_1: entered promiscuous mode [ 27.216847][ T3258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.224414][ T3258] Cannot create hsr debugfs directory [ 27.236273][ T3268] team0: Port device team_slave_0 added [ 27.242773][ T3268] team0: Port device team_slave_1 added [ 27.289314][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.296352][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.322332][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.356879][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.363883][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.389809][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.427193][ T3254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.435172][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 27.435186][ T29] audit: type=1400 audit(1721972893.423:104): avc: denied { create } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.461997][ T29] audit: type=1400 audit(1721972893.423:105): avc: denied { write } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.482630][ T29] audit: type=1400 audit(1721972893.423:106): avc: denied { read } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.513038][ T3254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.521827][ T3255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.530730][ T3255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.541666][ T3255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.552240][ T3268] hsr_slave_0: entered promiscuous mode [ 27.558086][ T29] audit: type=1400 audit(1721972893.563:107): avc: denied { remove_name } for pid=2940 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.580777][ T29] audit: type=1400 audit(1721972893.563:108): avc: denied { rename } for pid=2940 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.580997][ T3268] hsr_slave_1: entered promiscuous mode [ 27.603273][ T29] audit: type=1400 audit(1721972893.563:109): avc: denied { create } for pid=2940 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.630168][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.637745][ T3268] Cannot create hsr debugfs directory [ 27.643269][ T3254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.651795][ T3254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.662678][ T3255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.698669][ T3261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.720610][ T3261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.741206][ T3261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.751978][ T3261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.775654][ T3258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.790012][ T3258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.798986][ T3258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.818555][ T3258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.890636][ T3268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.900446][ T3268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.915339][ T3254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.929926][ T3268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.938927][ T3268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.951351][ T3255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.970102][ T3254] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.992055][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.999170][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.018576][ T3255] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.038121][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.045248][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.064630][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.072969][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.080084][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.093549][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.109753][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.119184][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.126292][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.142385][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.155632][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.162717][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.184854][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.191947][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.213936][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.221056][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.231401][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.238588][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.271195][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.307267][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.331716][ T3254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.342184][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.349313][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.358889][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.365977][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.396414][ T3268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.407021][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.455030][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.470151][ T3255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.520701][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.537288][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.611377][ T3254] veth0_vlan: entered promiscuous mode [ 28.620079][ T3254] veth1_vlan: entered promiscuous mode [ 28.664684][ T3261] veth0_vlan: entered promiscuous mode [ 28.675559][ T3254] veth0_macvtap: entered promiscuous mode [ 28.692142][ T3261] veth1_vlan: entered promiscuous mode [ 28.714123][ T3254] veth1_macvtap: entered promiscuous mode [ 28.749193][ T3258] veth0_vlan: entered promiscuous mode [ 28.756425][ T3254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.774387][ T3258] veth1_vlan: entered promiscuous mode [ 28.783205][ T3261] veth0_macvtap: entered promiscuous mode [ 28.797413][ T3254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.810150][ T3268] veth0_vlan: entered promiscuous mode [ 28.817345][ T3261] veth1_macvtap: entered promiscuous mode [ 28.831928][ T3268] veth1_vlan: entered promiscuous mode [ 28.840635][ T3254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.849429][ T3254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.858224][ T3254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.866953][ T3254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.883402][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.894002][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.904888][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.917550][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.928073][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.939612][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.950058][ T3255] veth0_vlan: entered promiscuous mode [ 28.963357][ T3261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.972133][ T3261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.980938][ T3261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.989686][ T3261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.001570][ T3258] veth0_macvtap: entered promiscuous mode [ 29.022918][ T3255] veth1_vlan: entered promiscuous mode [ 29.027738][ T29] audit: type=1400 audit(1721972895.023:110): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/root/syzkaller.ZylI8H/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.055449][ T29] audit: type=1400 audit(1721972895.033:111): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.067021][ T3268] veth0_macvtap: entered promiscuous mode [ 29.077627][ T29] audit: type=1400 audit(1721972895.033:112): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/root/syzkaller.ZylI8H/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.099924][ T3268] veth1_macvtap: entered promiscuous mode [ 29.108540][ T29] audit: type=1400 audit(1721972895.033:113): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.127078][ T3258] veth1_macvtap: entered promiscuous mode [ 29.146402][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.156858][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.166846][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.177281][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.188035][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.196909][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.207499][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.217407][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.227858][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.239231][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.255697][ T3258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.264565][ T3258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.273382][ T3258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.282119][ T3258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.310124][ T3255] veth0_macvtap: entered promiscuous mode [ 29.324701][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.335329][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.345222][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.355813][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.365709][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.376152][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.391355][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.407589][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.418162][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.428015][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.438634][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.448496][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.459094][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.470094][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.478369][ T3255] veth1_macvtap: entered promiscuous mode [ 29.491991][ T3268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.500857][ T3268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.509604][ T3268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.518371][ T3268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.551757][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.562437][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.572467][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.582913][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.592742][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.603490][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.613387][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.623866][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.640203][ T3255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.656736][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.667301][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.677317][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.687780][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.697671][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.708192][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.718029][ T3255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.728556][ T3255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.769751][ T3255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.803841][ T3255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.812737][ T3255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.821554][ T3255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.830424][ T3255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.920247][ T3422] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.981573][ T3430] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.059267][ T3435] loop1: detected capacity change from 0 to 4096 [ 30.073011][ T3441] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14'. [ 30.075237][ T3440] loop3: detected capacity change from 0 to 256 [ 30.103955][ T3435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.124483][ T3447] loop2: detected capacity change from 0 to 1024 [ 30.131448][ T3447] ext4: Unknown parameter 'uid>00000000000000000000' [ 30.166439][ T3435] syz.1.12 (3435) used greatest stack depth: 11368 bytes left [ 30.186770][ T3451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 30.195626][ T3451] netlink: 264 bytes leftover after parsing attributes in process `syz.3.17'. [ 30.217163][ T3451] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17'. [ 30.235595][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.258012][ T3455] loop3: detected capacity change from 0 to 1024 [ 30.286309][ T3455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.321722][ T3471] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.338725][ T3471] loop2: detected capacity change from 0 to 512 [ 30.345608][ T3472] syz.1.23 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.357657][ T3471] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.22: corrupted in-inode xattr: bad e_name length [ 30.374722][ T3472] loop1: detected capacity change from 0 to 512 [ 30.379658][ T3471] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.22: couldn't read orphan inode 15 (err -117) [ 30.405149][ T3472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.412887][ T3471] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.419335][ T3472] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.448217][ T3472] syz_tun: entered promiscuous mode [ 30.455021][ T3472] batadv_slave_1: entered promiscuous mode [ 30.500239][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.561257][ T3487] loop1: detected capacity change from 0 to 256 [ 30.571875][ T3489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3489 comm=syz.0.28 [ 30.650687][ T3502] loop1: detected capacity change from 0 to 512 [ 30.670241][ T3502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.683292][ T3502] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.695469][ T3502] syz.1.32 (3502) used greatest stack depth: 11344 bytes left [ 30.704813][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.961707][ T3524] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET) [ 31.022522][ T3526] loop4: detected capacity change from 0 to 256 [ 31.087097][ T3454] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 31.104852][ T3454] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 31.110939][ T3533] team0: Port device syz_tun added [ 31.117220][ T3454] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.117220][ T3454] [ 31.132380][ T3454] EXT4-fs (loop3): Total free blocks count 0 [ 31.138427][ T3454] EXT4-fs (loop3): Free/Dirty block details [ 31.144343][ T3454] EXT4-fs (loop3): free_blocks=68451041280 [ 31.145522][ T3533] capability: warning: `syz.4.43' uses 32-bit capabilities (legacy support in use) [ 31.150188][ T3454] EXT4-fs (loop3): dirty_blocks=32 [ 31.150207][ T3454] EXT4-fs (loop3): Block reservation details [ 31.150217][ T3454] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 31.175438][ T3454] syz.3.19 (3454) used greatest stack depth: 10792 bytes left [ 31.195250][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.237684][ T3539] FAULT_INJECTION: forcing a failure. [ 31.237684][ T3539] name failslab, interval 1, probability 0, space 0, times 0 [ 31.250594][ T3539] CPU: 0 UID: 0 PID: 3539 Comm: syz.3.44 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 31.255714][ T3541] loop4: detected capacity change from 0 to 512 [ 31.260758][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 31.260776][ T3539] Call Trace: [ 31.260785][ T3539] [ 31.260794][ T3539] dump_stack_lvl+0xf2/0x150 [ 31.260836][ T3539] dump_stack+0x15/0x20 [ 31.292434][ T3539] should_fail_ex+0x229/0x230 [ 31.297170][ T3539] ? fib_nl2rule+0x217/0xcb0 [ 31.301839][ T3539] should_failslab+0x8f/0xb0 [ 31.306452][ T3539] __kmalloc_noprof+0xa5/0x370 [ 31.311284][ T3539] fib_nl2rule+0x217/0xcb0 [ 31.315719][ T3539] fib_nl_delrule+0x2cc/0x1040 [ 31.320556][ T3539] ? xa_load+0xb9/0xe0 [ 31.324633][ T3539] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 31.330201][ T3539] ? __rcu_read_unlock+0x4e/0x70 [ 31.335265][ T3539] ? avc_has_perm_noaudit+0x1cc/0x210 [ 31.340651][ T3539] ? ns_capable+0x7d/0xb0 [ 31.345041][ T3539] ? __pfx_fib_nl_delrule+0x10/0x10 [ 31.350261][ T3539] rtnetlink_rcv_msg+0x6aa/0x710 [ 31.355365][ T3539] ? __dev_queue_xmit+0x161/0x1fe0 [ 31.360488][ T3539] netlink_rcv_skb+0x12c/0x230 [ 31.365338][ T3539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 31.370879][ T3539] rtnetlink_rcv+0x1c/0x30 [ 31.375501][ T3539] netlink_unicast+0x593/0x670 [ 31.380312][ T3539] netlink_sendmsg+0x5cc/0x6e0 [ 31.385084][ T3539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 31.390448][ T3539] __sock_sendmsg+0x140/0x180 [ 31.395143][ T3539] ____sys_sendmsg+0x312/0x410 [ 31.399993][ T3539] __sys_sendmsg+0x1e9/0x280 [ 31.404832][ T3539] __x64_sys_sendmsg+0x46/0x50 [ 31.409651][ T3539] x64_sys_call+0x26f8/0x2e00 [ 31.414340][ T3539] do_syscall_64+0xc9/0x1c0 [ 31.418862][ T3539] ? clear_bhb_loop+0x55/0xb0 [ 31.423599][ T3539] ? clear_bhb_loop+0x55/0xb0 [ 31.428288][ T3539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.434290][ T3539] RIP: 0033:0x7fa589e87299 [ 31.438706][ T3539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.458412][ T3539] RSP: 002b:00007fa588b07048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.466829][ T3539] RAX: ffffffffffffffda RBX: 00007fa58a015f80 RCX: 00007fa589e87299 [ 31.474857][ T3539] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 31.482836][ T3539] RBP: 00007fa588b070a0 R08: 0000000000000000 R09: 0000000000000000 [ 31.491084][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.499055][ T3539] R13: 000000000000000b R14: 00007fa58a015f80 R15: 00007ffcf8a885e8 [ 31.507039][ T3539] [ 31.514933][ T3542] loop3: detected capacity change from 0 to 128 [ 31.522247][ T3542] vfat: Unknown parameter '' [ 31.541771][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.556119][ T3541] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.584925][ T3255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.638145][ T3554] loop1: detected capacity change from 0 to 512 [ 32.453840][ T3571] No control pipe specified [ 32.471278][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 32.471295][ T29] audit: type=1326 audit(1721972898.473:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.500940][ T29] audit: type=1326 audit(1721972898.473:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.511178][ T3576] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 32.524812][ T29] audit: type=1326 audit(1721972898.473:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.555101][ T29] audit: type=1326 audit(1721972898.473:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.578756][ T29] audit: type=1326 audit(1721972898.473:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.581136][ T3576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 32.602144][ T29] audit: type=1326 audit(1721972898.473:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.634164][ T29] audit: type=1326 audit(1721972898.473:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.657418][ T29] audit: type=1326 audit(1721972898.473:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.674067][ T3578] loop3: detected capacity change from 0 to 2048 [ 32.680670][ T29] audit: type=1326 audit(1721972898.473:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5357707299 code=0x7ffc0000 [ 32.689965][ T3578] ext4: Unknown parameter 'euid' [ 32.738206][ T3576] bond0: (slave bond_slave_1): Releasing backup interface [ 32.841208][ T3582] loop1: detected capacity change from 0 to 512 [ 32.859262][ T3582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.873045][ T3582] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.910928][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.944787][ T29] audit: type=1400 audit(1721972898.943:253): avc: denied { read } for pid=3586 comm="syz.1.61" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.016876][ T3591] loop1: detected capacity change from 0 to 512 [ 33.111568][ T3593] loop1: detected capacity change from 0 to 128 [ 33.119545][ T3593] vfat: Unknown parameter 'freezer.state' [ 33.178439][ T3595] capability: warning: `syz.1.65' uses deprecated v2 capabilities in a way that may be insecure [ 33.357927][ T3445] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 312: padding at end of block bitmap is not set [ 33.405967][ T3602] FAULT_INJECTION: forcing a failure. [ 33.405967][ T3602] name failslab, interval 1, probability 0, space 0, times 0 [ 33.418691][ T3602] CPU: 1 UID: 0 PID: 3602 Comm: syz.1.66 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 33.429035][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 33.439203][ T3602] Call Trace: [ 33.442536][ T3602] [ 33.445484][ T3602] dump_stack_lvl+0xf2/0x150 [ 33.450274][ T3602] dump_stack+0x15/0x20 [ 33.454451][ T3602] should_fail_ex+0x229/0x230 [ 33.459170][ T3602] ? sctp_add_bind_addr+0x6f/0x1e0 [ 33.464297][ T3602] should_failslab+0x8f/0xb0 [ 33.468940][ T3602] __kmalloc_cache_noprof+0x4b/0x2a0 [ 33.474336][ T3602] sctp_add_bind_addr+0x6f/0x1e0 [ 33.479285][ T3602] sctp_copy_local_addr_list+0x19b/0x220 [ 33.484930][ T3602] sctp_copy_one_addr+0x83/0x410 [ 33.489892][ T3602] sctp_bind_addr_copy+0x81/0x2b0 [ 33.494959][ T3602] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 33.501050][ T3602] sctp_connect_new_asoc+0x1d0/0x3b0 [ 33.506481][ T3602] sctp_sendmsg+0xf05/0x1920 [ 33.511094][ T3602] ? __pfx_sctp_sendmsg+0x10/0x10 [ 33.516219][ T3602] inet_sendmsg+0xc5/0xd0 [ 33.520563][ T3602] __sock_sendmsg+0x102/0x180 [ 33.525338][ T3602] ____sys_sendmsg+0x312/0x410 [ 33.530173][ T3602] __sys_sendmmsg+0x269/0x500 [ 33.534974][ T3602] __x64_sys_sendmmsg+0x57/0x70 [ 33.539843][ T3602] x64_sys_call+0x2b4e/0x2e00 [ 33.544534][ T3602] do_syscall_64+0xc9/0x1c0 [ 33.549113][ T3602] ? clear_bhb_loop+0x55/0xb0 [ 33.553819][ T3602] ? clear_bhb_loop+0x55/0xb0 [ 33.558516][ T3602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.564466][ T3602] RIP: 0033:0x7f5b94ba7299 [ 33.568885][ T3602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.588733][ T3602] RSP: 002b:00007f5b93827048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 33.597256][ T3602] RAX: ffffffffffffffda RBX: 00007f5b94d35f80 RCX: 00007f5b94ba7299 [ 33.605321][ T3602] RDX: 0000000000000001 RSI: 0000000020000500 RDI: 0000000000000003 [ 33.613306][ T3602] RBP: 00007f5b938270a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.621283][ T3602] R10: 0000000004044040 R11: 0000000000000246 R12: 0000000000000002 [ 33.629260][ T3602] R13: 000000000000000b R14: 00007f5b94d35f80 R15: 00007ffcf6f9dde8 [ 33.637243][ T3602] [ 33.665298][ T3609] loop1: detected capacity change from 0 to 512 [ 33.676244][ T3604] FAULT_INJECTION: forcing a failure. [ 33.676244][ T3604] name failslab, interval 1, probability 0, space 0, times 0 [ 33.689014][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: syz.3.67 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 33.699195][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 33.709328][ T3604] Call Trace: [ 33.712610][ T3604] [ 33.715538][ T3604] dump_stack_lvl+0xf2/0x150 [ 33.720157][ T3604] dump_stack+0x15/0x20 [ 33.724321][ T3604] should_fail_ex+0x229/0x230 [ 33.729044][ T3604] ? fdb_create+0x111/0x9d0 [ 33.733554][ T3604] should_failslab+0x8f/0xb0 [ 33.738159][ T3604] kmem_cache_alloc_noprof+0x4c/0x290 [ 33.743581][ T3604] fdb_create+0x111/0x9d0 [ 33.748019][ T3604] ? fdb_find_rcu+0x277/0x290 [ 33.752705][ T3604] fdb_add_local+0xe9/0x1b0 [ 33.757304][ T3604] br_fdb_add_local+0x3a/0x60 [ 33.761987][ T3604] __vlan_add+0x3b8/0x1430 [ 33.766455][ T3604] br_vlan_add+0x39c/0x7b0 [ 33.770880][ T3604] br_vlan_info+0x118/0x230 [ 33.775467][ T3604] br_process_vlan_info+0x273/0x710 [ 33.780662][ T3604] ? xas_load+0x279/0x3d0 [ 33.785064][ T3604] br_afspec+0x2d0/0x450 [ 33.789337][ T3604] br_setlink+0x1aa/0x450 [ 33.793695][ T3604] rtnl_bridge_setlink+0x3dd/0x460 [ 33.798821][ T3604] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 33.804459][ T3604] rtnetlink_rcv_msg+0x6aa/0x710 [ 33.809400][ T3604] ? ref_tracker_free+0x3a5/0x410 [ 33.814460][ T3604] ? __dev_queue_xmit+0x161/0x1fe0 [ 33.819596][ T3604] netlink_rcv_skb+0x12c/0x230 [ 33.824448][ T3604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 33.830054][ T3604] rtnetlink_rcv+0x1c/0x30 [ 33.834616][ T3604] netlink_unicast+0x593/0x670 [ 33.839470][ T3604] netlink_sendmsg+0x5cc/0x6e0 [ 33.844244][ T3604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.849566][ T3604] __sock_sendmsg+0x140/0x180 [ 33.854262][ T3604] ____sys_sendmsg+0x312/0x410 [ 33.859062][ T3604] __sys_sendmsg+0x1e9/0x280 [ 33.863764][ T3604] __x64_sys_sendmsg+0x46/0x50 [ 33.868530][ T3604] x64_sys_call+0x26f8/0x2e00 [ 33.873210][ T3604] do_syscall_64+0xc9/0x1c0 [ 33.877843][ T3604] ? clear_bhb_loop+0x55/0xb0 [ 33.882601][ T3604] ? clear_bhb_loop+0x55/0xb0 [ 33.887282][ T3604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.893474][ T3604] RIP: 0033:0x7fa589e87299 [ 33.897885][ T3604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.917493][ T3604] RSP: 002b:00007fa588b07048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.925912][ T3604] RAX: ffffffffffffffda RBX: 00007fa58a015f80 RCX: 00007fa589e87299 [ 33.933975][ T3604] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 33.942231][ T3604] RBP: 00007fa588b070a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.950269][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.958248][ T3604] R13: 000000000000000b R14: 00007fa58a015f80 R15: 00007ffcf8a885e8 [ 33.966236][ T3604] [ 33.970130][ T3604] bridge0: failed insert local address into bridge forwarding table [ 33.977319][ T3609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.991005][ T3609] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.002324][ T3604] syz.3.67 (3604) used greatest stack depth: 10440 bytes left [ 34.032989][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.104661][ T3629] loop3: detected capacity change from 0 to 8192 [ 34.111402][ T3629] ======================================================= [ 34.111402][ T3629] WARNING: The mand mount option has been deprecated and [ 34.111402][ T3629] and is ignored by this kernel. Remove the mand [ 34.111402][ T3629] option from the mount to silence this warning. [ 34.111402][ T3629] ======================================================= [ 34.230630][ T3633] FAULT_INJECTION: forcing a failure. [ 34.230630][ T3633] name failslab, interval 1, probability 0, space 0, times 0 [ 34.244015][ T3633] CPU: 0 UID: 0 PID: 3633 Comm: syz.3.74 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 34.254199][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 34.264334][ T3633] Call Trace: [ 34.267631][ T3633] [ 34.270629][ T3633] dump_stack_lvl+0xf2/0x150 [ 34.275278][ T3633] dump_stack+0x15/0x20 [ 34.279552][ T3633] should_fail_ex+0x229/0x230 [ 34.284274][ T3633] ? __kvmalloc_node_noprof+0x72/0x170 [ 34.284720][ T3631] Zero length message leads to an empty skb [ 34.289742][ T3633] should_failslab+0x8f/0xb0 [ 34.300313][ T3633] __kmalloc_node_noprof+0xa8/0x380 [ 34.305573][ T3633] __kvmalloc_node_noprof+0x72/0x170 [ 34.310880][ T3633] nf_hook_entries_grow+0x1bd/0x470 [ 34.316117][ T3633] __nf_register_net_hook+0x16b/0x480 [ 34.321565][ T3633] nf_register_net_hook+0x88/0x130 [ 34.326702][ T3633] nft_register_flowtable_net_hooks+0x224/0x430 [ 34.332987][ T3633] ? nft_trans_commit_list_add_tail+0x134/0x280 [ 34.339435][ T3633] ? nft_trans_flowtable_add+0x1a8/0x1c0 [ 34.344459][ T3636] loop1: detected capacity change from 0 to 1024 [ 34.345098][ T3633] nf_tables_newflowtable+0xdc0/0x10b0 [ 34.356921][ T3633] ? __nla_parse+0x40/0x60 [ 34.358737][ T3636] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.361347][ T3633] nfnetlink_rcv+0xb1d/0x15b0 [ 34.374923][ T3633] netlink_unicast+0x593/0x670 [ 34.377439][ T3636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.379705][ T3633] netlink_sendmsg+0x5cc/0x6e0 [ 34.379741][ T3633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.402297][ T3633] __sock_sendmsg+0x140/0x180 [ 34.407029][ T3633] ____sys_sendmsg+0x312/0x410 [ 34.411826][ T3633] __sys_sendmsg+0x1e9/0x280 [ 34.416589][ T3633] __x64_sys_sendmsg+0x46/0x50 [ 34.421353][ T3633] x64_sys_call+0x26f8/0x2e00 [ 34.426216][ T3633] do_syscall_64+0xc9/0x1c0 [ 34.430748][ T3633] ? clear_bhb_loop+0x55/0xb0 [ 34.435449][ T3633] ? clear_bhb_loop+0x55/0xb0 [ 34.440203][ T3633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.446132][ T3633] RIP: 0033:0x7fa589e87299 [ 34.450812][ T3633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.470468][ T3633] RSP: 002b:00007fa588b07048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.478950][ T3633] RAX: ffffffffffffffda RBX: 00007fa58a015f80 RCX: 00007fa589e87299 [ 34.486917][ T3633] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 34.494884][ T3633] RBP: 00007fa588b070a0 R08: 0000000000000000 R09: 0000000000000000 [ 34.503564][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 34.511533][ T3633] R13: 000000000000000b R14: 00007fa58a015f80 R15: 00007ffcf8a885e8 [ 34.519505][ T3633] [ 34.525818][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.544274][ T3640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.77'. [ 34.555304][ T3633] loop3: detected capacity change from 0 to 128 [ 34.580605][ T3633] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.595675][ T3633] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.618677][ T3647] loop1: detected capacity change from 0 to 2048 [ 34.642243][ T3261] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.740646][ T3664] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 34.755954][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 34.810116][ T3664] hsr_slave_0 (unregistering): left promiscuous mode [ 34.882897][ T3668] loop3: detected capacity change from 0 to 512 [ 34.889781][ T3668] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.902888][ T3668] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.914068][ T3668] EXT4-fs (loop3): 1 truncate cleaned up [ 34.920722][ T3668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.938277][ T3670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'. [ 34.952799][ T3672] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (64) [ 35.044151][ T3679] loop4: detected capacity change from 0 to 2048 [ 35.051421][ T3679] EXT4-fs: test_dummy_encryption option not supported [ 35.126668][ T3679] loop7: detected capacity change from 0 to 16384 [ 35.285098][ T3679] I/O error, dev loop7, sector 9088 op 0x0:(READ) flags 0x80700 phys_seg 25 prio class 0 [ 35.303617][ T3679] I/O error, dev loop7, sector 9344 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 35.313842][ T3679] I/O error, dev loop7, sector 9088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 35.323381][ T3679] Buffer I/O error on dev loop7, logical block 1136, async page read [ 35.355737][ T3678] I/O error, dev loop7, sector 6912 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 35.366225][ T3678] Buffer I/O error on dev loop7, logical block 864, lost async page write [ 35.374798][ T3678] Buffer I/O error on dev loop7, logical block 865, lost async page write [ 35.383535][ T3678] Buffer I/O error on dev loop7, logical block 866, lost async page write [ 35.392203][ T3678] Buffer I/O error on dev loop7, logical block 867, lost async page write [ 35.400781][ T3678] Buffer I/O error on dev loop7, logical block 868, lost async page write [ 35.409347][ T3678] Buffer I/O error on dev loop7, logical block 869, lost async page write [ 35.417900][ T3678] Buffer I/O error on dev loop7, logical block 870, lost async page write [ 35.425173][ T3700] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 35.426473][ T3678] Buffer I/O error on dev loop7, logical block 871, lost async page write [ 35.437818][ C0] hrtimer: interrupt took 25248 ns [ 35.441001][ T3678] Buffer I/O error on dev loop7, logical block 872, lost async page write [ 35.462767][ T3678] I/O error, dev loop7, sector 7936 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 35.474453][ T3678] I/O error, dev loop7, sector 8960 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 35.541346][ T3702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.100'. [ 35.613305][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.825114][ T3718] loop3: detected capacity change from 0 to 512 [ 36.844111][ T3735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.112'. [ 36.846076][ T3734] loop4: detected capacity change from 0 to 2048 [ 36.874205][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.939764][ T3734] dccp_v6_rcv: dropped packet with invalid checksum [ 36.957395][ T3747] loop1: detected capacity change from 0 to 128 [ 36.983386][ T3748] lo speed is unknown, defaulting to 1000 [ 36.998804][ T3747] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.021246][ T3748] lo speed is unknown, defaulting to 1000 [ 37.034153][ T3748] lo speed is unknown, defaulting to 1000 [ 37.048058][ T3747] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.058194][ T3748] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.060855][ T3747] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.110: No space for directory leaf checksum. Please run e2fsck -D. [ 37.065762][ T3748] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 37.080485][ T3747] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.110: checksumming directory block 0 [ 37.125385][ T3748] lo speed is unknown, defaulting to 1000 [ 37.136538][ T3748] lo speed is unknown, defaulting to 1000 [ 37.147573][ T3748] lo speed is unknown, defaulting to 1000 [ 37.157115][ T3748] lo speed is unknown, defaulting to 1000 [ 37.168786][ T3748] lo speed is unknown, defaulting to 1000 [ 37.746369][ T3258] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.820896][ T3762] loop1: detected capacity change from 0 to 512 [ 37.840246][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.854455][ T3762] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.876704][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.998847][ T3770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3770 comm=syz.1.123 [ 38.058814][ T3774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3774 comm=syz.1.125 [ 38.073163][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 38.073178][ T29] audit: type=1400 audit(1721972904.073:292): avc: denied { read } for pid=3773 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.178426][ T3780] FAULT_INJECTION: forcing a failure. [ 38.178426][ T3780] name failslab, interval 1, probability 0, space 0, times 0 [ 38.191183][ T3780] CPU: 1 UID: 0 PID: 3780 Comm: syz.1.128 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 38.201443][ T3780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 38.211583][ T3780] Call Trace: [ 38.214874][ T3780] [ 38.217824][ T3780] dump_stack_lvl+0xf2/0x150 [ 38.222450][ T3780] dump_stack+0x15/0x20 [ 38.226676][ T3780] should_fail_ex+0x229/0x230 [ 38.231562][ T3780] ? nf_ct_ext_add+0xe6/0x1a0 [ 38.236351][ T3780] should_failslab+0x8f/0xb0 [ 38.240994][ T3780] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 38.247352][ T3780] krealloc_noprof+0x48/0xa0 [ 38.252047][ T3780] nf_ct_ext_add+0xe6/0x1a0 [ 38.256618][ T3780] init_conntrack+0x539/0x970 [ 38.261361][ T3780] nf_conntrack_in+0x899/0xf20 [ 38.266198][ T3780] ? __pfx_ipv6_conntrack_local+0x10/0x10 [ 38.272015][ T3780] ipv6_conntrack_local+0x1d/0x30 [ 38.277100][ T3780] nf_hook_slow+0x86/0x1b0 [ 38.281543][ T3780] __ip6_local_out+0x241/0x260 [ 38.286498][ T3780] ? __pfx_dst_output+0x10/0x10 [ 38.291380][ T3780] ip6_local_out+0x26/0xd0 [ 38.295867][ T3780] ip6_send_skb+0x47/0x100 [ 38.300404][ T3780] udp_v6_send_skb+0x760/0xbf0 [ 38.305204][ T3780] udp_v6_push_pending_frames+0xd7/0x120 [ 38.310904][ T3780] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 38.317553][ T3780] udp_lib_setsockopt+0x508/0x7e0 [ 38.322669][ T3780] udpv6_setsockopt+0x73/0xb0 [ 38.327479][ T3780] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 38.333761][ T3780] sock_common_setsockopt+0x64/0x80 [ 38.339617][ T3780] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 38.345623][ T3780] __sys_setsockopt+0x1d8/0x250 [ 38.350597][ T3780] __x64_sys_setsockopt+0x66/0x80 [ 38.354630][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115aa8600: rx timeout, send abort [ 38.355627][ T3780] x64_sys_call+0x2a0e/0x2e00 [ 38.363832][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115aa8800: rx timeout, send abort [ 38.368435][ T3780] do_syscall_64+0xc9/0x1c0 [ 38.376678][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115aa8600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.381070][ T3780] ? clear_bhb_loop+0x55/0xb0 [ 38.395337][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115aa8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.399956][ T3780] ? clear_bhb_loop+0x55/0xb0 [ 38.419033][ T3780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.424961][ T3780] RIP: 0033:0x7f5b94ba7299 [ 38.429441][ T3780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.449069][ T3780] RSP: 002b:00007f5b93827048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 38.457515][ T3780] RAX: ffffffffffffffda RBX: 00007f5b94d35f80 RCX: 00007f5b94ba7299 [ 38.465540][ T3780] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000003 [ 38.473550][ T3780] RBP: 00007f5b938270a0 R08: 0000000000000004 R09: 0000000000000000 [ 38.481535][ T3780] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 38.489525][ T3780] R13: 000000000000000b R14: 00007f5b94d35f80 R15: 00007ffcf6f9dde8 [ 38.497516][ T3780] [ 38.542878][ T3784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 38.566289][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 38.783874][ T29] audit: type=1400 audit(1721972904.783:293): avc: denied { ioctl } for pid=3805 comm="syz.1.137" path="socket:[5407]" dev="sockfs" ino=5407 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.793356][ T3807] netlink: 100 bytes leftover after parsing attributes in process `syz.1.137'. [ 38.838420][ T29] audit: type=1400 audit(1721972904.793:294): avc: denied { write } for pid=3805 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.858560][ T29] audit: type=1400 audit(1721972904.793:295): avc: denied { nlmsg_write } for pid=3805 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.939363][ T29] audit: type=1400 audit(1721972904.943:296): avc: denied { read append } for pid=3826 comm="syz.3.144" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.964114][ T29] audit: type=1400 audit(1721972904.943:297): avc: denied { open } for pid=3826 comm="syz.3.144" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.039092][ T29] audit: type=1400 audit(1721972905.023:298): avc: denied { bind } for pid=3826 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.058556][ T29] audit: type=1400 audit(1721972905.033:299): avc: denied { ioctl } for pid=3826 comm="syz.3.144" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.190471][ T3835] netlink: 44 bytes leftover after parsing attributes in process `syz.3.145'. [ 39.336718][ T3838] loop3: detected capacity change from 0 to 8192 [ 39.349823][ T29] audit: type=1400 audit(1721972905.353:300): avc: denied { create } for pid=3841 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.393375][ T3838] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.397450][ T29] audit: type=1400 audit(1721972905.373:301): avc: denied { bind } for pid=3841 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.565792][ T3854] loop1: detected capacity change from 0 to 512 [ 39.595292][ T3854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.610086][ T3854] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.625105][ T309] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 39.632904][ T309] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 39.651902][ T309] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 39.662841][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.700221][ T3862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 39.709153][ T3862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.155'. [ 39.719109][ T309] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 39.721979][ T3862] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 39.742789][ T3255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.773254][ T3863] program syz.1.156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.824549][ T3870] loop4: detected capacity change from 0 to 512 [ 39.839879][ T3870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.851060][ T3870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 39.859930][ T3870] System zones: 1-12 [ 39.864604][ T3870] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.881864][ T3870] EXT4-fs (loop4): 1 truncate cleaned up [ 39.888088][ T3870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.950823][ T3870] netlink: 576 bytes leftover after parsing attributes in process `syz.4.159'. [ 39.972506][ T3887] loop3: detected capacity change from 0 to 2048 [ 39.973526][ T3255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.979464][ T3887] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.011492][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.025130][ T3895] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 40.039289][ T3895] bond1: entered promiscuous mode [ 40.046042][ T3895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.166'. [ 40.056779][ T3895] bond1 (unregistering): Released all slaves [ 40.088574][ T3887] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.164: bg 0: block 234: padding at end of block bitmap is not set [ 40.103006][ T3887] EXT4-fs (loop3): Remounting filesystem read-only [ 40.133425][ T3899] loop4: detected capacity change from 0 to 128 [ 40.178200][ T3887] syz.3.164 (3887) used greatest stack depth: 9848 bytes left [ 40.198323][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.223463][ T3901] loop3: detected capacity change from 0 to 1024 [ 40.230681][ T3901] EXT4-fs: Ignoring removed orlov option [ 40.243093][ T3903] netlink: 'syz.4.169': attribute type 20 has an invalid length. [ 40.259210][ T3901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.285201][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.297116][ T3906] loop4: detected capacity change from 0 to 512 [ 40.314959][ T3906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.330600][ T3906] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.391501][ T3268] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 40.418479][ T3255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.565680][ T3919] lo speed is unknown, defaulting to 1000 [ 40.633864][ T3933] FAULT_INJECTION: forcing a failure. [ 40.633864][ T3933] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.647324][ T3933] CPU: 1 UID: 0 PID: 3933 Comm: syz.3.174 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 40.657656][ T3933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 40.667818][ T3933] Call Trace: [ 40.671166][ T3933] [ 40.674140][ T3933] dump_stack_lvl+0xf2/0x150 [ 40.678835][ T3933] dump_stack+0x15/0x20 [ 40.683099][ T3933] should_fail_ex+0x229/0x230 [ 40.687881][ T3933] should_fail+0xb/0x10 [ 40.692066][ T3933] should_fail_usercopy+0x1a/0x20 [ 40.697208][ T3933] _copy_from_iter+0xd3/0xb00 [ 40.701909][ T3933] ? kmalloc_reserve+0x16e/0x190 [ 40.707056][ T3933] ? __build_skb_around+0x196/0x1f0 [ 40.712288][ T3933] ? __alloc_skb+0x21f/0x310 [ 40.716997][ T3933] ? __virt_addr_valid+0x1ed/0x250 [ 40.722126][ T3933] ? __check_object_size+0x35b/0x510 [ 40.727440][ T3933] netlink_sendmsg+0x460/0x6e0 [ 40.732233][ T3933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.737782][ T3933] __sock_sendmsg+0x140/0x180 [ 40.742479][ T3933] ____sys_sendmsg+0x312/0x410 [ 40.747290][ T3933] __sys_sendmsg+0x1e9/0x280 [ 40.751982][ T3933] __x64_sys_sendmsg+0x46/0x50 [ 40.756778][ T3933] x64_sys_call+0x26f8/0x2e00 [ 40.761500][ T3933] do_syscall_64+0xc9/0x1c0 [ 40.766041][ T3933] ? clear_bhb_loop+0x55/0xb0 [ 40.770753][ T3933] ? clear_bhb_loop+0x55/0xb0 [ 40.775459][ T3933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.781380][ T3933] RIP: 0033:0x7fa589e87299 [ 40.785914][ T3933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.805627][ T3933] RSP: 002b:00007fa588ac5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.814056][ T3933] RAX: ffffffffffffffda RBX: 00007fa58a016130 RCX: 00007fa589e87299 [ 40.822122][ T3933] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 40.830127][ T3933] RBP: 00007fa588ac50a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.838109][ T3933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.846115][ T3933] R13: 000000000000006e R14: 00007fa58a016130 R15: 00007ffcf8a885e8 [ 40.854182][ T3933] [ 40.926133][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.964456][ T3919] chnl_net:caif_netlink_parms(): no params data found [ 40.985084][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.020434][ T3919] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.027870][ T3919] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.035113][ T3919] bridge_slave_0: entered allmulticast mode [ 41.042053][ T3919] bridge_slave_0: entered promiscuous mode [ 41.053968][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.060262][ T3938] loop1: detected capacity change from 0 to 256 [ 41.071404][ T3938] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000400a) [ 41.079298][ T3938] FAT-fs (loop1): Filesystem has been set read-only [ 41.086129][ T3919] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.093332][ T3919] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.107259][ T3919] bridge_slave_1: entered allmulticast mode [ 41.114145][ T3919] bridge_slave_1: entered promiscuous mode [ 41.146193][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.161836][ T3919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.170884][ T3955] loop1: detected capacity change from 0 to 8192 [ 41.177435][ T3941] lo speed is unknown, defaulting to 1000 [ 41.179329][ T3919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.216263][ T3919] team0: Port device team_slave_0 added [ 41.230906][ T3919] team0: Port device team_slave_1 added [ 41.274070][ T3919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.282385][ T3919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.308990][ T3919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.321523][ T3919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.328522][ T3919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.354566][ T3919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.402023][ T3957] loop4: detected capacity change from 0 to 164 [ 41.458047][ T11] bridge_slave_1: left allmulticast mode [ 41.463713][ T11] bridge_slave_1: left promiscuous mode [ 41.469420][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.485345][ T3959] loop3: detected capacity change from 0 to 512 [ 41.493526][ T3957] Unable to read rock-ridge attributes [ 41.500053][ T11] bridge_slave_0: left allmulticast mode [ 41.505794][ T11] bridge_slave_0: left promiscuous mode [ 41.511522][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.521998][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.540822][ T3959] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.589930][ T3963] loop4: detected capacity change from 0 to 1024 [ 41.602080][ T3963] ext4: Unknown parameter 'dont_hash' [ 41.704903][ T3963] loop4: detected capacity change from 0 to 8192 [ 41.818982][ T3966] hub 9-0:1.0: USB hub found [ 41.825129][ T3966] hub 9-0:1.0: 8 ports detected [ 41.931691][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.001557][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.073562][ T11] bond0 (unregistering): Released all slaves [ 42.215673][ T3919] hsr_slave_0: entered promiscuous mode [ 42.222412][ T3919] hsr_slave_1: entered promiscuous mode [ 42.230319][ T3919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.240568][ T3919] Cannot create hsr debugfs directory [ 42.271882][ T11] hsr_slave_0: left promiscuous mode [ 42.288909][ T11] hsr_slave_1: left promiscuous mode [ 42.296301][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.303862][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.329559][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.337009][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.355807][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.400124][ T11] veth1_macvtap: left promiscuous mode [ 42.405655][ T11] veth0_macvtap: left promiscuous mode [ 42.411284][ T11] veth1_vlan: left promiscuous mode [ 42.416536][ T11] veth0_vlan: left promiscuous mode [ 42.605980][ T11] team0 (unregistering): Port device team_slave_1 removed [ 42.619038][ T11] team0 (unregistering): Port device team_slave_0 removed [ 42.665465][ T3941] chnl_net:caif_netlink_parms(): no params data found [ 42.679644][ T3993] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 42.687619][ T3993] __nla_validate_parse: 5 callbacks suppressed [ 42.687635][ T3993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.183'. [ 42.704078][ T3993] ipvlan0: entered promiscuous mode [ 42.709474][ T3993] ipvlan0: entered allmulticast mode [ 42.714866][ T3993] veth0_vlan: entered allmulticast mode [ 42.722644][ T3993] bridge0: port 3(ipvlan0) entered blocking state [ 42.729205][ T3993] bridge0: port 3(ipvlan0) entered disabled state [ 42.736969][ T3993] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 42.844645][ T4006] loop3: detected capacity change from 0 to 256 [ 42.891426][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.898571][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.937839][ T3941] bridge_slave_0: entered allmulticast mode [ 42.956487][ T3941] bridge_slave_0: entered promiscuous mode [ 42.996823][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.004050][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.027936][ T3941] bridge_slave_1: entered allmulticast mode [ 43.046120][ T3941] bridge_slave_1: entered promiscuous mode [ 43.121631][ T3941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.144325][ T3941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.205433][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 43.205450][ T29] audit: type=1400 audit(1721972909.207:365): avc: denied { write } for pid=3954 comm="syz.1.177" path="socket:[5982]" dev="sockfs" ino=5982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 43.238556][ T3941] team0: Port device team_slave_0 added [ 43.246796][ T3941] team0: Port device team_slave_1 added [ 43.253726][ T29] audit: type=1400 audit(1721972909.247:366): avc: denied { nlmsg_read } for pid=3954 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 43.313228][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.320284][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.346402][ T3941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.372188][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.379186][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.405123][ T3941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.464672][ T3919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.491970][ T3941] hsr_slave_0: entered promiscuous mode [ 43.499190][ T3941] hsr_slave_1: entered promiscuous mode [ 43.507099][ T3941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.512768][ T29] audit: type=1400 audit(1721972909.517:367): avc: denied { bind } for pid=4053 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.524187][ T3941] Cannot create hsr debugfs directory [ 43.539530][ T4055] loop4: detected capacity change from 0 to 512 [ 43.540899][ T3919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.557891][ T4055] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 43.558838][ T3919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.623484][ T3919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.774495][ T3919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.797858][ T29] audit: type=1400 audit(1721972909.797:368): avc: denied { read } for pid=4071 comm="syz.4.196" name="event2" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.821038][ T29] audit: type=1400 audit(1721972909.797:369): avc: denied { open } for pid=4071 comm="syz.4.196" path="/dev/input/event2" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.825440][ T4077] loop1: detected capacity change from 0 to 512 [ 43.864642][ T3941] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.871076][ T29] audit: type=1400 audit(1721972909.857:370): avc: denied { ioctl } for pid=4071 comm="syz.4.196" path="/dev/input/event2" dev="devtmpfs" ino=221 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.893014][ T4077] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.195: bad orphan inode 17 [ 43.914867][ T4077] ext4_test_bit(bit=16, block=4) = 1 [ 43.920245][ T4077] is_bad_inode(inode)=0 [ 43.924488][ T4077] NEXT_ORPHAN(inode)=0 [ 43.928606][ T4077] max_ino=32 [ 43.931814][ T4077] i_nlink=1 [ 43.938134][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.956255][ T4080] loop4: detected capacity change from 0 to 2048 [ 43.960788][ T3919] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.971531][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 43.998953][ T3941] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.008126][ T4080] loop4: p1 < > p3 [ 44.015032][ T4080] loop4: p3 size 134217728 extends beyond EOD, truncated [ 44.033690][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.034665][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.049881][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.069827][ T29] audit: type=1400 audit(1721972910.067:371): avc: denied { read } for pid=4071 comm="syz.4.196" name="loop4p1" dev="devtmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 44.070387][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.092437][ T29] audit: type=1400 audit(1721972910.067:372): avc: denied { open } for pid=4071 comm="syz.4.196" path="/dev/loop4p1" dev="devtmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 44.099421][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.174889][ T29] audit: type=1400 audit(1721972910.127:373): avc: denied { setopt } for pid=4071 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.224367][ T3941] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.309535][ T3941] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.325272][ T3919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.353547][ T4104] loop4: detected capacity change from 0 to 2048 [ 44.386746][ T4104] EXT4-fs: dax option not supported [ 44.418424][ T29] audit: type=1400 audit(1721972910.407:374): avc: denied { create } for pid=4107 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.477157][ T4122] random: crng reseeded on system resumption [ 44.563792][ T3941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.575382][ T3941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.586584][ T3941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.606907][ T3941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.676567][ T3919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.750337][ T3941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.800074][ T3941] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.827007][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.834133][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.863745][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.863850][ T4156] loop4: detected capacity change from 0 to 128 [ 44.870865][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.898033][ T3919] veth0_vlan: entered promiscuous mode [ 44.914762][ T3919] veth1_vlan: entered promiscuous mode [ 44.927244][ T3941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.937833][ T3941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.980956][ T3919] veth0_macvtap: entered promiscuous mode [ 44.989725][ T4156] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.006719][ T3919] veth1_macvtap: entered promiscuous mode [ 45.036028][ T4156] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.101598][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.112211][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.122160][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.132651][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.142682][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.153139][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.162995][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.173443][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.197694][ T3919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.206448][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.217040][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.227024][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.237572][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.247500][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.258004][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.267846][ T3919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.278539][ T3919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.289463][ T3255] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.291106][ T3919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.311374][ T3919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.320144][ T3919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.329184][ T3919] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.337961][ T3919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.391402][ T4179] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 45.406117][ T4179] bond1: entered promiscuous mode [ 45.426248][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 45.435164][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 45.462722][ T3941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.509255][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 45.544479][ T4183] bond1 (unregistering): Released all slaves [ 45.581808][ T4194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'. [ 45.651777][ T4193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4193 comm=syz.3.211 [ 45.672459][ T4206] loop2: detected capacity change from 0 to 512 [ 45.710519][ T3941] veth0_vlan: entered promiscuous mode [ 45.764085][ T3941] veth1_vlan: entered promiscuous mode [ 45.788199][ T4216] FAULT_INJECTION: forcing a failure. [ 45.788199][ T4216] name failslab, interval 1, probability 0, space 0, times 0 [ 45.800541][ T3941] veth0_macvtap: entered promiscuous mode [ 45.800901][ T4216] CPU: 0 UID: 0 PID: 4216 Comm: syz.4.216 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 45.808026][ T4214] loop3: detected capacity change from 0 to 1024 [ 45.816858][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 45.816876][ T4216] Call Trace: [ 45.816884][ T4216] [ 45.826203][ T3941] veth1_macvtap: entered promiscuous mode [ 45.833231][ T4216] dump_stack_lvl+0xf2/0x150 [ 45.847484][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.849809][ T4216] dump_stack+0x15/0x20 [ 45.860349][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.864369][ T4216] should_fail_ex+0x229/0x230 [ 45.874170][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.878819][ T4216] ? iovec_from_user+0x84/0x210 [ 45.878856][ T4216] should_failslab+0x8f/0xb0 [ 45.878889][ T4216] __kmalloc_noprof+0xa5/0x370 [ 45.889379][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.894288][ T4216] iovec_from_user+0x84/0x210 [ 45.898874][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.903640][ T4216] __import_iovec+0xd8/0x520 [ 45.913459][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.918099][ T4216] io_import_iovec+0x21b/0x350 [ 45.928511][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.933079][ T4216] io_prep_rw+0x3b4/0x440 [ 45.942890][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.947637][ T4216] io_prep_readv+0x57/0x1d0 [ 45.958060][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.962342][ T4216] io_submit_sqes+0x64c/0x1080 [ 45.972163][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.002241][ T4216] ? __rcu_read_unlock+0x4e/0x70 [ 46.007198][ T4216] ? xa_load+0xb9/0xe0 [ 46.011278][ T4216] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 46.016917][ T4216] ? __fget_files+0x1da/0x210 [ 46.021656][ T4216] ? fput+0x13b/0x180 [ 46.025746][ T4216] ? ksys_write+0x178/0x1b0 [ 46.030468][ T4216] __x64_sys_io_uring_enter+0x78/0x90 [ 46.036055][ T4216] x64_sys_call+0x26d0/0x2e00 [ 46.040782][ T4216] do_syscall_64+0xc9/0x1c0 [ 46.045373][ T4216] ? clear_bhb_loop+0x55/0xb0 [ 46.050141][ T4216] ? clear_bhb_loop+0x55/0xb0 [ 46.054870][ T4216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.060865][ T4216] RIP: 0033:0x7f5357707299 [ 46.065321][ T4216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.085015][ T4216] RSP: 002b:00007f5356387048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 46.093495][ T4216] RAX: ffffffffffffffda RBX: 00007f5357895f80 RCX: 00007f5357707299 [ 46.101544][ T4216] RDX: 0000000000000000 RSI: 0000000000000567 RDI: 0000000000000005 [ 46.109518][ T4216] RBP: 00007f53563870a0 R08: 0000000000000000 R09: 0000000000000000 [ 46.117492][ T4216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.125472][ T4216] R13: 000000000000000b R14: 00007f5357895f80 R15: 00007ffe08439338 [ 46.133454][ T4216] [ 46.143471][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.155924][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.167108][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.177052][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.187512][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.198190][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.208694][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.218537][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.229738][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.239819][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.250374][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.276218][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.304200][ T3941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.313040][ T3941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.322547][ T3941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.331553][ T3941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.353764][ T4228] loop4: detected capacity change from 0 to 256 [ 46.455883][ T4233] loop0: detected capacity change from 0 to 1024 [ 46.525894][ T4233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.532590][ T4239] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 46.553068][ T4239] bond1: entered promiscuous mode [ 46.582176][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 46.610418][ T4224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.218'. [ 46.623963][ T3941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.669257][ T4247] loop0: detected capacity change from 0 to 256 [ 46.697138][ T4247] FAT-fs (loop0): Directory bread(block 64) failed [ 46.707108][ T4247] FAT-fs (loop0): Directory bread(block 65) failed [ 46.728003][ T4247] FAT-fs (loop0): Directory bread(block 66) failed [ 46.738049][ T4247] FAT-fs (loop0): Directory bread(block 67) failed [ 46.745045][ T4247] FAT-fs (loop0): Directory bread(block 68) failed [ 46.749761][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 46.760384][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 46.770368][ T4247] FAT-fs (loop0): Directory bread(block 69) failed [ 46.777050][ T4247] FAT-fs (loop0): Directory bread(block 70) failed [ 46.798820][ T4247] FAT-fs (loop0): Directory bread(block 71) failed [ 46.809302][ T4247] FAT-fs (loop0): Directory bread(block 72) failed [ 46.815839][ T4247] FAT-fs (loop0): Directory bread(block 73) failed [ 46.853502][ T4244] bond1 (unregistering): Released all slaves [ 46.863316][ T4250] loop4: detected capacity change from 0 to 8192 [ 46.902098][ T4250] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.902696][ T4254] FAULT_INJECTION: forcing a failure. [ 46.902696][ T4254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.925780][ T4254] CPU: 0 UID: 0 PID: 4254 Comm: syz.1.228 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 46.936056][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 46.946134][ T4254] Call Trace: [ 46.949427][ T4254] [ 46.952382][ T4254] dump_stack_lvl+0xf2/0x150 [ 46.957160][ T4254] dump_stack+0x15/0x20 [ 46.961340][ T4254] should_fail_ex+0x229/0x230 [ 46.966166][ T4254] should_fail+0xb/0x10 [ 46.970365][ T4254] should_fail_usercopy+0x1a/0x20 [ 46.975442][ T4254] _copy_from_user+0x1e/0xd0 [ 46.980074][ T4254] copy_msghdr_from_user+0x54/0x2a0 [ 46.985398][ T4254] __sys_sendmsg+0x17d/0x280 [ 46.990125][ T4254] __x64_sys_sendmsg+0x46/0x50 [ 46.994919][ T4254] x64_sys_call+0x26f8/0x2e00 [ 46.999697][ T4254] do_syscall_64+0xc9/0x1c0 [ 47.004224][ T4254] ? clear_bhb_loop+0x55/0xb0 [ 47.009067][ T4254] ? clear_bhb_loop+0x55/0xb0 [ 47.013759][ T4254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.019675][ T4254] RIP: 0033:0x7f5b94ba7299 [ 47.024103][ T4254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.043865][ T4254] RSP: 002b:00007f5b93827048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.052289][ T4254] RAX: ffffffffffffffda RBX: 00007f5b94d35f80 RCX: 00007f5b94ba7299 [ 47.060273][ T4254] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 47.068255][ T4254] RBP: 00007f5b938270a0 R08: 0000000000000000 R09: 0000000000000000 [ 47.076247][ T4254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.084255][ T4254] R13: 000000000000000b R14: 00007f5b94d35f80 R15: 00007ffcf6f9dde8 [ 47.092439][ T4254] [ 47.294942][ T4271] vlan2: entered allmulticast mode [ 47.300173][ T4271] geneve0: entered allmulticast mode [ 47.329895][ T4271] bridge0: port 3(vlan2) entered blocking state [ 47.336282][ T4271] bridge0: port 3(vlan2) entered disabled state [ 47.357583][ T4271] vlan2: entered promiscuous mode [ 47.363543][ T4271] geneve0: entered promiscuous mode [ 47.384465][ T4271] bridge0: port 3(vlan2) entered blocking state [ 47.390794][ T4271] bridge0: port 3(vlan2) entered forwarding state [ 47.420096][ T4274] loop2: detected capacity change from 0 to 256 [ 47.586549][ C0] eth0: bad gso: type: 1, size: 1408 [ 47.592360][ C0] eth0: bad gso: type: 1, size: 1408 [ 47.843772][ T4295] netlink: 'syz.4.240': attribute type 1 has an invalid length. [ 47.867655][ T4295] bond1: entered promiscuous mode [ 47.878581][ T4295] __nla_validate_parse: 1 callbacks suppressed [ 47.878670][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 47.893905][ T4295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 47.985318][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 48.001701][ T4297] bond1 (unregistering): Released all slaves [ 48.075003][ T4302] FAULT_INJECTION: forcing a failure. [ 48.075003][ T4302] name failslab, interval 1, probability 0, space 0, times 0 [ 48.087682][ T4302] CPU: 1 UID: 0 PID: 4302 Comm: syz.1.243 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 48.098019][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 48.108101][ T4302] Call Trace: [ 48.111396][ T4302] [ 48.114346][ T4302] dump_stack_lvl+0xf2/0x150 [ 48.119095][ T4302] dump_stack+0x15/0x20 [ 48.123294][ T4302] should_fail_ex+0x229/0x230 [ 48.128022][ T4302] ? __alloc_skb+0x10b/0x310 [ 48.132635][ T4302] should_failslab+0x8f/0xb0 [ 48.137263][ T4302] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 48.143104][ T4302] __alloc_skb+0x10b/0x310 [ 48.147581][ T4302] fdb_notify+0x70/0x120 [ 48.151850][ T4302] fdb_add_local+0x116/0x1b0 [ 48.156536][ T4302] br_fdb_add_local+0x3a/0x60 [ 48.161288][ T4302] __vlan_add+0x3b8/0x1430 [ 48.165871][ T4302] br_vlan_add+0x39c/0x7b0 [ 48.170321][ T4302] br_vlan_info+0x118/0x230 [ 48.174848][ T4302] br_process_vlan_info+0x273/0x710 [ 48.180330][ T4302] br_afspec+0x2d0/0x450 [ 48.184802][ T4302] br_setlink+0x1aa/0x450 [ 48.189168][ T4302] rtnl_bridge_setlink+0x3dd/0x460 [ 48.194358][ T4302] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 48.200086][ T4302] rtnetlink_rcv_msg+0x6aa/0x710 [ 48.205148][ T4302] ? ref_tracker_free+0x3a5/0x410 [ 48.210314][ T4302] ? __dev_queue_xmit+0x161/0x1fe0 [ 48.215538][ T4302] netlink_rcv_skb+0x12c/0x230 [ 48.220323][ T4302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 48.225857][ T4302] rtnetlink_rcv+0x1c/0x30 [ 48.230304][ T4302] netlink_unicast+0x593/0x670 [ 48.235092][ T4302] netlink_sendmsg+0x5cc/0x6e0 [ 48.239884][ T4302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.245192][ T4302] __sock_sendmsg+0x140/0x180 [ 48.249919][ T4302] ____sys_sendmsg+0x312/0x410 [ 48.254720][ T4302] __sys_sendmsg+0x1e9/0x280 [ 48.259331][ T4302] __x64_sys_sendmsg+0x46/0x50 [ 48.264176][ T4302] x64_sys_call+0x26f8/0x2e00 [ 48.268921][ T4302] do_syscall_64+0xc9/0x1c0 [ 48.273434][ T4302] ? clear_bhb_loop+0x55/0xb0 [ 48.278131][ T4302] ? clear_bhb_loop+0x55/0xb0 [ 48.282885][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.288778][ T4302] RIP: 0033:0x7f5b94ba7299 [ 48.293194][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.312887][ T4302] RSP: 002b:00007f5b93827048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.321360][ T4302] RAX: ffffffffffffffda RBX: 00007f5b94d35f80 RCX: 00007f5b94ba7299 [ 48.329334][ T4302] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 48.337503][ T4302] RBP: 00007f5b938270a0 R08: 0000000000000000 R09: 0000000000000000 [ 48.345519][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.353539][ T4302] R13: 000000000000000b R14: 00007f5b94d35f80 R15: 00007ffcf6f9dde8 [ 48.361677][ T4302] [ 48.422198][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 48.422245][ T29] audit: type=1400 audit(1721972914.427:410): avc: denied { unmount } for pid=3919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.457371][ T4323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.247'. [ 48.495836][ T4327] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 48.496722][ T29] audit: type=1400 audit(1721972914.497:411): avc: denied { mounton } for pid=4298 comm="syz.3.241" path="/67/bus" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.530582][ T4323] loop2: detected capacity change from 0 to 128 [ 48.544046][ T4320] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 48.555654][ T29] audit: type=1400 audit(1721972914.547:412): avc: denied { remount } for pid=4322 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.575415][ T29] audit: type=1400 audit(1721972914.547:413): avc: denied { append } for pid=4322 comm="syz.2.247" name="ptp0" dev="devtmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.670653][ T4304] lo speed is unknown, defaulting to 1000 [ 48.732936][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 48.770032][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.777145][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.784428][ T4304] bridge_slave_0: entered allmulticast mode [ 48.790211][ T4345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7968 sclass=netlink_route_socket pid=4345 comm=syz.1.251 [ 48.793435][ T4304] bridge_slave_0: entered promiscuous mode [ 48.805462][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.816385][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.820107][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.823838][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.830948][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.838222][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838249][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838338][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838363][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838389][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838413][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838439][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838541][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838564][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838586][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838612][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838638][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838673][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838699][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838724][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838786][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838813][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.838839][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.848453][ T4304] bridge_slave_1: entered allmulticast mode [ 48.853244][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.863072][ T4304] bridge_slave_1: entered promiscuous mode [ 48.868082][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868111][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868137][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868162][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868198][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868222][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868247][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868326][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868352][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868373][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868399][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868424][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868505][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868530][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868554][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868580][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868604][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868630][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.868656][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.941064][ T4349] loop1: detected capacity change from 0 to 256 [ 48.942956][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.942981][ T3328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.165728][ T3328] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 49.202472][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.215285][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.221790][ T4353] FAULT_INJECTION: forcing a failure. [ 49.221790][ T4353] name failslab, interval 1, probability 0, space 0, times 0 [ 49.237970][ T4353] CPU: 0 UID: 0 PID: 4353 Comm: syz.1.254 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 49.240137][ T4356] loop2: detected capacity change from 0 to 512 [ 49.248225][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.248242][ T4353] Call Trace: [ 49.248251][ T4353] [ 49.248259][ T4353] dump_stack_lvl+0xf2/0x150 [ 49.267495][ T4356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.267899][ T4353] dump_stack+0x15/0x20 [ 49.289507][ T4353] should_fail_ex+0x229/0x230 [ 49.294269][ T4353] ? nft_delchain+0x35/0x220 [ 49.298980][ T4353] should_failslab+0x8f/0xb0 [ 49.303591][ T4353] __kmalloc_cache_noprof+0x4b/0x2a0 [ 49.308945][ T4353] nft_delchain+0x35/0x220 [ 49.313390][ T4353] nft_flush_table+0x57c/0x780 [ 49.318277][ T4353] nf_tables_deltable+0x367/0x8d0 [ 49.323383][ T4353] nfnetlink_rcv+0xb1d/0x15b0 [ 49.328145][ T4353] netlink_unicast+0x593/0x670 [ 49.332915][ T4353] netlink_sendmsg+0x5cc/0x6e0 [ 49.337694][ T4353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.343068][ T4353] __sock_sendmsg+0x140/0x180 [ 49.347769][ T4353] ____sys_sendmsg+0x312/0x410 [ 49.352671][ T4353] __sys_sendmsg+0x1e9/0x280 [ 49.357379][ T4353] __x64_sys_sendmsg+0x46/0x50 [ 49.362223][ T4353] x64_sys_call+0x26f8/0x2e00 [ 49.366918][ T4353] do_syscall_64+0xc9/0x1c0 [ 49.371516][ T4353] ? clear_bhb_loop+0x55/0xb0 [ 49.376233][ T4353] ? clear_bhb_loop+0x55/0xb0 [ 49.380930][ T4353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.386846][ T4353] RIP: 0033:0x7f5b94ba7299 [ 49.391347][ T4353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.411048][ T4353] RSP: 002b:00007f5b93827048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.419469][ T4353] RAX: ffffffffffffffda RBX: 00007f5b94d35f80 RCX: 00007f5b94ba7299 [ 49.427444][ T4353] RDX: 0000000020008000 RSI: 0000000020000200 RDI: 0000000000000004 [ 49.435416][ T4353] RBP: 00007f5b938270a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.443391][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.451617][ T4353] R13: 000000000000000b R14: 00007f5b94d35f80 R15: 00007ffcf6f9dde8 [ 49.459597][ T4353] [ 49.488462][ T4304] team0: Port device team_slave_0 added [ 49.489550][ T4356] EXT4-fs (loop2): 1 truncate cleaned up [ 49.495243][ T4304] team0: Port device team_slave_1 added [ 49.500203][ T4356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.529777][ T4356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4356 comm=syz.2.256 [ 49.545072][ T4356] netlink: 52 bytes leftover after parsing attributes in process `syz.2.256'. [ 49.553719][ T4364] loop1: detected capacity change from 0 to 1024 [ 49.564870][ T4356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4356 comm=syz.2.256 [ 49.579604][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.586615][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.612690][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.630969][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.638076][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.664148][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.676401][ T4364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.690189][ T29] audit: type=1400 audit(1721972915.687:414): avc: denied { mounton } for pid=4355 comm="syz.2.256" path="/8/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.727299][ T3919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.754943][ T4374] loop3: detected capacity change from 0 to 128 [ 49.769538][ T4374] FAT-fs (loop3): Directory bread(block 524321) failed [ 49.776452][ T4374] FAT-fs (loop3): Directory bread(block 524322) failed [ 49.806313][ T4374] FAT-fs (loop3): Directory bread(block 524323) failed [ 49.807448][ T4304] hsr_slave_0: entered promiscuous mode [ 49.814488][ T4374] FAT-fs (loop3): Directory bread(block 524324) failed [ 49.825289][ T29] audit: type=1400 audit(1721972915.827:415): avc: denied { write } for pid=4363 comm="syz.1.259" name="memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.825856][ T4374] FAT-fs (loop3): Directory bread(block 524325) failed [ 49.857804][ T4374] FAT-fs (loop3): Directory bread(block 524326) failed [ 49.860403][ T4377] loop2: detected capacity change from 0 to 512 [ 49.864676][ T4374] FAT-fs (loop3): Directory bread(block 524327) failed [ 49.875138][ T4304] hsr_slave_1: entered promiscuous mode [ 49.880678][ T4374] FAT-fs (loop3): Directory bread(block 524328) failed [ 49.888123][ T29] audit: type=1400 audit(1721972915.877:416): avc: denied { setattr } for pid=4363 comm="syz.1.259" path="/99/file1/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.915046][ T4377] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.923068][ T4377] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 49.928222][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.942715][ T4304] Cannot create hsr debugfs directory [ 49.951998][ T4377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 49.959948][ T4377] System zones: 1-12 [ 49.968027][ T4377] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.262: corrupted in-inode xattr: e_value size too large [ 50.007961][ T4377] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.262: couldn't read orphan inode 15 (err -117) [ 50.061758][ T29] audit: type=1400 audit(1721972916.057:417): avc: denied { read } for pid=4363 comm="syz.1.259" path="/99/file1/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.086037][ T4384] FAULT_INJECTION: forcing a failure. [ 50.086037][ T4384] name failslab, interval 1, probability 0, space 0, times 0 [ 50.098727][ T4384] CPU: 0 UID: 0 PID: 4384 Comm: syz.3.265 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 50.109033][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.119153][ T4384] Call Trace: [ 50.122446][ T4384] [ 50.125386][ T4384] dump_stack_lvl+0xf2/0x150 [ 50.130009][ T4384] dump_stack+0x15/0x20 [ 50.134330][ T4384] should_fail_ex+0x229/0x230 [ 50.139177][ T4384] ? __alloc_skb+0x10b/0x310 [ 50.143848][ T4384] should_failslab+0x8f/0xb0 [ 50.148617][ T4384] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 50.154449][ T4384] __alloc_skb+0x10b/0x310 [ 50.158938][ T4384] fdb_notify+0x70/0x120 [ 50.163208][ T4384] fdb_add_local+0x116/0x1b0 [ 50.167859][ T4384] br_fdb_add_local+0x3a/0x60 [ 50.172617][ T4384] __vlan_add+0x3b8/0x1430 [ 50.177110][ T4384] br_vlan_add+0x39c/0x7b0 [ 50.181565][ T4384] br_vlan_info+0x118/0x230 [ 50.186093][ T4384] br_process_vlan_info+0x273/0x710 [ 50.191377][ T4384] br_afspec+0x2d0/0x450 [ 50.195645][ T4384] br_setlink+0x1aa/0x450 [ 50.200124][ T4384] rtnl_bridge_setlink+0x3dd/0x460 [ 50.205339][ T4384] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 50.211071][ T4384] rtnetlink_rcv_msg+0x6aa/0x710 [ 50.216043][ T4384] ? ref_tracker_free+0x3a5/0x410 [ 50.221144][ T4384] ? __dev_queue_xmit+0x161/0x1fe0 [ 50.226282][ T4384] netlink_rcv_skb+0x12c/0x230 [ 50.229667][ T4377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.231159][ T4384] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.248697][ T4384] rtnetlink_rcv+0x1c/0x30 [ 50.253149][ T4384] netlink_unicast+0x593/0x670 [ 50.257958][ T4384] netlink_sendmsg+0x5cc/0x6e0 [ 50.262792][ T4384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.268141][ T4384] __sock_sendmsg+0x140/0x180 [ 50.272889][ T4384] ____sys_sendmsg+0x312/0x410 [ 50.277843][ T4384] __sys_sendmsg+0x1e9/0x280 [ 50.282486][ T4384] __x64_sys_sendmsg+0x46/0x50 [ 50.287312][ T4384] x64_sys_call+0x26f8/0x2e00 [ 50.292006][ T4384] do_syscall_64+0xc9/0x1c0 [ 50.296530][ T4384] ? clear_bhb_loop+0x55/0xb0 [ 50.301338][ T4384] ? clear_bhb_loop+0x55/0xb0 [ 50.306048][ T4384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.311956][ T4384] RIP: 0033:0x7fa589e87299 [ 50.316460][ T4384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.336173][ T4384] RSP: 002b:00007fa588b07048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.344630][ T4384] RAX: ffffffffffffffda RBX: 00007fa58a015f80 RCX: 00007fa589e87299 [ 50.352625][ T4384] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 50.360622][ T4384] RBP: 00007fa588b070a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.368775][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.376752][ T4384] R13: 000000000000000b R14: 00007fa58a015f80 R15: 00007ffcf8a885e8 [ 50.384733][ T4384] [ 50.400853][ T4387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.266'. [ 50.422290][ T4389] loop3: detected capacity change from 0 to 512 [ 50.454304][ T4391] FAULT_INJECTION: forcing a failure. [ 50.454304][ T4391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.467677][ T4391] CPU: 1 UID: 0 PID: 4391 Comm: syz.4.269 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 50.477957][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.488235][ T4391] Call Trace: [ 50.491546][ T4391] [ 50.494481][ T4391] dump_stack_lvl+0xf2/0x150 [ 50.499158][ T4391] dump_stack+0x15/0x20 [ 50.503366][ T4391] should_fail_ex+0x229/0x230 [ 50.508092][ T4391] should_fail_alloc_page+0xfd/0x110 [ 50.513422][ T4391] __alloc_pages_noprof+0x109/0x360 [ 50.518728][ T4391] ___kmalloc_large_node+0x7a/0x120 [ 50.523944][ T4391] __kmalloc_large_noprof+0x1f/0xb0 [ 50.529178][ T4391] bpf_check+0x78/0xa200 [ 50.533493][ T4391] ? pcpu_block_update_hint_alloc+0x1f4/0x6a0 [ 50.539662][ T4391] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 50.545787][ T4391] ? cgroup_rstat_updated+0x99/0x550 [ 50.551081][ T4391] ? pcpu_chunk_relocate+0x183/0x280 [ 50.556466][ T4391] ? __mod_memcg_state+0x10d/0x200 [ 50.561684][ T4391] ? __rcu_read_unlock+0x4e/0x70 [ 50.566994][ T4391] ? bpf_prog_alloc+0x59/0x150 [ 50.571907][ T4391] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 50.577139][ T4391] ? should_fail_ex+0xd7/0x230 [ 50.581990][ T4391] ? selinux_bpf_prog_load+0x35/0xe0 [ 50.587306][ T4391] ? should_failslab+0x8f/0xb0 [ 50.592182][ T4391] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 50.597900][ T4391] ? selinux_bpf_prog_load+0xbb/0xe0 [ 50.603277][ T4391] bpf_prog_load+0xed4/0x1060 [ 50.607983][ T4391] __sys_bpf+0x463/0x7a0 [ 50.612254][ T4391] __x64_sys_bpf+0x43/0x50 [ 50.616720][ T4391] x64_sys_call+0x23d5/0x2e00 [ 50.621478][ T4391] do_syscall_64+0xc9/0x1c0 [ 50.626063][ T4391] ? clear_bhb_loop+0x55/0xb0 [ 50.630794][ T4391] ? clear_bhb_loop+0x55/0xb0 [ 50.635572][ T4391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.641558][ T4391] RIP: 0033:0x7f5357707299 [ 50.645980][ T4391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.665598][ T4391] RSP: 002b:00007f5356387048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.674088][ T4391] RAX: ffffffffffffffda RBX: 00007f5357895f80 RCX: 00007f5357707299 [ 50.682085][ T4391] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 50.690074][ T4391] RBP: 00007f53563870a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.698145][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.706167][ T4391] R13: 000000000000000b R14: 00007f5357895f80 R15: 00007ffe08439338 [ 50.714182][ T4391] [ 50.726475][ T3919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.829086][ T4304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.876869][ T4403] loop2: detected capacity change from 0 to 256 [ 50.884370][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.895789][ T29] audit: type=1400 audit(1721972916.897:418): avc: denied { write } for pid=4401 comm="syz.2.273" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.982661][ T29] audit: type=1400 audit(1721972916.987:419): avc: denied { mount } for pid=4406 comm="syz.1.274" name="/" dev="hugetlbfs" ino=7153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 51.084725][ T4413] loop1: detected capacity change from 0 to 128 [ 51.732846][ T4433] loop4: detected capacity change from 0 to 512 [ 51.897726][ T4441] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 51.920453][ T4441] bond1: entered promiscuous mode [ 51.946521][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 51.957095][ T4441] bond1 (unregistering): Released all slaves [ 52.332113][ T4462] loop4: detected capacity change from 0 to 512 [ 52.611876][ T4467] loop4: detected capacity change from 0 to 256 [ 52.666383][ T2958] ================================================================== [ 52.674567][ T2958] BUG: KCSAN: data-race in __fsnotify_parent / fsnotify_put_mark [ 52.682324][ T2958] [ 52.684661][ T2958] write to 0xffff8881001d25a8 of 4 bytes by task 4001 on cpu 0: [ 52.692313][ T2958] fsnotify_put_mark+0x2d8/0x5d0 [ 52.697279][ T2958] __se_sys_inotify_rm_watch+0x105/0x180 [ 52.702947][ T2958] __x64_sys_inotify_rm_watch+0x31/0x40 [ 52.708523][ T2958] x64_sys_call+0x1d25/0x2e00 [ 52.713215][ T2958] do_syscall_64+0xc9/0x1c0 [ 52.717752][ T2958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.723665][ T2958] [ 52.725997][ T2958] read to 0xffff8881001d25a8 of 4 bytes by task 2958 on cpu 1: [ 52.733652][ T2958] __fsnotify_parent+0xd4/0x380 [ 52.738529][ T2958] __fput+0x5ca/0x6f0 [ 52.742543][ T2958] __fput_sync+0x44/0x60 [ 52.746804][ T2958] __se_sys_close+0x101/0x1b0 [ 52.751509][ T2958] __x64_sys_close+0x1f/0x30 [ 52.756121][ T2958] x64_sys_call+0x2630/0x2e00 [ 52.760830][ T2958] do_syscall_64+0xc9/0x1c0 [ 52.765359][ T2958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.771274][ T2958] [ 52.773604][ T2958] value changed: 0x00002008 -> 0x00000000 [ 52.779340][ T2958] [ 52.781668][ T2958] Reported by Kernel Concurrency Sanitizer on: [ 52.787918][ T2958] CPU: 1 UID: 0 PID: 2958 Comm: udevd Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 52.797840][ T2958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 52.807994][ T2958] ================================================================== [ 53.059521][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 53.751627][ T4304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.801400][ T4304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.816123][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811adf0a00: rx timeout, send abort [ 53.852146][ T4304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.910941][ T3284] bridge_slave_1: left allmulticast mode [ 53.916702][ T3284] bridge_slave_1: left promiscuous mode [ 53.922431][ T3284] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.930278][ T3284] bridge_slave_0: left allmulticast mode [ 53.935924][ T3284] bridge_slave_0: left promiscuous mode [ 53.942217][ T3284] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.040683][ T3284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.051275][ T3284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.062831][ T3284] bond0 (unregistering): Released all slaves [ 54.083921][ T4304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.093319][ T4304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.102114][ T4304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.111237][ T4304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.153004][ T3284] hsr_slave_0: left promiscuous mode [ 54.158885][ T3284] hsr_slave_1: left promiscuous mode [ 54.164589][ T3284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.172220][ T3284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.180240][ T3284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.187652][ T3284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.197182][ T3284] veth1_macvtap: left promiscuous mode [ 54.202697][ T3284] veth0_macvtap: left promiscuous mode [ 54.208879][ T3284] veth1_vlan: left promiscuous mode [ 54.214154][ T3284] veth0_vlan: left promiscuous mode [ 54.307647][ T3284] team0 (unregistering): Port device team_slave_1 removed [ 54.317840][ T3284] team0 (unregistering): Port device team_slave_0 removed [ 54.325023][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811adf0a00: abort rx timeout. Force session deactivation [ 54.368766][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.381096][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.391360][ T4155] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.398490][ T4155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.415943][ T4155] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.423051][ T4155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.489615][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.560196][ T4304] veth0_vlan: entered promiscuous mode [ 54.568390][ T4304] veth1_vlan: entered promiscuous mode [ 54.583881][ T4304] veth0_macvtap: entered promiscuous mode [ 54.591496][ T4304] veth1_macvtap: entered promiscuous mode [ 54.603461][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.614037][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.623896][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.634881][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.644906][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.655399][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.665808][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.676247][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.686096][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.697161][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.708105][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.721837][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.732380][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.742317][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.753451][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.763373][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.773941][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.784354][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.794890][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.804754][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.815816][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.826783][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.836863][ T4304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.846489][ T4304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.855441][ T4304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.864304][ T4304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.919779][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)