last executing test programs: 21.201759541s ago: executing program 2 (id=162): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000880)={'#! ', './bus', [{0x20, 'bltudv\x00\xb8\x9f+\xe9\xdf\xf1\xf3\x98\x80\xbeM\x83\xf8\x06)\xd0\x18\x9f\xc7)4\x901)\'\xe6\v\x90\x18I\xe8\xf9\xc3Nw\xf6t%$\xdf\xac\xc8\xbc}\xb0\x9cS\xe4\xbb\xdfjQ|\xf0F#\x9b\xa2\xaf\xb6\x81\xca\x171T!\t}\xf3\x8b\x83\xc4\xa61\x98\x9d\x96\xf0\x18>\\\xf0\xca8\xc5\r\xbe\x1b\x9bB\xd0\xe6\xcf\xbe\xcaytP\xcf\n\xad%\xaa[3Nu\x7fC\xc6\xd0\xbcSz!\xc1\"\x97;\x9c\x001\x06\xe1\xdb\x80\xcfw\xbc\xc2k\xbd\x9c@\xb3\xc7\x91\x00b\xdc\xa5\xc2\xcd\x9en4\x9e\xf04\x05W%\xd7jP\xbd\x18\xb1w\xf0\x040xffffffffffffffff}) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f00000002c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x4, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x1ea8, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2a000c8, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r6, @ANYBLOB="56152b64086cf5bc476a5d159961e915a929988aa2e7fad3de3f95c12c481b4c1c429269f4b8456d4152fa56378cd2b697ef9ecfa2582f5bda39076e7419c2a96f69a6b00de79f074682e2795a7ab7c8e127a54315a6c4688ed7cb4ad03414e05515c8a731d18e817be33fdc86b964de32d393c1570f2d45e75d33bde1d73215028b27a49f09110ffa9e25f892a2300f3ca56b427a258150a46d949ce9451288170f9701751478d2d18c1fd209aea13794f1f14617c385ace19c9f6532c65f6d4d79bb87135913df15abffef1bd2cc", @ANYRESHEX=r7], 0x1, 0x1cc, &(0x7f0000000400)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='.\x02\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fb}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file1\x00'}) perf_event_open(&(0x7f00000009c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0xc40}, 0x0, 0x7, r8, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17.102796507s ago: executing program 2 (id=185): socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x900a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtclass={0x45c, 0x28, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xc}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140), 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r2], 0x15) (async) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r2], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x22c43, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)}, 0x1, 0x0, 0x0, 0x814}, 0x200c004) socket$inet_sctp(0x2, 0x0, 0x84) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = open(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000f000000000000000000000005000600000000000a0000000000000000000000000000000000ffffe000000100000000000000000200010000000000000000000000000005000500000000000a0000000000000000000000000000000001000000000000000001"], 0x78}, 0x1, 0x7}, 0x0) fcntl$setstatus(r5, 0x4, 0x4400) io_setup(0x6, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x80000, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x3c, 0x0, 0xfffffffe}, 0x1c) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x2bd, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000240)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc0185879, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc0185879, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x80, 0x7800, 0x9, 0x8, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x67, 0x0, 0x3, 0xf87c209fd87611aa, 0x0, @empty, @empty, {[@end, @lsrr={0x83, 0x27, 0x73, [@remote, @loopback, @rand_addr=0x64010101, @empty, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @dev={0xac, 0x14, 0x14, 0x2a}]}, @noop, @noop, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0x7, [{@rand_addr=0x64010101, 0x80}]}, @generic={0x88, 0xb, "d7bed4d318460d5028"}, @end, @timestamp_prespec={0x44, 0x44, 0x40, 0x3, 0x5, [{@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@loopback, 0x8}, {@loopback, 0x7}, {@private=0xa010101, 0xc75}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0xc}, {@local, 0x9}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x10, 0x1, 0x6}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x80, 0x7800, 0x9, 0x8, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x67, 0x0, 0x3, 0xf87c209fd87611aa, 0x0, @empty, @empty, {[@end, @lsrr={0x83, 0x27, 0x73, [@remote, @loopback, @rand_addr=0x64010101, @empty, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @dev={0xac, 0x14, 0x14, 0x2a}]}, @noop, @noop, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0x7, [{@rand_addr=0x64010101, 0x80}]}, @generic={0x88, 0xb, "d7bed4d318460d5028"}, @end, @timestamp_prespec={0x44, 0x44, 0x40, 0x3, 0x5, [{@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@loopback, 0x8}, {@loopback, 0x7}, {@private=0xa010101, 0xc75}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0xc}, {@local, 0x9}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x10, 0x1, 0x6}]}}}}}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r8, 0x0, r8) (async) fcntl$dupfd(r8, 0x0, r8) 14.347304603s ago: executing program 2 (id=195): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2008}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) 14.25386415s ago: executing program 2 (id=224): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext, 0x8026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x5000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xbee3, 0xffffffff, 0x1, 'queue1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) 6.685991101s ago: executing program 4 (id=309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usbip_server_init(0x3) (fail_nth: 12) 5.945704302s ago: executing program 4 (id=313): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x1, 0x8000, 0x100, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe40, 0xe40, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0xbb, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') r5 = syz_io_uring_setup(0x5ee9, &(0x7f0000000180)={0x0, 0xde9e, 0x2, 0x3, 0xc2}, &(0x7f0000000080), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000007c0)={&(0x7f0000003000)={[{&(0x7f0000000880)="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", 0x1000, 0x2}, {&(0x7f0000000300)="4f51b4c0f42e45d85617b590fadc17b451ba95befaf350958884fef159d8eeb7749e06edc80a986727e29ef0d3f74d3f22aef2ec5585d39c5ea2f8f638988e4e85bc30147b99fcb0648e91b86092b2e5a74357392236fbd98754ea28b78d1d291f696d84241b3e5d70b7f68d3af9cd14d680ff27908d9f92454868c32da8572f5f5ddd4a0deabe2b3ab6273e94e7e6c60535427958209e0841106009e4559cd8d3f8927ab897dcff19563bdbd5bf632f3c3cdb2d24", 0xb5}, {&(0x7f00000003c0)="793e9ac8c6051bbffe34638f56b529ed2f541cb91ec3053d69caa2a3352acb0359af4a2fa052a76fb3ba04532eb30cfd38f078b4a83fd1cbd637eda356e840a37cd43cd17b8dff05e99e17a3fb70f7cfea9aafc406b12a030b8a0b4c53a070043ca0efc33c9e376a993e4b9791c773f9263d2b3866ce621ddb74957711a138960de9004b4908a7ae2f88a4d8b65d01af22fcb3ddf7632107beaf2f1003ba2b9975650eb60af7cc8711d01e902d6a9b894cdd625245c09bce53ccbcbd513637d0c2f90b9e54b283576f305b", 0xcb, 0x3}, {&(0x7f00000004c0)="f7153c2c5b1a57f7b0d4b2aeceb25ebd3996bd4e4d7d9eb73496ffc40ed0c820ba9f8fc3038e2cde24226dbb0b842a136ebd1bd75d7ca973dac4d63b984235c0afdad190e3629e699ce69d51a3dcbc35200f6123dfeb74279ca36fcc89c93da3c5072e122f7b24bfa74622654ca1e4bf540481a6d24f4a774c530f2508f33273c8e044113ee7b52e8e6f92b3cd702f5e2d7f16b34c8ab51c3c289b6037040387c9b545979fa96a4ab806a27e7a90ff7ebd75b860a18b2988eb614d367bb060c39a2851f7f8f8d03112", 0xc9}, {&(0x7f00000005c0)="1e734029ec1a6e7c530b2408a95b8c540c0fc178681c210f2753cb2b5dde28c3b0f1bc8fb49e765a7eb4e66123274fe2fa67279407322dc221b2e210ebec7a5ca3cde4bbad09dc571709e7f1e95996c1eba877050abce154ff6c4833ec067d2a5686503e88faf2faa36de39b12caa6b406849b8b2400a239", 0x78}, {&(0x7f0000000640)="f9ce774a8430a11bdfcbfbfd5b3d6220c22cc34011006f9c014642611aa2df5e6aee043a88efe382fd9271206d29154247690c634442c692aaeecff84d33c715a7a1949dde1cbdc3ae6deb33349c9749b95682b4801f96d8e590d757abf67c704aebcd5c7647f0f71a3223cfd14a93ada503f774692c67368907f63e60c984c7699af468c701fcebb09cc459363f460229", 0x91, 0x2}, {&(0x7f0000000700)="e1c5259357a7533fdb16484d538c31fabffb03384669ce30ed3583447f002f69cbd57f6a9f3fdef108e250bfd58fda730df4380cd3dee775d8a352bd26c0f2e8b5e1a7920a38a56fa6462d3262bf8ef388d5d1f61243a174c0cab5f4af0b374e962215e561f33f6a61652407b706766f25082816ec14256ffa59e350ea9229b837f2fab16d3fcb7a75a7ff33aad20e621bb931a262f81be25eaa5d9f8d82bd848f2b44eda0c312", 0xa7, 0x3}, {&(0x7f0000001880)="a7270557f90a40fe39c5ba0f678b29215444fdba29a4caa951248f6362afcd7a1cb2258f9fc60f8d04bc6a5644bb17e224d5cb397ff54e6fc1bd3c8d3e7c396a06410d9606514f23f63793b0b821cb2287b556fa4fb475b00686b90c5447d2e970970bbd3201119df7e2b8c6c8e38bb0b735b364d9d192571c4e82b9bf2f60f304f4277663970f0f045ae3277c7e9b", 0x8f, 0x3}]}, 0x8, 0x1}, 0x1) preadv(r4, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001940), 0x10400) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000280)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000400), 0x1, 0x4b9, &(0x7f0000000480)="$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") accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xe404, &(0x7f0000000240), 0x25, 0x4bb, &(0x7f0000004000)="$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") r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x21e7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704002a52a641a2527d45cc073fc549349c980000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000019c0)={&(0x7f0000001a00)='f2fs_filemap_fault\x00'}, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nowazytime') sendmmsg$inet(r7, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r7, &(0x7f0000003000)='\t', 0x1) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5.597945551s ago: executing program 4 (id=317): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) 5.437588864s ago: executing program 4 (id=319): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000c2, &(0x7f0000000000), 0x6, 0x4ea, &(0x7f00000006c0)="$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") lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00') mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) set_mempolicy(0x0, &(0x7f0000000000), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x32b5997b968176e1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) 4.340884064s ago: executing program 4 (id=324): signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8, 0x80800) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x0, 0xe2, &(0x7f00000001c0)=""/226}, 0x90) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0xb8, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0xa4, 0x1, [@m_mpls={0x74, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x48, 0x6, "43f22f9dd135f7571793c20d758ac471c03457b242302de31865067e21f3ea05db3cbc79682a1e487dcc852ff08a301da62ba2e38cd0c055abc960ddd0c784ee2d616321"}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xb8}}, 0x0) 3.814278547s ago: executing program 0 (id=327): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3.739002163s ago: executing program 0 (id=329): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000100)={[{@abort}, {@bh}, {@nomblk_io_submit}, {@stripe}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x7aa, &(0x7f0000001b80)="$eJzs3c1rHOUfAPDvbF5/aX82gmDrpTlpoXTT1tgqCI0nESwU9GwbNtsQs8mW7KY0IQeLCF4ELR4EvXj2pd68iejZv8GLiLRUTYsVD7Iyu7PJppu3pnlpm88HJnmemSfzzHeened5sjPsBrBnDaQ/chGHIuLDJOJAtj6JiK56qjNiuFHu7sJ8IV2SqNXe+COpl7mzMF+Ilr9J7csyByPih/cijuba663Mzk2MlErF6Sw/WJ28NFiZnTs2PjkyVhwrTp06MTR08vQLp09tXax//TS3/+ZHrz739fA/7z59/YMfkxiO/dm21ji2ykAMZOekKz2FDd9tdS0Ph2S3D4BNSS/NjsZVHofiQHTUUwDA4ywd/2sAwB6TGP8BYI9pvg9wZ2G+0Fx29x2JnXXrlYjobcTfvL/Z2NKZ3bPrrd8H7buTROttzCQi+reg/oMR8dm3b32ZLrFN9yEBVvLO1Yi40D/Q3v8nS88sbNLxDZQZuCev/4Od8306/3lxpflfbnH+E9n8p/XJkJ4Vrt3NGIjoznZX1379524sq7TpzBZUns3/Xm4825YG2jL/W5zt9Xdkuf+nmcMRMV4qpn3bExFxJLp6Lo6XiifWqOPI7X9vr7ZtoGX+9+e1t79I609/L5XI3ejsWf43oyPVkQeJudWtqxHPdC4923e3rf9vtvry9k/nv+fW2vHhpeRrL73/6WrF0vjTeJtLe/zbq/Z5xLOxcvxNyZrPJw6mzX+88XPlOr755ZO+1epvbf90Setv/i+wE9L271s7/v6k9XnNytbWv378i6//xQNKX//dyZv1dHe27spItTp9IqI7eb19/cmlvTXzzfJp/I0dz3fHsviX+r9khf4v/Z/wwgZj7Lz5+1ebj397pfGP3lf733/i+t2JjtXqXzf+9KT3DNWTR7JVG+n/NnqAD3TyAAAAAAAAAAAAAAAAAAAAAAAAAGCDchGxP5JcfjGdy+Xzje/wfir6cqVypXr0YnlmajTq35XdH1255kddHmjkk+bnn/a35E/ek38+Ip6MiI97/lfP5wvl0uhuBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmX2rfP9/6ree3T46AGDb9LatqdVqtdb87eKamwGAR077+A8APO6M/wCw9xj/AWDvMf4DwN5j/AcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCbnTt7Nl1qfy/MF9L86OXZmYny5WOjxcpEfnKmkC+Upy/lx8rlsVIxXyhPrre/Url8aSimZq4MVouV6mBldu78ZHlmqnp+fHLkTJwvdu1IVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfyqzcxMjpVJx+rFI9ETEQ3AYezZxNdYq073Z1vn12M8H1ypzbZ2X8fAG6urNLohdP4cPS2KXOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR8R/AQAA//9QRCEt") r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece60000ee5571dd6001010000161100fe8000000000000000000000000000bbfe8000f600000000000000000000006d096ed62200169078020300000000000030b00afe4e70"], 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/128, 0x6}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) syz_emit_ethernet(0x66, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3900}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_IIF={0x8, 0x3, r4}]}, 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "ec69d337", "df02000000000ece"}, 0x28) setsockopt$SO_ATTACH_FILTER(r9, 0x29, 0x2, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) 3.359708254s ago: executing program 4 (id=330): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000011c00)={&(0x7f0000011800)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000011b00)=[{&(0x7f0000011840)="6eda3c21ba159377125fdfe1dea68b96167d0e9c53703c093f5d1e54d23b45ccd431f71c0719567a64120e277a22c8eb60c15f1cfd71ba439bbf6c92e5fd06a44a3c7d7cf97908cc31c531f11dd6c3adee0ccde60c2def9fd3bad2637922925609412590b1ebe1ee113dfa444aec693166c92cdd6b57261d1d004046cbc96e5d3e3f0e0c4b16f7be3d663da7f170f443103fae7a3ad268b3cc0999ecf9744320346bea0d7e40956e9f63cb4066deebe0a836e0dccda2921ec8e6a1ed8d82d008330a1441aba21ffddb4ff16c21145097acea537f649db3eeb0f2c58b51", 0xdd}, {&(0x7f0000011940)="238db66eaecd27eaea20e0be7fc789fa2ac8d2fb4585e1739d54a895c546b1e991020adfc0b8073802d0c2674d7990fe933bf486f692784a5e47c7d65fbe3d70934f8df8f557e05a9160655bdb1884ad8e6c8cd74658f03739e0180f7f4abc85f8323233b1fea8f855f0bfd2fafa8a0ac4b36a0a1c71ae5a22b5425b463c0e446e9bdc54cae84b3d3fa969ed89c98b5911f634ff", 0x94}], 0x2, &(0x7f0000011bc0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0xa, 0x62, 0x80000001}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x38, 0x4000}, 0x10) 2.541782561s ago: executing program 0 (id=343): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 2.505285314s ago: executing program 0 (id=344): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000011c00)={0x0, 0x0, &(0x7f0000011b00), 0x0, &(0x7f0000011bc0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0xa, 0x62, 0x80000001}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x38, 0x4000}, 0x10) 2.475190416s ago: executing program 0 (id=345): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x42, &(0x7f0000000780)={@local, @random="00ff7f00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}, @RTA_MARK={0x8}]}, 0x2c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = getgid() setregid(r4, r5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCX_GETX(r6, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) 2.319116569s ago: executing program 0 (id=347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x10, &(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES8], 0x0, 0x400007f, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0xffffffffffffff62, 0x66, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xa) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000), 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000b70000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c26838f2b90"], 0x0}, 0x90) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u']) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xfffffff8, 0xb, 0x4e, 0x400, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xa}, 0x48) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'bridge_slave_0\x00', 0x200}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2004, 0xff9, 0x6, 0xa1, 0xffffffffffffffff, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2000}, 0xffffffffffffffc8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x2, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x3, r9, &(0x7f0000000400)="72d6cdb4dcaf3be9646d4b616923cfb02873f9b07eae0d85b3d0103ebf960c988beb3d48c0576e451eb292bd2afbf418773a4baa245456dcdcee", 0x3a, 0x7, 0x0, 0x0, r6}]) (async) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x1000, r6, &(0x7f0000000500)="4ec2289fb44b6ae7282ba48d4c339ff13558042b692f7746283559823c728877f7bad8083c7358f3b6c9d62391be99d9623b1c6bfea89cf051904dfe965fb03c537a49ef788807c534b800a91a34e268708970ed572f29cd6dd6fdec6fca686f688781fcdf6d5a5430a1fd05a29b3577b35913b49be4deab94e10b7326df1b7d7b7bc5a33048ed0e5ec7a4d387f3da805535acc98027bbabde0f7fe87abbb40c7e76ad06d2a0fc1b5724ee", 0xab, 0x9, 0x0, 0x2, r8}, &(0x7f00000001c0)) 2.06975137s ago: executing program 3 (id=349): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r4) creat(&(0x7f0000000480)='./bus\x00', 0x0) inotify_init1(0x0) (async) inotify_init1(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 1.621804087s ago: executing program 3 (id=354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usbip_server_init(0x3) (fail_nth: 15) 1.049578493s ago: executing program 1 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000e5dd33b3d3e366a709adf3c046cdc4b600340000000e0001006e657464657673696d00000070a64ad831042f2d657673696d300000080073000000000008000300000000009062c64d31b63a8b8406325487201c6f0089bc65a3fe6bf5bbc70e2938e876ca5c9ed6c41cc669e83fb206addf2c7172dfbf7248751db6e5382e8e551a15e69f5f84bf4572ae649a5a"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000000c0)=@deltaction={0x218, 0x31, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x94, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffc00}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.037612934s ago: executing program 1 (id=359): io_setup(0x9, &(0x7f0000000280)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x50541, 0x0) io_setup(0xb, &(0x7f0000000080)=0x0) io_destroy(r2) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x9, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = io_uring_setup(0x4759, &(0x7f0000000200)={0x0, 0x5, 0x1000, 0x1, 0x117b}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xe1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00aaaaaaaa0f79d5d66bb74d88a8100081003400080500c0232a84b740323291f1591157b5c561208b8b78492b27aaa8da4c11c65aa5712984635322a7d35eb1afcb5f82385e12830f4d2ddf62d3b0438d158e0d13f0ae419e6b0398dd3baeb78cc1bb323891028cbfd7374fffe30dae39b8ca7fedf948dca5bd0c628d08b072e557ebb4b7adbfbeffbcb5bbb1eac18cc790f600a7b9bddc3b127b41f5c194ad1b1c5ea2dd8c15fec6e1b47289c729a07a122160cdb4a54c63c567279b84ed08d7c199d662a91ee8fb4fb193b4e149c345bf8e4a938d600aaf9e67ad11848a8aab"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = dup(r3) write$UHID_INPUT(r9, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) 797.709624ms ago: executing program 3 (id=360): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@sndrcv={0x30}, @authinfo={0x12}], 0x48}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x64, r2, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @private, 0x0}, &(0x7f0000000200)=0xc) r5 = memfd_secret(0x80000) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r7 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000008c0), 0x1}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x4, 0x6, 0x78, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3fb, 0xfffffffffffffff7}, 0x91221, 0x3, 0xa16, 0x2, 0xfffffffffffffbff, 0x2, 0x6, 0x0, 0xfb7}, 0xffffffffffffffff, 0x1, r7, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x5, 0xec, 0xff, 0x6, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0xb6e, 0x7, 0x8, 0x2ee, 0xcd, 0x6, 0x0, 0xe0a, 0x0, 0xff}, r6, 0xf, r7, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000640)=""/52, 0x34, 0x0, &(0x7f0000000680)=""/43, 0x2b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x80) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r7], 0x0, 0x49}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x8, 0x4, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x15, &(0x7f0000000880)=""/21, 0x40f00, 0x0, '\x00', 0x0, 0xa, r9, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x5, 0x2, 0x3f}, 0x10, r8}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x20b2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x8, 0x100, 0x8, 0x290, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0xb}, 0x48) r14 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r14, 0x402, 0x8000003d) fcntl$setsig(r14, 0xa, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x1, 0x0, 0x2, 0xb, 0x4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000180)='GPL\x00', 0x10, 0xa7, &(0x7f0000000400)=""/167, 0x41100, 0x38, '\x00', r4, 0x2a, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x10, 0x2, 0x2a}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r11, r12, 0x1, r13, r14, r3], 0x0, 0x10, 0x3ff}, 0x90) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r15 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r15, @ANYBLOB=',wfdno=', @ANYBLOB="312f2a84507382f5aac13f4b19c9dbe43156c1c80f2fbb893aee73ab87dea427508d97a85832bbe66d2824343060ab3fca10114e7c8023267e606ebe7553127b13772f665c09f3e3900eb305ecb6a1af012d3316e76b858c65ad5f7c90ff2a5946b16941c3d9cbdce21e5d07d67d729803bdb6d35517b7456a7175ee172aa78286145803fbde61d7b2a266a76439d32257610bab93637736a30ea75d5a127a2a8a9ab4923cc5ead413a803f59bc879d1bd71e34af86688c04432ccc94f95f49034c6bba6ce9b6e80fded8fb4eba7b5ad9a2efabdd3f96f27c95b"]) 794.062104ms ago: executing program 3 (id=361): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)}}], 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 793.567694ms ago: executing program 3 (id=362): socket$inet6(0xa, 0x800000000000002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x3}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28}, {0x4}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x67, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) getrlimit(0xd, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) unshare(0x40020000) (async) socket$inet(0x2, 0x0, 0x0) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) (async) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, r3}, 0xc) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1a}, 0x20) 777.881206ms ago: executing program 3 (id=363): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00') write$cgroup_type(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000000)=0x1000, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r6, r7, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) connect$unix(r8, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 591.452291ms ago: executing program 1 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x419}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}}, 0x0) 121.69487ms ago: executing program 1 (id=365): r0 = creat(0x0, 0x0) readahead(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000001e00)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES16=r2, @ANYRES32=r3, @ANYRESHEX=r1], 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) read$watch_queue(r6, &(0x7f0000000e00)=""/4080, 0xff0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) listen(r7, 0x0) (async) accept4$tipc(r7, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0xffffffffffffff4a, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0x2000}, {0x2c}, {0x6, 0x0, 0x0, 0x1614a4a0}]}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) (async) socket$tipc(0x1e, 0x5, 0x0) (async) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000380)='./file1\x00', 0x8400, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r4], 0x6, 0x2a9, &(0x7f0000000980)="$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") (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1d3280, 0x0) mkdirat(r9, &(0x7f0000000180)='./bus\x00', 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r10, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r9, &(0x7f00000004c0)='./bus/file0\x00', r10, &(0x7f00000002c0)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 51.555795ms ago: executing program 1 (id=366): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e294ed2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 0s ago: executing program 1 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff41) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000840)=""/71}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000f8ffffffb703000008000000b704000000000000850000000300000095000000000000002d2de227a67b0b257b22227a207a07d0f39925a83146bd57f1a42a717d7287ee38a9fbd0e3d4e9e24e414b4a1c55d2f1f8e77804d07af5203a699cff696eb08d1bd4fb4a04543e184db8446ecdce71d915fa9d8a34e160ad338727e0558e771cfb738cbce9140a984a010224f265150a6588051a4412e9dafc51b0f69529d1dbaf773662c66c8ca97be518ea06e4b0c8cbf275b1243cbeaa033e3267ebc20b4bc360cdfb85b9e3b2a3b87f6c48d648d746fdbb0fcc1f34102b717a87afae7a7066b58c8a65d0d5d1d3f9377507c3825c7f815b4bae41d537409005d2ed1e038f4caaad8b8a20561387b396158616083df26aae170aa398eb3fcbf794331470e513fa35222b2c11a31a5f8c452b9311a9306a7c62ac2258c310821265e39e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r6}, 0x10) write$cgroup_type(r2, &(0x7f0000000140), 0xb) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x7a, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ilesystem with unknown checksum algorithm. [ 45.293220][ T3590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.316542][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.337855][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.349797][ T50] bond0 (unregistering): Released all slaves [ 45.375377][ T3682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.386740][ T3682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.478960][ T50] hsr_slave_0: left promiscuous mode [ 45.486254][ T4036] dccp_invalid_packet: P.Data Offset(2) too small [ 45.495638][ T50] hsr_slave_1: left promiscuous mode [ 45.535871][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.537217][ T4028] loop4: detected capacity change from 0 to 128 [ 45.543554][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.573143][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.577776][ T4028] /dev/loop4: Can't open blockdev [ 45.580692][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.594638][ T4045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 45.603793][ T4045] netlink: 272 bytes leftover after parsing attributes in process `syz.3.125'. [ 45.615923][ T4045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.125'. [ 45.628092][ T50] veth1_macvtap: left promiscuous mode [ 45.633587][ T50] veth0_macvtap: left promiscuous mode [ 45.639428][ T50] veth1_vlan: left promiscuous mode [ 45.644720][ T50] veth0_vlan: left promiscuous mode [ 45.899624][ T50] team0 (unregistering): Port device team_slave_1 removed [ 45.937744][ T50] team0 (unregistering): Port device team_slave_0 removed [ 46.068692][ T3682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.255210][ T4065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4065 comm=syz.3.128 [ 46.309754][ T3682] veth0_vlan: entered promiscuous mode [ 46.369720][ T4066] pimreg: entered allmulticast mode [ 46.400181][ T3682] veth1_vlan: entered promiscuous mode [ 46.443439][ T3682] veth0_macvtap: entered promiscuous mode [ 46.522592][ T3682] veth1_macvtap: entered promiscuous mode [ 46.572572][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.583221][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.593087][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.603806][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.613816][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.624259][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.658124][ T4083] FAULT_INJECTION: forcing a failure. [ 46.658124][ T4083] name failslab, interval 1, probability 0, space 0, times 1 [ 46.671225][ T4083] CPU: 0 UID: 0 PID: 4083 Comm: syz.3.129 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 46.681820][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.691908][ T4083] Call Trace: [ 46.695186][ T4083] [ 46.698122][ T4083] dump_stack_lvl+0xf2/0x150 [ 46.702984][ T4083] dump_stack+0x15/0x20 [ 46.707247][ T4083] should_fail_ex+0x229/0x230 [ 46.712022][ T4083] ? __pfx_ip6_dst_gc+0x10/0x10 [ 46.716875][ T4083] ? dst_alloc+0xc0/0x100 [ 46.721206][ T4083] should_failslab+0x8f/0xb0 [ 46.725813][ T4083] kmem_cache_alloc_noprof+0x4c/0x290 [ 46.731547][ T4083] ? fib6_select_path+0x2bf/0x2f0 [ 46.736705][ T4083] dst_alloc+0xc0/0x100 [ 46.740858][ T4083] ip6_pol_route+0x6ff/0xb90 [ 46.745509][ T4083] ? ip6_pol_route+0x385/0xb90 [ 46.750289][ T4083] ip6_pol_route_input+0x40/0x50 [ 46.755310][ T4083] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 46.761000][ T4083] fib6_rule_lookup+0x364/0x4e0 [ 46.765940][ T4083] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 46.771594][ T4083] ? nf_nat_inet_fn+0x662/0x6b0 [ 46.776677][ T4083] ip6_route_input+0x41e/0x4f0 [ 46.781468][ T4083] ip6_rcv_finish+0x1c0/0x330 [ 46.786308][ T4083] ipv6_rcv+0x74/0x150 [ 46.790462][ T4083] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 46.795682][ T4083] __netif_receive_skb+0xa2/0x280 [ 46.800789][ T4083] netif_receive_skb+0x4a/0x320 [ 46.805643][ T4083] ? virtio_net_hdr_to_skb+0x6c4/0xb50 [ 46.811101][ T4083] ? tun_rx_batched+0xba/0x410 [ 46.815864][ T4083] tun_rx_batched+0xf0/0x410 [ 46.820531][ T4083] tun_get_user+0x1e77/0x24b0 [ 46.825255][ T4083] ? kstrtoull+0x110/0x140 [ 46.829752][ T4083] ? ref_tracker_alloc+0x1f5/0x2f0 [ 46.835107][ T4083] tun_chr_write_iter+0x18e/0x240 [ 46.840193][ T4083] vfs_write+0x78f/0x900 [ 46.844454][ T4083] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 46.849996][ T4083] ksys_write+0xeb/0x1b0 [ 46.854378][ T4083] __x64_sys_write+0x42/0x50 [ 46.859096][ T4083] x64_sys_call+0x27dd/0x2d60 [ 46.863824][ T4083] do_syscall_64+0xc9/0x1c0 [ 46.868452][ T4083] ? clear_bhb_loop+0x55/0xb0 [ 46.873151][ T4083] ? clear_bhb_loop+0x55/0xb0 [ 46.877833][ T4083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.883743][ T4083] RIP: 0033:0x7ffbbd01895f [ 46.888289][ T4083] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 46.908087][ T4083] RSP: 002b:00007ffbbbc91000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 46.916515][ T4083] RAX: ffffffffffffffda RBX: 00007ffbbd1b5f80 RCX: 00007ffbbd01895f [ 46.925273][ T4083] RDX: 000000000000004e RSI: 00000000200004c0 RDI: 00000000000000c8 [ 46.933508][ T4083] RBP: 00007ffbbbc91090 R08: 0000000000000000 R09: 0000000000000000 [ 46.941769][ T4083] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 46.950239][ T4083] R13: 0000000000000000 R14: 00007ffbbd1b5f80 R15: 00007fff72832968 [ 46.958364][ T4083] [ 46.963957][ T3682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.023934][ T3901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.100952][ T3901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.122628][ T3901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.137731][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.148788][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.159169][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.170230][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.180357][ T3682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.191162][ T3682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.204639][ T3682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.213611][ T3682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.222731][ T3682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.231623][ T3682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.240565][ T3682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.263161][ T3901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.270464][ T3990] vhci_hcd: connection reset by peer [ 47.273614][ T4088] loop3: detected capacity change from 0 to 1024 [ 47.285250][ T3848] vhci_hcd: stop threads [ 47.289657][ T3848] vhci_hcd: release socket [ 47.294159][ T3848] vhci_hcd: disconnect device [ 47.314743][ T4088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.356277][ T4098] xt_TCPMSS: Only works on TCP SYN packets [ 47.385727][ T3901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.403708][ T3590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.435178][ T3901] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.471963][ T4115] loop4: detected capacity change from 0 to 1024 [ 47.481421][ T3848] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.481590][ T4120] loop3: detected capacity change from 0 to 128 [ 47.489144][ T3848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.515019][ T4115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.530759][ T3848] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.538092][ T3848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.557511][ T4120] FAT-fs (loop3): bogus number of FAT sectors [ 47.563604][ T4120] FAT-fs (loop3): Can't find a valid FAT filesystem [ 47.570741][ T4115] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.577738][ T3901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.613040][ T4115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.673034][ T4115] devtmpfs: Too few inodes for current use [ 47.711517][ T4115] process 'syz.4.135' launched './file2' with NULL argv: empty string added [ 47.729606][ T3901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.749447][ T4148] loop0: detected capacity change from 0 to 256 [ 47.770044][ T4148] vfat: Bad value for 'dmask' [ 47.787877][ T4148] tmpfs: Bad value for 'mpol' [ 47.840432][ T4159] loop0: detected capacity change from 0 to 512 [ 47.851080][ T4159] xt_nat: multiple ranges no longer supported [ 47.893618][ T4163] loop0: detected capacity change from 0 to 512 [ 47.901787][ T3901] veth0_vlan: entered promiscuous mode [ 47.908930][ T4163] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.922473][ T4163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.925894][ T3901] veth1_vlan: entered promiscuous mode [ 47.958003][ T4163] EXT4-fs (loop0): 1 truncate cleaned up [ 47.964166][ T4163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.978451][ T4167] loop3: detected capacity change from 0 to 2048 [ 47.983089][ T3901] veth0_macvtap: entered promiscuous mode [ 47.993832][ T3901] veth1_macvtap: entered promiscuous mode [ 48.009774][ T3901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.020329][ T3901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.030506][ T3901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.041259][ T3901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.051227][ T3901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.061696][ T3901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.071530][ T3901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.082031][ T3901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.093750][ T3901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.106940][ T3901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.117596][ T3901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.127212][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.127452][ T3901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.147098][ T3901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.156947][ T3901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.163113][ T4169] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 48.167456][ T3901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.174096][ T4169] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.184003][ T3901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.191635][ T4169] vhci_hcd vhci_hcd.0: Device attached [ 48.202247][ T3901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.218914][ T3901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.243621][ T4167] loop3: detected capacity change from 0 to 128 [ 48.261917][ T3258] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 48.284684][ T3901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.293534][ T3901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.300096][ T4167] vfat: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ' [ 48.302387][ T3901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.335987][ T3901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.338424][ T4171] vhci_hcd: connection closed [ 48.349622][ T3347] vhci_hcd: stop threads [ 48.358766][ T3347] vhci_hcd: release socket [ 48.363177][ T3347] vhci_hcd: disconnect device [ 48.375216][ T3258] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 48.403863][ T3258] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 48.426792][ T3319] vhci_hcd: vhci_device speed not set [ 48.435936][ T3258] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 48.456955][ T3258] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 48.479907][ T3258] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 48.503709][ T3258] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 48.508032][ T3848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.528449][ T3258] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 48.557019][ T3258] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /40/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 48.579677][ T3258] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 48.609807][ T3848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.623844][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 48.623857][ T29] audit: type=1400 audit(1724042170.484:385): avc: denied { map } for pid=4195 comm="syz.2.149" path="socket:[6396]" dev="sockfs" ino=6396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.658767][ T29] audit: type=1400 audit(1724042170.484:386): avc: denied { read } for pid=4195 comm="syz.2.149" path="socket:[6396]" dev="sockfs" ino=6396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.687901][ T4196] xt_cgroup: xt_cgroup: no path or classid specified [ 48.698679][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 48.728963][ T3848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.771102][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.778343][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.785542][ T4174] bridge_slave_0: entered allmulticast mode [ 48.792418][ T4174] bridge_slave_0: entered promiscuous mode [ 48.800453][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.807680][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.814974][ T4174] bridge_slave_1: entered allmulticast mode [ 48.821597][ T4174] bridge_slave_1: entered promiscuous mode [ 48.830486][ T3848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.852891][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.863313][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.889884][ T4174] team0: Port device team_slave_0 added [ 48.901107][ T4174] team0: Port device team_slave_1 added [ 48.944585][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.952021][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.978591][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.991324][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.998368][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.006035][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.025515][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.074525][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 49.091417][ T3848] bridge_slave_1: left allmulticast mode [ 49.097483][ T3848] bridge_slave_1: left promiscuous mode [ 49.103208][ T3848] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.112629][ T3848] bridge_slave_0: left allmulticast mode [ 49.118478][ T3848] bridge_slave_0: left promiscuous mode [ 49.124188][ T3848] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.208407][ T3848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.218989][ T3848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.229111][ T3848] bond0 (unregistering): Released all slaves [ 49.240465][ T4174] hsr_slave_0: entered promiscuous mode [ 49.246565][ T4174] hsr_slave_1: entered promiscuous mode [ 49.323150][ T3848] hsr_slave_0: left promiscuous mode [ 49.332150][ T3848] hsr_slave_1: left promiscuous mode [ 49.338134][ T3848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.345624][ T3848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.354633][ T3848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.362185][ T3848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.377670][ T3848] veth1_macvtap: left promiscuous mode [ 49.383308][ T3848] veth0_macvtap: left promiscuous mode [ 49.389304][ T3848] veth1_vlan: left promiscuous mode [ 49.394546][ T3848] veth0_vlan: left promiscuous mode [ 49.483921][ T4244] xt_TCPMSS: Only works on TCP SYN packets [ 49.498428][ T3848] team0 (unregistering): Port device team_slave_1 removed [ 49.509434][ T3848] team0 (unregistering): Port device team_slave_0 removed [ 49.607414][ T4251] netlink: 'syz.3.160': attribute type 17 has an invalid length. [ 49.675866][ T4212] chnl_net:caif_netlink_parms(): no params data found [ 49.695811][ T29] audit: type=1400 audit(1724042171.544:387): avc: denied { bind } for pid=4245 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.715175][ T29] audit: type=1400 audit(1724042171.544:388): avc: denied { listen } for pid=4245 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.734601][ T29] audit: type=1400 audit(1724042171.544:389): avc: denied { connect } for pid=4245 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.739036][ T4271] loop3: detected capacity change from 0 to 512 [ 49.762176][ T29] audit: type=1400 audit(1724042171.624:390): avc: denied { accept } for pid=4245 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.781820][ T29] audit: type=1400 audit(1724042171.624:391): avc: denied { read } for pid=4245 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.829240][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.837031][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.844481][ T4212] bridge_slave_0: entered allmulticast mode [ 49.851230][ T4212] bridge_slave_0: entered promiscuous mode [ 49.865470][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.873071][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.880265][ T4212] bridge_slave_1: entered allmulticast mode [ 49.887968][ T4212] bridge_slave_1: entered promiscuous mode [ 49.926744][ T4212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.938665][ T4212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.962715][ T4174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.972155][ T4212] team0: Port device team_slave_0 added [ 49.979010][ T4212] team0: Port device team_slave_1 added [ 49.984714][ T4174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.999053][ T4174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.009713][ T3848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.025553][ T4174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.035206][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.042379][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.068360][ T4212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.088742][ T3848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.100169][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.107425][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.133571][ T4212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.161904][ T3848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.174946][ T4212] hsr_slave_0: entered promiscuous mode [ 50.181073][ T4212] hsr_slave_1: entered promiscuous mode [ 50.187247][ T4212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.194960][ T4212] Cannot create hsr debugfs directory [ 50.210841][ T3848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.225993][ T3334] vhci_hcd: vhci_device speed not set [ 50.289109][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.311449][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.325077][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.332292][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.354009][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.361314][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.384550][ T3848] bond0: left allmulticast mode [ 50.389646][ T3848] bond_slave_0: left allmulticast mode [ 50.395317][ T3848] bond_slave_1: left allmulticast mode [ 50.400841][ T3848] bond0: left promiscuous mode [ 50.405627][ T3848] bond_slave_0: left promiscuous mode [ 50.411158][ T3848] bond_slave_1: left promiscuous mode [ 50.416794][ T3848] bridge0: port 3(bond0) entered disabled state [ 50.423893][ T3848] bridge_slave_1: left allmulticast mode [ 50.429682][ T3848] bridge_slave_1: left promiscuous mode [ 50.435340][ T3848] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.444923][ T3848] bridge_slave_0: left allmulticast mode [ 50.447661][ T4300] loop2: detected capacity change from 0 to 512 [ 50.450726][ T3848] bridge_slave_0: left promiscuous mode [ 50.462646][ T3848] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.511832][ T4300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.537349][ T4300] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.539237][ T4313] FAULT_INJECTION: forcing a failure. [ 50.539237][ T4313] name failslab, interval 1, probability 0, space 0, times 0 [ 50.560479][ T4313] CPU: 1 UID: 0 PID: 4313 Comm: syz.3.163 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 50.571164][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.581232][ T4313] Call Trace: [ 50.584598][ T4313] [ 50.587643][ T4313] dump_stack_lvl+0xf2/0x150 [ 50.592348][ T4313] dump_stack+0x15/0x20 [ 50.596632][ T4313] should_fail_ex+0x229/0x230 [ 50.601325][ T4313] ? skb_clone+0x154/0x1f0 [ 50.605797][ T4313] should_failslab+0x8f/0xb0 [ 50.610482][ T4313] kmem_cache_alloc_noprof+0x4c/0x290 [ 50.615910][ T4313] skb_clone+0x154/0x1f0 [ 50.620164][ T4313] __netlink_deliver_tap+0x2bd/0x4c0 [ 50.625511][ T4313] netlink_unicast+0x64a/0x670 [ 50.630532][ T4313] netlink_sendmsg+0x5cc/0x6e0 [ 50.635298][ T4313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.640638][ T4313] __sock_sendmsg+0x140/0x180 [ 50.645309][ T4313] ____sys_sendmsg+0x312/0x410 [ 50.650257][ T4313] __sys_sendmsg+0x1e9/0x280 [ 50.654909][ T4313] __x64_sys_sendmsg+0x46/0x50 [ 50.659708][ T4313] x64_sys_call+0x2689/0x2d60 [ 50.664485][ T4313] do_syscall_64+0xc9/0x1c0 [ 50.668991][ T4313] ? clear_bhb_loop+0x55/0xb0 [ 50.673666][ T4313] ? clear_bhb_loop+0x55/0xb0 [ 50.678336][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.684260][ T4313] RIP: 0033:0x7ffbbd019e79 [ 50.688753][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.708422][ T4313] RSP: 002b:00007ffbbbc91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.716855][ T4313] RAX: ffffffffffffffda RBX: 00007ffbbd1b5f80 RCX: 00007ffbbd019e79 [ 50.724811][ T4313] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 50.732767][ T4313] RBP: 00007ffbbbc91090 R08: 0000000000000000 R09: 0000000000000000 [ 50.740750][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.748796][ T4313] R13: 0000000000000000 R14: 00007ffbbd1b5f80 R15: 00007fff72832968 [ 50.756946][ T4313] [ 50.766795][ T29] audit: type=1400 audit(1724042172.624:392): avc: denied { create } for pid=4295 comm="syz.2.162" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.806103][ T29] audit: type=1400 audit(1724042172.664:393): avc: denied { ioctl } for pid=4295 comm="syz.2.162" path="/5/bus/cgroup.controllers" dev="loop2" ino=18 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.833644][ T3848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.875121][ T29] audit: type=1400 audit(1724042172.704:394): avc: denied { read } for pid=4316 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.896302][ T3848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.907160][ T3848] bond0 (unregistering): Released all slaves [ 50.913481][ T4329] sctp: [Deprecated]: syz.2.162 (pid 4329) Use of int in maxseg socket option. [ 50.913481][ T4329] Use struct sctp_assoc_value instead [ 50.943196][ T3901] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.000704][ T4335] loop2: detected capacity change from 0 to 128 [ 51.039182][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.050008][ T3848] hsr_slave_0: left promiscuous mode [ 51.059644][ T3848] hsr_slave_1: left promiscuous mode [ 51.072472][ T3848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.080146][ T3848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.098829][ T3848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.106652][ T3848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.118383][ T3848] veth1_macvtap: left promiscuous mode [ 51.123925][ T3848] veth0_macvtap: left promiscuous mode [ 51.129515][ T3848] veth1_vlan: left promiscuous mode [ 51.134930][ T3848] veth0_vlan: left promiscuous mode [ 51.211636][ T3848] team0 (unregistering): Port device team_slave_1 removed [ 51.221794][ T3848] team0 (unregistering): Port device team_slave_0 removed [ 51.362236][ T4212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.371438][ T4212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.382564][ T4212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.400362][ T4174] veth0_vlan: entered promiscuous mode [ 51.406389][ T4212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.419683][ T4174] veth1_vlan: entered promiscuous mode [ 51.450574][ T4174] veth0_macvtap: entered promiscuous mode [ 51.459700][ T4174] veth1_macvtap: entered promiscuous mode [ 51.476760][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.487553][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.497676][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.508261][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.518410][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.528962][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.539860][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.549892][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.560348][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.570447][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.581056][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.590907][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.601515][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.612386][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.626673][ T4212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.639197][ T4212] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.668252][ T4174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.677383][ T4174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.686262][ T4174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.695159][ T4174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.695958][ T4380] FAULT_INJECTION: forcing a failure. [ 51.695958][ T4380] name failslab, interval 1, probability 0, space 0, times 0 [ 51.716799][ T4380] CPU: 1 UID: 0 PID: 4380 Comm: syz.3.168 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 51.720234][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.727487][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 51.727500][ T4380] Call Trace: [ 51.734620][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.744622][ T4380] [ 51.744630][ T4380] dump_stack_lvl+0xf2/0x150 [ 51.744731][ T4380] dump_stack+0x15/0x20 [ 51.744755][ T4380] should_fail_ex+0x229/0x230 [ 51.744780][ T4380] ? selinux_sk_alloc_security+0x62/0x120 [ 51.749942][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.755348][ T4380] should_failslab+0x8f/0xb0 [ 51.758318][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.762925][ T4380] __kmalloc_cache_noprof+0x4b/0x2a0 [ 51.801713][ T4380] selinux_sk_alloc_security+0x62/0x120 [ 51.807290][ T4380] security_sk_alloc+0x4b/0x80 [ 51.812053][ T4380] sk_prot_alloc+0xc6/0x190 [ 51.816731][ T4380] sk_alloc+0x33/0x360 [ 51.820846][ T4380] unix_create1+0xa6/0x400 [ 51.825257][ T4380] ? inode_init_always+0x44f/0x480 [ 51.830454][ T4380] unix_create+0x112/0x140 [ 51.835033][ T4380] __sock_create+0x2db/0x4f0 [ 51.840080][ T4380] __sys_socketpair+0x17c/0x430 [ 51.845015][ T4380] __x64_sys_socketpair+0x52/0x60 [ 51.850052][ T4380] x64_sys_call+0x1c1e/0x2d60 [ 51.854723][ T4380] do_syscall_64+0xc9/0x1c0 [ 51.859240][ T4380] ? clear_bhb_loop+0x55/0xb0 [ 51.864040][ T4380] ? clear_bhb_loop+0x55/0xb0 [ 51.868800][ T4380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.874692][ T4380] RIP: 0033:0x7ffbbd01bdca [ 51.879092][ T4380] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.898790][ T4380] RSP: 002b:00007ffbbbc90f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 51.907231][ T4380] RAX: ffffffffffffffda RBX: 00007ffbbd1b5f00 RCX: 00007ffbbd01bdca [ 51.915194][ T4380] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 51.923150][ T4380] RBP: 00007ffbbbc91090 R08: 0000000000000000 R09: 0000000000000000 [ 51.931109][ T4380] R10: 00007ffbbbc90f98 R11: 0000000000000246 R12: 0000000000000003 [ 51.939155][ T4380] R13: 0000000000000000 R14: 00007ffbbd1b5f80 R15: 00007fff72832968 [ 51.948129][ T4380] [ 51.964133][ T4212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.975004][ T4212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.042033][ T4388] loop4: detected capacity change from 0 to 256 [ 52.043361][ T4212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.049911][ T4388] /dev/loop4: Can't open blockdev [ 52.094649][ T4388] loop4: detected capacity change from 0 to 1024 [ 52.110629][ T4388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.142213][ T4212] veth0_vlan: entered promiscuous mode [ 52.152104][ T4212] veth1_vlan: entered promiscuous mode [ 52.168572][ T4212] veth0_macvtap: entered promiscuous mode [ 52.176235][ T4212] veth1_macvtap: entered promiscuous mode [ 52.187658][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.198450][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.208278][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.218801][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.228980][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.240031][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.249928][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.260378][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.271340][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.283141][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.293815][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.303896][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.314943][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.324843][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.335748][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.345543][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.356066][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.367700][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.379368][ T4212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.388831][ T4212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.397786][ T4212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.406612][ T4212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.457822][ T4402] loop0: detected capacity change from 0 to 512 [ 52.482744][ T4402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.496210][ T4402] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.514507][ T4406] loop3: detected capacity change from 0 to 512 [ 52.521596][ T4406] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 52.535090][ T4406] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 52.583788][ T4409] loop3: detected capacity change from 0 to 512 [ 52.590876][ T4409] EXT4-fs: Ignoring removed i_version option [ 52.597916][ T4409] ext4: Unknown parameter 'mask' [ 52.666611][ T4411] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #20: comm syz.0.155: corrupted inode contents [ 52.684052][ T4411] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #20: comm syz.0.155: mark_inode_dirty error [ 52.695547][ T4411] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #20: comm syz.0.155: corrupted inode contents [ 52.707962][ T4411] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3007: inode #20: comm syz.0.155: mark_inode_dirty error [ 52.720183][ T4411] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3010: inode #20: comm syz.0.155: mark inode dirty (error -117) [ 52.733155][ T4411] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 52.869353][ T4387] syz.4.146 (4387) used greatest stack depth: 10296 bytes left [ 52.893182][ T4174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.121985][ T4418] loop4: detected capacity change from 0 to 512 [ 53.296448][ T4212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.359645][ T4422] FAULT_INJECTION: forcing a failure. [ 53.359645][ T4422] name failslab, interval 1, probability 0, space 0, times 0 [ 53.372514][ T4422] CPU: 0 UID: 0 PID: 4422 Comm: syz.0.173 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 53.383329][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 53.393382][ T4422] Call Trace: [ 53.396641][ T4422] [ 53.399606][ T4422] dump_stack_lvl+0xf2/0x150 [ 53.404185][ T4422] dump_stack+0x15/0x20 [ 53.408336][ T4422] should_fail_ex+0x229/0x230 [ 53.413008][ T4422] ? xfrm_state_alloc+0x2c/0x180 [ 53.418071][ T4422] should_failslab+0x8f/0xb0 [ 53.422743][ T4422] kmem_cache_alloc_noprof+0x4c/0x290 [ 53.428253][ T4422] xfrm_state_alloc+0x2c/0x180 [ 53.433193][ T4422] xfrm_add_sa+0xd7c/0x2010 [ 53.437773][ T4422] xfrm_user_rcv_msg+0x4a3/0x5c0 [ 53.442719][ T4422] ? __kfree_skb+0x102/0x150 [ 53.447309][ T4422] ? consume_skb+0x57/0x180 [ 53.451994][ T4422] netlink_rcv_skb+0x12c/0x230 [ 53.456842][ T4422] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 53.462410][ T4422] xfrm_netlink_rcv+0x47/0x60 [ 53.467132][ T4422] netlink_unicast+0x599/0x670 [ 53.471903][ T4422] netlink_sendmsg+0x5cc/0x6e0 [ 53.476672][ T4422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.481977][ T4422] __sock_sendmsg+0x140/0x180 [ 53.486720][ T4422] ____sys_sendmsg+0x312/0x410 [ 53.491613][ T4422] __sys_sendmsg+0x1e9/0x280 [ 53.496258][ T4422] __x64_sys_sendmsg+0x46/0x50 [ 53.501295][ T4422] x64_sys_call+0x2689/0x2d60 [ 53.505987][ T4422] do_syscall_64+0xc9/0x1c0 [ 53.510547][ T4422] ? clear_bhb_loop+0x55/0xb0 [ 53.515372][ T4422] ? clear_bhb_loop+0x55/0xb0 [ 53.520114][ T4422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.526084][ T4422] RIP: 0033:0x7f19ee119e79 [ 53.530545][ T4422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.550312][ T4422] RSP: 002b:00007f19ecd97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.558711][ T4422] RAX: ffffffffffffffda RBX: 00007f19ee2b5f80 RCX: 00007f19ee119e79 [ 53.566723][ T4422] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 53.574907][ T4422] RBP: 00007f19ecd97090 R08: 0000000000000000 R09: 0000000000000000 [ 53.583033][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.590999][ T4422] R13: 0000000000000000 R14: 00007f19ee2b5f80 R15: 00007fff574a6d18 [ 53.599059][ T4422] [ 53.630930][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 53.630944][ T29] audit: type=1400 audit(1724042175.484:453): avc: denied { getopt } for pid=4423 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.751864][ T4430] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 53.792519][ T4432] xt_TCPMSS: Only works on TCP SYN packets [ 53.828666][ T29] audit: type=1326 audit(1724042175.684:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 53.832742][ T4437] loop0: detected capacity change from 0 to 512 [ 53.858538][ T29] audit: type=1326 audit(1724042175.684:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 53.858564][ T29] audit: type=1326 audit(1724042175.684:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 53.858620][ T29] audit: type=1326 audit(1724042175.684:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 53.906186][ T4437] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 53.928745][ T29] audit: type=1326 audit(1724042175.684:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 53.928771][ T29] audit: type=1326 audit(1724042175.684:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 53.928808][ T29] audit: type=1326 audit(1724042175.684:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 53.942575][ T4437] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 53.965747][ T29] audit: type=1326 audit(1724042175.684:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 54.044827][ T29] audit: type=1326 audit(1724042175.684:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ee119e79 code=0x7ffc0000 [ 54.057782][ T4444] loop4: detected capacity change from 0 to 512 [ 54.075795][ T4444] EXT4-fs: Ignoring removed i_version option [ 54.082994][ T4444] ext4: Unknown parameter 'mask' [ 54.190314][ T4447] loop0: detected capacity change from 0 to 256 [ 54.202713][ T4447] FAT-fs (loop0): Directory bread(block 64) failed [ 54.209558][ T4447] FAT-fs (loop0): Directory bread(block 65) failed [ 54.216209][ T4447] FAT-fs (loop0): Directory bread(block 66) failed [ 54.223076][ T4447] FAT-fs (loop0): Directory bread(block 67) failed [ 54.229965][ T4447] FAT-fs (loop0): Directory bread(block 68) failed [ 54.236843][ T4447] FAT-fs (loop0): Directory bread(block 69) failed [ 54.243540][ T4447] FAT-fs (loop0): Directory bread(block 70) failed [ 54.250949][ T4447] FAT-fs (loop0): Directory bread(block 71) failed [ 54.257669][ T4447] FAT-fs (loop0): Directory bread(block 72) failed [ 54.264261][ T4447] FAT-fs (loop0): Directory bread(block 73) failed [ 54.279899][ T4447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.183'. [ 54.288921][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 54.428307][ T4453] loop0: detected capacity change from 0 to 1024 [ 54.456950][ T4453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.184'. [ 54.466064][ T4453] netlink: 272 bytes leftover after parsing attributes in process `syz.0.184'. [ 54.481275][ T4453] netlink: 64 bytes leftover after parsing attributes in process `syz.0.184'. [ 54.493235][ T4453] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 54.569624][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.609671][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.667766][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.680147][ T4460] loop3: detected capacity change from 0 to 512 [ 54.688136][ T4460] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 54.726649][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.816786][ T11] bridge_slave_1: left allmulticast mode [ 54.822535][ T11] bridge_slave_1: left promiscuous mode [ 54.828206][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.849747][ T11] bridge_slave_0: left allmulticast mode [ 54.855574][ T11] bridge_slave_0: left promiscuous mode [ 54.861403][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.933800][ T4478] loop0: detected capacity change from 0 to 512 [ 54.958956][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.969956][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.980634][ T11] bond0 (unregistering): Released all slaves [ 55.125127][ T4491] Illegal XDP return value 4294967274 on prog (id 39) dev N/A, expect packet loss! [ 55.139205][ T4491] loop4: detected capacity change from 0 to 512 [ 55.146548][ T4491] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.155528][ T11] hsr_slave_0: left promiscuous mode [ 55.164827][ T11] hsr_slave_1: left promiscuous mode [ 55.171193][ T4491] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.192: corrupted in-inode xattr: invalid ea_ino [ 55.188454][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.196169][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.203697][ T4491] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.192: couldn't read orphan inode 15 (err -117) [ 55.203965][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.223235][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.232063][ T4491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.254166][ T4174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.265373][ T11] veth1_macvtap: left promiscuous mode [ 55.271062][ T11] veth0_macvtap: left promiscuous mode [ 55.276887][ T11] veth1_vlan: left promiscuous mode [ 55.282217][ T11] veth0_vlan: left promiscuous mode [ 55.357512][ T4500] loop4: detected capacity change from 0 to 512 [ 55.379153][ T4500] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 55.393146][ T4500] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 55.472391][ T11] team0 (unregistering): Port device team_slave_1 removed [ 55.489991][ T11] team0 (unregistering): Port device team_slave_0 removed [ 55.554106][ T4457] chnl_net:caif_netlink_parms(): no params data found [ 55.580196][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 55.611801][ T4515] FAULT_INJECTION: forcing a failure. [ 55.611801][ T4515] name failslab, interval 1, probability 0, space 0, times 0 [ 55.624688][ T4515] CPU: 1 UID: 0 PID: 4515 Comm: syz.4.199 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 55.635560][ T4515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.646312][ T4515] Call Trace: [ 55.649681][ T4515] [ 55.652621][ T4515] dump_stack_lvl+0xf2/0x150 [ 55.659090][ T4515] dump_stack+0x15/0x20 [ 55.663797][ T4515] should_fail_ex+0x229/0x230 [ 55.668656][ T4515] ? xfrm_add_sa+0x1398/0x2010 [ 55.673434][ T4515] should_failslab+0x8f/0xb0 [ 55.678144][ T4515] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 55.684547][ T4515] ? strcmp+0x21/0x50 [ 55.688561][ T4515] kmemdup_noprof+0x2a/0x60 [ 55.693246][ T4515] xfrm_add_sa+0x1398/0x2010 [ 55.697855][ T4515] xfrm_user_rcv_msg+0x4a3/0x5c0 [ 55.702894][ T4515] ? __kfree_skb+0x102/0x150 [ 55.707559][ T4515] ? consume_skb+0x57/0x180 [ 55.712102][ T4515] netlink_rcv_skb+0x12c/0x230 [ 55.717044][ T4515] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 55.722570][ T4515] xfrm_netlink_rcv+0x47/0x60 [ 55.727350][ T4515] netlink_unicast+0x599/0x670 [ 55.732118][ T4515] netlink_sendmsg+0x5cc/0x6e0 [ 55.736898][ T4515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.742261][ T4515] __sock_sendmsg+0x140/0x180 [ 55.746952][ T4515] ____sys_sendmsg+0x312/0x410 [ 55.751815][ T4515] __sys_sendmsg+0x1e9/0x280 [ 55.756413][ T4515] __x64_sys_sendmsg+0x46/0x50 [ 55.761339][ T4515] x64_sys_call+0x2689/0x2d60 [ 55.766008][ T4515] do_syscall_64+0xc9/0x1c0 [ 55.770504][ T4515] ? clear_bhb_loop+0x55/0xb0 [ 55.775285][ T4515] ? clear_bhb_loop+0x55/0xb0 [ 55.779961][ T4515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.785937][ T4515] RIP: 0033:0x7f300bbc9e79 [ 55.790349][ T4515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.810092][ T4515] RSP: 002b:00007f300a841038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.819565][ T4515] RAX: ffffffffffffffda RBX: 00007f300bd65f80 RCX: 00007f300bbc9e79 [ 55.827703][ T4515] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 55.835752][ T4515] RBP: 00007f300a841090 R08: 0000000000000000 R09: 0000000000000000 [ 55.843840][ T4515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.851885][ T4515] R13: 0000000000000000 R14: 00007f300bd65f80 R15: 00007ffcecf16268 [ 55.859891][ T4515] [ 55.868670][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.875931][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.878657][ T4535] loop0: detected capacity change from 0 to 2048 [ 55.884260][ T4457] bridge_slave_0: entered allmulticast mode [ 55.898684][ T4457] bridge_slave_0: entered promiscuous mode [ 55.911727][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.918865][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.926267][ T4457] bridge_slave_1: entered allmulticast mode [ 55.928072][ T4535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.932936][ T4457] bridge_slave_1: entered promiscuous mode [ 55.950825][ T4532] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.201: bg 0: block 234: padding at end of block bitmap is not set [ 55.966006][ T4532] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 55.979400][ T4532] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.979400][ T4532] [ 55.999292][ T4457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.012066][ T4457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.028431][ T4532] syz.0.201 (4532) used greatest stack depth: 9280 bytes left [ 56.060692][ T4212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.073106][ T4457] team0: Port device team_slave_0 added [ 56.093915][ T4457] team0: Port device team_slave_1 added [ 56.143244][ T4457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.150378][ T4457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.176689][ T4457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.192383][ T4457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.199501][ T4457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.225647][ T4457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.293603][ T4457] hsr_slave_0: entered promiscuous mode [ 56.301263][ T4457] hsr_slave_1: entered promiscuous mode [ 56.307503][ T4457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.315948][ T4457] Cannot create hsr debugfs directory [ 56.329057][ T4583] loop0: detected capacity change from 0 to 512 [ 56.419184][ T4592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 56.432444][ T4592] netlink: 'syz.3.215': attribute type 16 has an invalid length. [ 56.440341][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 56.634132][ T4457] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.643117][ T4457] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.653830][ T4457] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.663250][ T4457] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.708286][ T4457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.729015][ T4457] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.741308][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.748432][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.772804][ T4457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.783361][ T4457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.801001][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.808161][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.872511][ T4457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.952075][ T4457] veth0_vlan: entered promiscuous mode [ 56.964656][ T4457] veth1_vlan: entered promiscuous mode [ 56.984576][ T4457] veth0_macvtap: entered promiscuous mode [ 56.991261][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 57.003100][ T4457] veth1_macvtap: entered promiscuous mode [ 57.014576][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.025065][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.035203][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.045995][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.056087][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.066708][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.076707][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.078257][ T4688] netlink: 328 bytes leftover after parsing attributes in process `syz.4.216'. [ 57.087224][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.092916][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.125230][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.135836][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.145902][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.156714][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.166736][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.177770][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.187681][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.198209][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.219282][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.232830][ T4701] loop0: detected capacity change from 0 to 128 [ 57.234373][ T4703] loop4: detected capacity change from 0 to 1024 [ 57.250001][ T4457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.258926][ T4457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.258959][ T4457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.258987][ T4457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.410945][ T4735] 9pnet_fd: Insufficient options for proto=fd [ 57.429358][ T4736] loop4: detected capacity change from 0 to 512 [ 57.446370][ T4736] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 57.459806][ T4736] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 57.496477][ T4738] loop0: detected capacity change from 0 to 512 [ 57.511296][ T4738] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 57.524775][ T4738] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 57.524942][ T4740] loop4: detected capacity change from 0 to 128 [ 57.549617][ T4740] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.563143][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.563180][ T4740] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.583461][ T4174] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.593087][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.618677][ T4754] capability: warning: `syz.3.231' uses 32-bit capabilities (legacy support in use) [ 57.674829][ T4765] loop4: detected capacity change from 0 to 512 [ 57.682940][ T4765] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.234: iget: bad i_size value: -2594073385365405596 [ 57.696523][ T4765] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.234: couldn't read orphan inode 17 (err -117) [ 57.708964][ T4765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.725949][ T4765] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.234: Logical block already allocated [ 57.796858][ T4174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.880429][ T4788] loop3: detected capacity change from 0 to 256 [ 57.897335][ T4788] vlan1: entered promiscuous mode [ 57.907746][ T4776] loop4: detected capacity change from 0 to 512 [ 57.937545][ T4787] vlan1: left promiscuous mode [ 57.959395][ T3590] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 57.963222][ T4794] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 57.968082][ T3590] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 58.012236][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.027210][ T4773] chnl_net:caif_netlink_parms(): no params data found [ 58.064538][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.071873][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.079935][ T4773] bridge_slave_0: entered allmulticast mode [ 58.087400][ T4773] bridge_slave_0: entered promiscuous mode [ 58.095113][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.102440][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.110188][ T4773] bridge_slave_1: entered allmulticast mode [ 58.116984][ T4773] bridge_slave_1: entered promiscuous mode [ 58.137086][ T4773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.149241][ T4773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.173347][ T4773] team0: Port device team_slave_0 added [ 58.180006][ T4773] team0: Port device team_slave_1 added [ 58.199194][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.206400][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.232362][ T4773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.244014][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.251599][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.278451][ T4773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.293310][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.326134][ T4773] hsr_slave_0: entered promiscuous mode [ 58.332315][ T4773] hsr_slave_1: entered promiscuous mode [ 58.338308][ T4773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.345898][ T4773] Cannot create hsr debugfs directory [ 58.475583][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.559777][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.650642][ T4804] chnl_net:caif_netlink_parms(): no params data found [ 58.671967][ T11] bridge_slave_1: left allmulticast mode [ 58.677838][ T11] bridge_slave_1: left promiscuous mode [ 58.683568][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.685015][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 58.685026][ T29] audit: type=1400 audit(1724042180.524:705): avc: denied { remount } for pid=4813 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.717420][ T11] bridge_slave_0: left allmulticast mode [ 58.723199][ T11] bridge_slave_0: left promiscuous mode [ 58.728910][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.810657][ T29] audit: type=1400 audit(1724042180.664:706): avc: denied { bind } for pid=4820 comm="syz.0.246" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.830978][ T29] audit: type=1400 audit(1724042180.664:707): avc: denied { node_bind } for pid=4820 comm="syz.0.246" saddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 58.856124][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.866862][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.867680][ T4825] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 58.881944][ T4825] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.889707][ T4825] vhci_hcd vhci_hcd.0: Device attached [ 58.896928][ T11] bond0 (unregistering): Released all slaves [ 58.922107][ T4826] vhci_hcd: connection closed [ 58.922382][ T3848] vhci_hcd: stop threads [ 58.931635][ T3848] vhci_hcd: release socket [ 58.936151][ T3848] vhci_hcd: disconnect device [ 58.983433][ T4804] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.990638][ T4804] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.999717][ T4804] bridge_slave_0: entered allmulticast mode [ 59.007858][ T4804] bridge_slave_0: entered promiscuous mode [ 59.029208][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.036740][ T4804] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.059327][ T4804] bridge_slave_1: entered allmulticast mode [ 59.072391][ T4804] bridge_slave_1: entered promiscuous mode [ 59.104899][ T4804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.163184][ T4843] loop0: detected capacity change from 0 to 1024 [ 59.169911][ T11] hsr_slave_0: left promiscuous mode [ 59.178008][ T11] hsr_slave_1: left promiscuous mode [ 59.190786][ T4843] EXT4-fs: Ignoring removed orlov option [ 59.199865][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.207332][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.225010][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.232728][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.241976][ T4843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.256652][ T4843] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.267709][ T4843] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 59.289521][ T11] veth1_macvtap: left promiscuous mode [ 59.295205][ T11] veth0_macvtap: left promiscuous mode [ 59.300948][ T11] veth1_vlan: left promiscuous mode [ 59.306214][ T11] veth0_vlan: left promiscuous mode [ 59.330231][ T4843] EXT4-fs (loop0): invalid journal inode [ 59.345775][ T4843] EXT4-fs (loop0): can't get journal size [ 59.358293][ T4843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.443084][ T11] team0 (unregistering): Port device team_slave_1 removed [ 59.454487][ T11] team0 (unregistering): Port device team_slave_0 removed [ 59.490557][ T4212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.537110][ T4804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.567157][ T29] audit: type=1400 audit(1724042181.414:708): avc: denied { create } for pid=4863 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.570978][ T4869] loop0: detected capacity change from 0 to 512 [ 59.589028][ T4864] loop4: detected capacity change from 0 to 512 [ 59.601278][ T4864] EXT4-fs: Ignoring removed bh option [ 59.612369][ T4864] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.254: invalid block [ 59.624279][ T4864] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.254: couldn't read orphan inode 15 (err -117) [ 59.625476][ T4869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.638466][ T4864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.653790][ T4869] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.674258][ T4804] team0: Port device team_slave_0 added [ 59.682701][ T29] audit: type=1400 audit(1724042181.534:709): avc: denied { ioctl } for pid=4863 comm="syz.4.254" path="socket:[10516]" dev="sockfs" ino=10516 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.714129][ T4869] __nla_validate_parse: 2 callbacks suppressed [ 59.714165][ T4869] netlink: 328 bytes leftover after parsing attributes in process `syz.0.255'. [ 59.737701][ T4804] team0: Port device team_slave_1 added [ 59.747659][ T4174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.751326][ T4212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 59.771699][ T4804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.778786][ T4804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.804906][ T4804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.834917][ T4804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.842081][ T4804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.869833][ T4804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.912005][ T4884] syzkaller0: entered promiscuous mode [ 59.917633][ T4884] syzkaller0: entered allmulticast mode [ 59.939517][ T4804] hsr_slave_0: entered promiscuous mode [ 59.946491][ T4804] hsr_slave_1: entered promiscuous mode [ 59.952529][ T4804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.960275][ T4804] Cannot create hsr debugfs directory [ 59.994335][ T29] audit: type=1400 audit(1724042181.844:710): avc: denied { read } for pid=4893 comm="syz.0.261" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 60.017419][ T29] audit: type=1400 audit(1724042181.864:711): avc: denied { open } for pid=4893 comm="syz.0.261" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 60.062138][ T29] audit: type=1400 audit(1724042181.914:712): avc: denied { ioctl } for pid=4893 comm="syz.0.261" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 60.093799][ T4773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.140704][ T4773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.155963][ T29] audit: type=1400 audit(1724042182.014:713): avc: denied { setopt } for pid=4905 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 60.186119][ T4773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.199728][ T4773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.227155][ T4804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.282056][ T4804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.293928][ T4923] FAULT_INJECTION: forcing a failure. [ 60.293928][ T4923] name failslab, interval 1, probability 0, space 0, times 0 [ 60.306812][ T4923] CPU: 1 UID: 0 PID: 4923 Comm: syz.0.264 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 60.317399][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.327629][ T4923] Call Trace: [ 60.330953][ T4923] [ 60.333867][ T4923] dump_stack_lvl+0xf2/0x150 [ 60.338857][ T4923] dump_stack+0x15/0x20 [ 60.343198][ T4923] should_fail_ex+0x229/0x230 [ 60.347953][ T4923] ? __d_alloc+0x3d/0x340 [ 60.352339][ T4923] should_failslab+0x8f/0xb0 [ 60.356921][ T4923] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 60.362766][ T4923] __d_alloc+0x3d/0x340 [ 60.366945][ T4923] d_alloc_pseudo+0x1e/0x80 [ 60.371539][ T4923] alloc_file_pseudo+0x70/0x140 [ 60.376439][ T4923] sock_alloc_file+0x9b/0x1d0 [ 60.381154][ T4923] __sys_socketpair+0x23e/0x430 [ 60.386101][ T4923] __x64_sys_socketpair+0x52/0x60 [ 60.391128][ T4923] x64_sys_call+0x1c1e/0x2d60 [ 60.395858][ T4923] do_syscall_64+0xc9/0x1c0 [ 60.400365][ T4923] ? clear_bhb_loop+0x55/0xb0 [ 60.405138][ T4923] ? clear_bhb_loop+0x55/0xb0 [ 60.409822][ T4923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.415790][ T4923] RIP: 0033:0x7f19ee11bdca [ 60.420203][ T4923] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.440090][ T4923] RSP: 002b:00007f19ecd96f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 60.448569][ T4923] RAX: ffffffffffffffda RBX: 00007f19ee2b5f00 RCX: 00007f19ee11bdca [ 60.456701][ T4923] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 60.464874][ T4923] RBP: 00007f19ecd97090 R08: 0000000000000000 R09: 0000000000000000 [ 60.473117][ T4923] R10: 00007f19ecd96f98 R11: 0000000000000246 R12: 0000000000000003 [ 60.481085][ T4923] R13: 0000000000000000 R14: 00007f19ee2b5f80 R15: 00007fff574a6d18 [ 60.489068][ T4923] [ 60.501875][ T4773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.513635][ T4773] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.524284][ T4804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.538457][ T3848] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.546051][ T3848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.557527][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.564791][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.574862][ T4804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.630244][ T11] bridge_slave_1: left allmulticast mode [ 60.636292][ T11] bridge_slave_1: left promiscuous mode [ 60.642202][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.650943][ T29] audit: type=1400 audit(1724042182.514:714): avc: denied { unlink } for pid=2942 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.651017][ T11] bridge_slave_0: left allmulticast mode [ 60.679747][ T11] bridge_slave_0: left promiscuous mode [ 60.685452][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.847980][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.858048][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.868362][ T11] bond0 (unregistering): Released all slaves [ 60.889894][ T4804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.898861][ T4804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.908511][ T4804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.917868][ T4804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.929105][ T4773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.974444][ T4804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.984780][ T11] hsr_slave_0: left promiscuous mode [ 60.990791][ T11] hsr_slave_1: left promiscuous mode [ 60.997338][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.005077][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.013306][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.020799][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.031796][ T11] veth1_macvtap: left promiscuous mode [ 61.037496][ T11] veth0_macvtap: left promiscuous mode [ 61.043028][ T11] veth1_vlan: left promiscuous mode [ 61.048353][ T11] veth0_vlan: left promiscuous mode [ 61.107151][ T11] pimreg (unregistering): left allmulticast mode [ 61.152172][ T11] team0 (unregistering): Port device team_slave_1 removed [ 61.162300][ T11] team0 (unregistering): Port device team_slave_0 removed [ 61.210847][ T4804] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.243798][ T4937] xt_hashlimit: overflow, try lower: 0/0 [ 61.285157][ T4773] veth0_vlan: entered promiscuous mode [ 61.299084][ T4773] veth1_vlan: entered promiscuous mode [ 61.308963][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.316167][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.326985][ T3347] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.334209][ T3347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.383049][ T4773] veth0_macvtap: entered promiscuous mode [ 61.433483][ T4773] veth1_macvtap: entered promiscuous mode [ 61.495615][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.506619][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.517108][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.528286][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.538150][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.548866][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.566501][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.579433][ T4952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 61.594374][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.605402][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.615304][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.625975][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.636244][ T4773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.646794][ T4773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.659580][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.677263][ T4773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.686284][ T4773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.694997][ T4773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.703941][ T4773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.720742][ T4804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.785688][ C1] hrtimer: interrupt took 17783 ns [ 61.915715][ T4804] veth0_vlan: entered promiscuous mode [ 61.978953][ T4804] veth1_vlan: entered promiscuous mode [ 61.985261][ T4979] loop0: detected capacity change from 0 to 512 [ 61.996265][ T4980] loop1: detected capacity change from 0 to 512 [ 62.003258][ T4980] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.010281][ T4980] EXT4-fs: quotafile must be on filesystem root [ 62.066442][ T4979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.084712][ T4986] loop1: detected capacity change from 0 to 1024 [ 62.097069][ T4986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.112796][ T4804] veth0_macvtap: entered promiscuous mode [ 62.120990][ T4804] veth1_macvtap: entered promiscuous mode [ 62.137802][ T4979] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.171202][ T4804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.182389][ T4804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.192717][ T4804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.203241][ T4804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.213086][ T4804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.223565][ T4804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.233794][ T4804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.244408][ T4804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.266720][ T4804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.278956][ T4804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.289706][ T4804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.299822][ T4804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.310625][ T4804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.320696][ T4804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.331209][ T4804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.341226][ T4804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.352143][ T4804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.365150][ T4804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.378444][ T4804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.387431][ T4804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.396538][ T4804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.405401][ T4804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.455620][ T4993] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.274: corrupted inode contents [ 62.494181][ T4993] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #19: comm syz.0.274: mark_inode_dirty error [ 62.521484][ T4993] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.274: corrupted inode contents [ 62.527454][ T4999] loop4: detected capacity change from 0 to 512 [ 62.533561][ T4993] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3007: inode #19: comm syz.0.274: mark_inode_dirty error [ 62.533686][ T4993] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3010: inode #19: comm syz.0.274: mark inode dirty (error -117) [ 62.578794][ T4993] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 62.588616][ T4773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.622783][ T5002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 62.622875][ T4999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.632137][ T5002] netlink: 272 bytes leftover after parsing attributes in process `syz.1.278'. [ 62.645038][ T4999] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.669164][ T5002] netlink: 64 bytes leftover after parsing attributes in process `syz.1.278'. [ 62.822702][ T4212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.836200][ T5011] loop3: detected capacity change from 0 to 512 [ 62.868489][ T5011] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.281: corrupted in-inode xattr: invalid ea_ino [ 62.885949][ T5011] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.281: couldn't read orphan inode 15 (err -117) [ 62.926898][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 62.960684][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 62.974960][ T5011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.974992][ T5022] loop0: detected capacity change from 0 to 512 [ 62.976029][ T4174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.010901][ T5022] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 63.024537][ T5022] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 63.035487][ T5020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.085228][ T5027] loop4: detected capacity change from 0 to 1024 [ 63.095002][ T5027] bridge0: port 3(netdevsim1) entered blocking state [ 63.101977][ T5027] bridge0: port 3(netdevsim1) entered disabled state [ 63.112674][ T5027] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 63.120985][ T5027] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 63.121215][ T4804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.128903][ T5027] bridge0: port 3(netdevsim1) entered blocking state [ 63.144650][ T5027] bridge0: port 3(netdevsim1) entered forwarding state [ 63.176854][ T5031] loop3: detected capacity change from 0 to 128 [ 63.176992][ T5030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.289'. [ 63.214364][ T5034] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 63.227676][ T5034] loop4: detected capacity change from 0 to 128 [ 63.254378][ T5038] FAULT_INJECTION: forcing a failure. [ 63.254378][ T5038] name failslab, interval 1, probability 0, space 0, times 0 [ 63.267117][ T5038] CPU: 0 UID: 0 PID: 5038 Comm: syz.4.292 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 63.277806][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.288309][ T5038] Call Trace: [ 63.291576][ T5038] [ 63.294608][ T5038] dump_stack_lvl+0xf2/0x150 [ 63.299284][ T5038] dump_stack+0x15/0x20 [ 63.303497][ T5038] should_fail_ex+0x229/0x230 [ 63.308578][ T5038] ? security_file_alloc+0x32/0xe0 [ 63.313684][ T5038] should_failslab+0x8f/0xb0 [ 63.318315][ T5038] kmem_cache_alloc_noprof+0x4c/0x290 [ 63.323708][ T5038] security_file_alloc+0x32/0xe0 [ 63.328685][ T5038] alloc_empty_file+0x121/0x310 [ 63.333526][ T5038] alloc_file_pseudo+0xc3/0x140 [ 63.338565][ T5038] sock_alloc_file+0x9b/0x1d0 [ 63.343247][ T5038] __sys_socketpair+0x23e/0x430 [ 63.348257][ T5038] __x64_sys_socketpair+0x52/0x60 [ 63.353697][ T5038] x64_sys_call+0x1c1e/0x2d60 [ 63.358437][ T5038] do_syscall_64+0xc9/0x1c0 [ 63.363016][ T5038] ? clear_bhb_loop+0x55/0xb0 [ 63.367680][ T5038] ? clear_bhb_loop+0x55/0xb0 [ 63.372349][ T5038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.378489][ T5038] RIP: 0033:0x7f300bbcbdca [ 63.382923][ T5038] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.403038][ T5038] RSP: 002b:00007f300a840f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 63.411850][ T5038] RAX: ffffffffffffffda RBX: 00007f300bd65f00 RCX: 00007f300bbcbdca [ 63.419890][ T5038] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 63.427971][ T5038] RBP: 00007f300a841090 R08: 0000000000000000 R09: 0000000000000000 [ 63.436009][ T5038] R10: 00007f300a840f98 R11: 0000000000000246 R12: 0000000000000003 [ 63.443967][ T5038] R13: 0000000000000000 R14: 00007f300bd65f80 R15: 00007ffcecf16268 [ 63.451954][ T5038] [ 63.511280][ T5041] loop0: detected capacity change from 0 to 256 [ 63.654722][ T5050] loop3: detected capacity change from 0 to 8192 [ 63.998046][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 64.012965][ T5060] loop4: detected capacity change from 0 to 1024 [ 64.020024][ T5060] EXT4-fs: Ignoring removed i_version option [ 64.031861][ T5060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.040665][ T5060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.050823][ T5060] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 64.062288][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 64.062308][ T29] audit: type=1400 audit(1724042185.914:830): avc: denied { read } for pid=5059 comm="syz.4.299" path="socket:[11414]" dev="sockfs" ino=11414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.135968][ T5064] loop0: detected capacity change from 0 to 512 [ 64.142532][ T5064] ext4: Unknown parameter 'obj_type' [ 64.209106][ T5067] xt_TCPMSS: Only works on TCP SYN packets [ 64.270081][ T5069] loop0: detected capacity change from 0 to 164 [ 64.277039][ T5069] isofs_fill_super: root inode is not a directory. Corrupted media? [ 64.301033][ T5075] netlink: 'syz.0.304': attribute type 2 has an invalid length. [ 64.659858][ T5079] loop3: detected capacity change from 0 to 512 [ 64.667342][ T5079] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.678537][ T5079] EXT4-fs (loop3): 1 truncate cleaned up [ 64.684520][ T5079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.855948][ T5087] loop4: detected capacity change from 0 to 128 [ 64.864638][ T5087] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.949087][ T5091] FAULT_INJECTION: forcing a failure. [ 64.949087][ T5091] name failslab, interval 1, probability 0, space 0, times 0 [ 64.962109][ T5091] CPU: 1 UID: 0 PID: 5091 Comm: syz.4.309 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 64.972887][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.982967][ T5091] Call Trace: [ 64.986558][ T5091] [ 64.989496][ T5091] dump_stack_lvl+0xf2/0x150 [ 64.994152][ T5091] dump_stack+0x15/0x20 [ 64.998500][ T5091] should_fail_ex+0x229/0x230 [ 65.003215][ T5091] ? __d_alloc+0x3d/0x340 [ 65.008074][ T5091] should_failslab+0x8f/0xb0 [ 65.012694][ T5091] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 65.018654][ T5091] __d_alloc+0x3d/0x340 [ 65.022835][ T5091] d_alloc_pseudo+0x1e/0x80 [ 65.025382][ T5089] loop3: detected capacity change from 0 to 512 [ 65.027443][ T5091] alloc_file_pseudo+0x70/0x140 [ 65.027473][ T5091] sock_alloc_file+0x9b/0x1d0 [ 65.027560][ T5091] __sys_socketpair+0x2b0/0x430 [ 65.047828][ T5089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.048774][ T5091] __x64_sys_socketpair+0x52/0x60 [ 65.060471][ T5091] x64_sys_call+0x1c1e/0x2d60 [ 65.065183][ T5091] do_syscall_64+0xc9/0x1c0 [ 65.069700][ T5091] ? clear_bhb_loop+0x55/0xb0 [ 65.074645][ T5091] ? clear_bhb_loop+0x55/0xb0 [ 65.079383][ T5091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.085468][ T5091] RIP: 0033:0x7f300bbcbdca [ 65.090178][ T5091] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.110238][ T5091] RSP: 002b:00007f300a840f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 65.118651][ T5091] RAX: ffffffffffffffda RBX: 00007f300bd65f00 RCX: 00007f300bbcbdca [ 65.126796][ T5091] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 65.134918][ T5091] RBP: 00007f300a841090 R08: 0000000000000000 R09: 0000000000000000 [ 65.143041][ T5091] R10: 00007f300a840f98 R11: 0000000000000246 R12: 0000000000000003 [ 65.151175][ T5091] R13: 0000000000000000 R14: 00007f300bd65f80 R15: 00007ffcecf16268 [ 65.159199][ T5091] [ 65.166846][ T5089] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.176124][ T5089] EXT4-fs (loop3): blocks per group (7872) and clusters per group (32768) inconsistent [ 65.215863][ T5093] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 65.222479][ T5093] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.230038][ T5093] vhci_hcd vhci_hcd.0: Device attached [ 65.362137][ T5094] vhci_hcd: connection closed [ 65.362318][ T3347] vhci_hcd: stop threads [ 65.371464][ T3347] vhci_hcd: release socket [ 65.376023][ T3347] vhci_hcd: disconnect device [ 65.435757][ T9] vhci_hcd: vhci_device speed not set [ 65.640102][ T5101] loop3: detected capacity change from 0 to 1024 [ 65.690475][ T5105] loop4: detected capacity change from 0 to 512 [ 65.702516][ T5108] xt_TCPMSS: Only works on TCP SYN packets [ 65.704580][ T5105] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.313: corrupted in-inode xattr: bad e_name length [ 65.726310][ T5105] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.313: couldn't read orphan inode 15 (err -117) [ 65.742876][ T29] audit: type=1326 audit(1724042187.594:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a24d9e79 code=0x7ffc0000 [ 65.746767][ T5105] tmpfs: Unknown parameter 'nowazytime' [ 65.766486][ T29] audit: type=1326 audit(1724042187.594:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a24d9e79 code=0x7ffc0000 [ 65.770215][ T5111] loop3: detected capacity change from 0 to 512 [ 65.777109][ T29] audit: type=1326 audit(1724042187.634:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a24d9e79 code=0x7ffc0000 [ 65.796743][ T5111] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 65.801929][ T29] audit: type=1326 audit(1724042187.634:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a24d9e79 code=0x7ffc0000 [ 65.825341][ T5111] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 65.839215][ T29] audit: type=1326 audit(1724042187.634:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe5a24d9e79 code=0x7ffc0000 [ 65.895804][ T29] audit: type=1326 audit(1724042187.634:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a24d9e79 code=0x7ffc0000 [ 65.921666][ T29] audit: type=1326 audit(1724042187.634:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe5a24d9e79 code=0x7ffc0000 [ 65.945434][ T29] audit: type=1326 audit(1724042187.634:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5a24d9eb3 code=0x7ffc0000 [ 65.969374][ T29] audit: type=1326 audit(1724042187.634:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe5a24d895f code=0x7ffc0000 [ 66.018217][ T5116] loop0: detected capacity change from 0 to 2048 [ 66.025570][ T5116] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 66.302745][ T5122] loop4: detected capacity change from 0 to 512 [ 66.325410][ T5122] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.372168][ T5122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.319: bg 0: block 64: padding at end of block bitmap is not set [ 66.392313][ T5122] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.319: Failed to acquire dquot type 0 [ 66.406779][ T5122] EXT4-fs (loop4): 1 truncate cleaned up [ 66.429658][ T5122] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.319: Failed to acquire dquot type 0 [ 66.522281][ T5127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.319'. [ 66.795862][ T5020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.948152][ T5133] 9pnet_fd: Insufficient options for proto=fd [ 66.958215][ T5133] loop7: detected capacity change from 0 to 16384 [ 67.108932][ T5138] FAULT_INJECTION: forcing a failure. [ 67.108932][ T5138] name failslab, interval 1, probability 0, space 0, times 0 [ 67.121640][ T5138] CPU: 0 UID: 0 PID: 5138 Comm: syz.3.323 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 67.133415][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 67.143616][ T5138] Call Trace: [ 67.146958][ T5138] [ 67.149906][ T5138] dump_stack_lvl+0xf2/0x150 [ 67.154714][ T5138] dump_stack+0x15/0x20 [ 67.158887][ T5138] should_fail_ex+0x229/0x230 [ 67.163785][ T5138] ? alloc_empty_file+0xd0/0x310 [ 67.165101][ T4174] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz-executor: Failed to acquire dquot type 0 [ 67.168757][ T5138] should_failslab+0x8f/0xb0 [ 67.168787][ T5138] kmem_cache_alloc_noprof+0x4c/0x290 [ 67.190575][ T5138] alloc_empty_file+0xd0/0x310 [ 67.195361][ T5138] alloc_file_pseudo+0xc3/0x140 [ 67.200290][ T5138] sock_alloc_file+0x9b/0x1d0 [ 67.204991][ T5138] __sys_socketpair+0x2b0/0x430 [ 67.210038][ T5138] __x64_sys_socketpair+0x52/0x60 [ 67.215087][ T5138] x64_sys_call+0x1c1e/0x2d60 [ 67.219778][ T5138] do_syscall_64+0xc9/0x1c0 [ 67.224388][ T5138] ? clear_bhb_loop+0x55/0xb0 [ 67.229192][ T5138] ? clear_bhb_loop+0x55/0xb0 [ 67.234061][ T5138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.239981][ T5138] RIP: 0033:0x7fe5a24dbdca [ 67.244578][ T5138] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.264369][ T5138] RSP: 002b:00007fe5a1156f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 67.273270][ T5138] RAX: ffffffffffffffda RBX: 00007fe5a2675f00 RCX: 00007fe5a24dbdca [ 67.281496][ T5138] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 67.290171][ T5138] RBP: 00007fe5a1157090 R08: 0000000000000000 R09: 0000000000000000 [ 67.298232][ T5138] R10: 00007fe5a1156f98 R11: 0000000000000246 R12: 0000000000000003 [ 67.306315][ T5138] R13: 0000000000000000 R14: 00007fe5a2675f80 R15: 00007ffc1358ce58 [ 67.314422][ T5138] [ 67.379041][ T5020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.456298][ T5020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.532902][ T5020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.548923][ T5020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.577669][ T5020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.611176][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.639683][ T5020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.694598][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.769397][ T5143] loop1: detected capacity change from 0 to 512 [ 67.782103][ T28] bridge0: port 3(netdevsim1) entered disabled state [ 67.806864][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.814374][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.821885][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.829390][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.836972][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.844640][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.848353][ T5147] 9pnet_fd: Insufficient options for proto=fd [ 67.852483][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.866135][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.873524][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.881091][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.888698][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.896282][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.903664][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.911637][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.919785][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.927598][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.935319][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.942790][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.950282][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.953295][ T5151] loop0: detected capacity change from 0 to 2048 [ 67.957713][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.957738][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.979335][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.986841][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.994334][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.001825][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.009404][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.012441][ T5151] EXT4-fs: Ignoring removed bh option [ 68.016909][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.016980][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.016999][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.022471][ T5151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.030085][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.030137][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.042484][ T5150] loop3: detected capacity change from 0 to 512 [ 68.044844][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.060573][ T5150] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 68.066266][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.072551][ T5150] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 68.072885][ T5151] EXT4-fs: Ignoring removed nobh option [ 68.080232][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.106226][ T4174] EXT4-fs unmount: 8 callbacks suppressed [ 68.106239][ T4174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.110549][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.118998][ T5151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.123779][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.166180][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.173541][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.180971][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.188453][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.196041][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.203493][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.210907][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.219619][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 68.228316][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 68.237182][ T28] bridge0: port 3(netdevsim1) entered disabled state [ 68.241106][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.265957][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.361054][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.410298][ T5187] 9pnet_fd: Insufficient options for proto=fd [ 68.424129][ T5187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'. [ 68.472499][ T5198] FAULT_INJECTION: forcing a failure. [ 68.472499][ T5198] name failslab, interval 1, probability 0, space 0, times 0 [ 68.485309][ T5198] CPU: 1 UID: 0 PID: 5198 Comm: syz.3.337 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 68.496023][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 68.506342][ T5198] Call Trace: [ 68.509620][ T5198] [ 68.512552][ T5198] dump_stack_lvl+0xf2/0x150 [ 68.517158][ T5198] dump_stack+0x15/0x20 [ 68.521406][ T5198] should_fail_ex+0x229/0x230 [ 68.526161][ T5198] ? security_file_alloc+0x32/0xe0 [ 68.526607][ T5202] 9pnet_fd: Insufficient options for proto=fd [ 68.531420][ T5198] should_failslab+0x8f/0xb0 [ 68.531459][ T5198] kmem_cache_alloc_noprof+0x4c/0x290 [ 68.547882][ T5198] security_file_alloc+0x32/0xe0 [ 68.552842][ T5198] alloc_empty_file+0x121/0x310 [ 68.557779][ T5198] alloc_file_pseudo+0xc3/0x140 [ 68.563194][ T5198] sock_alloc_file+0x9b/0x1d0 [ 68.567986][ T5198] __sys_socketpair+0x2b0/0x430 [ 68.573021][ T5198] __x64_sys_socketpair+0x52/0x60 [ 68.578075][ T5198] x64_sys_call+0x1c1e/0x2d60 [ 68.582946][ T5198] do_syscall_64+0xc9/0x1c0 [ 68.587474][ T5198] ? clear_bhb_loop+0x55/0xb0 [ 68.592254][ T5198] ? clear_bhb_loop+0x55/0xb0 [ 68.597104][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.603245][ T5198] RIP: 0033:0x7fe5a24dbdca [ 68.607990][ T5198] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.627909][ T5198] RSP: 002b:00007fe5a1156f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 68.637377][ T5198] RAX: ffffffffffffffda RBX: 00007fe5a2675f00 RCX: 00007fe5a24dbdca [ 68.645958][ T5198] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 68.654075][ T5198] RBP: 00007fe5a1157090 R08: 0000000000000000 R09: 0000000000000000 [ 68.662320][ T5198] R10: 00007fe5a1156f98 R11: 0000000000000246 R12: 0000000000000003 [ 68.670475][ T5198] R13: 0000000000000000 R14: 00007fe5a2675f80 R15: 00007ffc1358ce58 [ 68.678483][ T5198] [ 68.697670][ T28] bridge_slave_1: left allmulticast mode [ 68.703368][ T28] bridge_slave_1: left promiscuous mode [ 68.709377][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.724212][ T5229] loop1: detected capacity change from 0 to 512 [ 68.731735][ T5229] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 68.745349][ T5229] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 68.754928][ T28] bridge_slave_0: left allmulticast mode [ 68.760925][ T28] bridge_slave_0: left promiscuous mode [ 68.766715][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.928444][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.938984][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.949195][ T28] bond0 (unregistering): Released all slaves [ 68.959176][ T5144] chnl_net:caif_netlink_parms(): no params data found [ 69.023288][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.030625][ T5144] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.038095][ T5144] bridge_slave_0: entered allmulticast mode [ 69.044623][ T5144] bridge_slave_0: entered promiscuous mode [ 69.052978][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.060379][ T5144] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.067929][ T5144] bridge_slave_1: entered allmulticast mode [ 69.074688][ T5144] bridge_slave_1: entered promiscuous mode [ 69.081361][ T4212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.102102][ T5144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.113204][ T28] hsr_slave_0: left promiscuous mode [ 69.122914][ T28] hsr_slave_1: left promiscuous mode [ 69.131940][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.139424][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.149325][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.156877][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.171140][ T28] veth1_macvtap: left promiscuous mode [ 69.176796][ T28] veth0_macvtap: left promiscuous mode [ 69.182477][ T28] veth1_vlan: left promiscuous mode [ 69.187899][ T28] veth0_vlan: left promiscuous mode [ 69.203691][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 69.203750][ T29] audit: type=1400 audit(1724042191.054:992): avc: denied { ioctl } for pid=5258 comm="syz.0.345" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.235821][ T29] audit: type=1400 audit(1724042191.074:993): avc: denied { write } for pid=5260 comm="syz.3.346" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 69.302202][ T28] team0 (unregistering): Port device team_slave_1 removed [ 69.311030][ T5261] loop3: detected capacity change from 0 to 2048 [ 69.317784][ T28] team0 (unregistering): Port device team_slave_0 removed [ 69.319809][ T5261] EXT4-fs: Ignoring removed orlov option [ 69.348669][ T5261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.354225][ T29] audit: type=1400 audit(1724042191.204:994): avc: denied { mounton } for pid=5264 comm="syz.0.347" path="/57/file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.363152][ T5261] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.402455][ T5261] EXT4-fs (loop3): Remounting filesystem read-only [ 69.414910][ T29] audit: type=1400 audit(1724042191.264:995): avc: denied { listen } for pid=5260 comm="syz.3.346" lport=45431 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.429922][ T5144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.468086][ T4804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.494486][ T5278] xt_TCPMSS: Only works on TCP SYN packets [ 69.502100][ T5144] team0: Port device team_slave_0 added [ 69.510289][ T5144] team0: Port device team_slave_1 added [ 69.524077][ T5184] chnl_net:caif_netlink_parms(): no params data found [ 69.572149][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.579145][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.606307][ T5144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.626521][ T5290] loop1: detected capacity change from 0 to 512 [ 69.627117][ T29] audit: type=1326 audit(1724042191.484:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faddf9e79 code=0x7ffc0000 [ 69.627144][ T29] audit: type=1326 audit(1724042191.484:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faddf9e79 code=0x7ffc0000 [ 69.627235][ T29] audit: type=1326 audit(1724042191.484:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7faddf9e79 code=0x7ffc0000 [ 69.627318][ T29] audit: type=1326 audit(1724042191.484:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faddf9e79 code=0x7ffc0000 [ 69.627338][ T29] audit: type=1326 audit(1724042191.484:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7faddf9e79 code=0x7ffc0000 [ 69.627361][ T29] audit: type=1326 audit(1724042191.484:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faddf9e79 code=0x7ffc0000 [ 69.627403][ T5290] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 69.627422][ T5290] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 69.676192][ T5144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.676204][ T5144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.676225][ T5144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.696428][ T5303] loop1: detected capacity change from 0 to 512 [ 69.768662][ T5285] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 69.792406][ T5303] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.904654][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.911909][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.920375][ T5303] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.351: iget: bogus i_mode (2) [ 69.922087][ T5184] bridge_slave_0: entered allmulticast mode [ 69.931877][ T5303] EXT4-fs (loop1): get root inode failed [ 69.940107][ T5184] bridge_slave_0: entered promiscuous mode [ 69.943722][ T5303] EXT4-fs (loop1): mount failed [ 69.964789][ T5144] hsr_slave_0: entered promiscuous mode [ 69.974198][ T5144] hsr_slave_1: entered promiscuous mode [ 69.988773][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.996633][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.998741][ T5309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5309 comm=syz.1.353 [ 70.011339][ T5184] bridge_slave_1: entered allmulticast mode [ 70.023086][ T5184] bridge_slave_1: entered promiscuous mode [ 70.036992][ T5312] FAULT_INJECTION: forcing a failure. [ 70.036992][ T5312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.050336][ T5312] CPU: 1 UID: 0 PID: 5312 Comm: syz.3.354 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 70.060931][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 70.070981][ T5312] Call Trace: [ 70.074243][ T5312] [ 70.077189][ T5312] dump_stack_lvl+0xf2/0x150 [ 70.081777][ T5312] dump_stack+0x15/0x20 [ 70.086003][ T5312] should_fail_ex+0x229/0x230 [ 70.090666][ T5312] should_fail_alloc_page+0xfd/0x110 [ 70.096000][ T5312] __alloc_pages_noprof+0x109/0x360 [ 70.101190][ T5312] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 70.106728][ T5312] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 70.112216][ T5312] do_wp_page+0x62b/0x22c0 [ 70.116823][ T5312] ? __rcu_read_lock+0x36/0x50 [ 70.121566][ T5312] handle_mm_fault+0xbf0/0x2940 [ 70.126452][ T5312] ? mas_walk+0x204/0x320 [ 70.130896][ T5312] exc_page_fault+0x3b9/0x650 [ 70.135698][ T5312] asm_exc_page_fault+0x26/0x30 [ 70.140796][ T5312] RIP: 0033:0x7fe5a239d970 [ 70.145340][ T5312] Code: fc 05 0f 94 c3 31 d2 e8 6e e4 13 00 85 c0 75 7a 8b 4c 24 18 8b 6c 24 1c 0f b6 fb 0f b6 c3 48 8d 15 3d 5c e0 00 be 01 00 00 00 0f c1 34 82 83 fe 08 7f 76 8b 05 08 7d e0 00 48 8d 5c 24 20 45 [ 70.164951][ T5312] RSP: 002b:00007fe5a1156f80 EFLAGS: 00010246 [ 70.171000][ T5312] RAX: 0000000000000000 RBX: 00007fe5a2675f00 RCX: 0000000000000005 [ 70.178954][ T5312] RDX: 00007fe5a31a35a8 RSI: 0000000000000001 RDI: 0000000000000000 [ 70.186978][ T5312] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 70.194960][ T5312] R10: 00007fe5a1156f98 R11: 0000000000000246 R12: 0000000000000003 [ 70.203097][ T5312] R13: 0000000000000000 R14: 00007fe5a2675f80 R15: 00007ffc1358ce58 [ 70.211061][ T5312] [ 70.214607][ T5312] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 70.223040][ T5312] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 70.229934][ T5312] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.237593][ T5312] vhci_hcd vhci_hcd.0: Device attached [ 70.246140][ T5314] netlink: 44 bytes leftover after parsing attributes in process `syz.1.353'. [ 70.255390][ T5316] vhci_hcd: connection closed [ 70.255664][ T50] vhci_hcd: stop threads [ 70.264712][ T50] vhci_hcd: release socket [ 70.269304][ T50] vhci_hcd: disconnect device [ 70.281123][ T5184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.297087][ T5184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.326966][ T5184] team0: Port device team_slave_0 added [ 70.333593][ T5184] team0: Port device team_slave_1 added [ 70.384103][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.391106][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.395371][ T5334] loop1: detected capacity change from 0 to 512 [ 70.417098][ T5184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.430780][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.440946][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.457382][ T5334] EXT4-fs: Ignoring removed nobh option [ 70.467266][ T5184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.497003][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.509011][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.521870][ T5334] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.549237][ T4773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.570778][ T5343] xt_TCPMSS: Only works on TCP SYN packets [ 70.581563][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.602898][ T5184] hsr_slave_0: entered promiscuous mode [ 70.614727][ T5184] hsr_slave_1: entered promiscuous mode [ 70.623498][ T5184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.631190][ T5184] Cannot create hsr debugfs directory [ 70.651823][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.700032][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.790564][ T28] bridge_slave_1: left allmulticast mode [ 70.796287][ T28] bridge_slave_1: left promiscuous mode [ 70.801976][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.823872][ T28] bridge_slave_0: left allmulticast mode [ 70.829617][ T28] bridge_slave_0: left promiscuous mode [ 70.835353][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.978440][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.989030][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.998952][ T28] bond0 (unregistering): Released all slaves [ 71.228637][ T28] hsr_slave_0: left promiscuous mode [ 71.235961][ T28] hsr_slave_1: left promiscuous mode [ 71.241946][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.249421][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.258890][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.266489][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.278581][ T28] veth1_macvtap: left promiscuous mode [ 71.284115][ T28] veth0_macvtap: left promiscuous mode [ 71.289822][ T28] veth1_vlan: left promiscuous mode [ 71.295202][ T28] veth0_vlan: left promiscuous mode [ 71.372677][ T28] team0 (unregistering): Port device team_slave_1 removed [ 71.384224][ T28] team0 (unregistering): Port device team_slave_0 removed [ 71.417415][ T5380] vcan0: Master is either lo or non-ether device [ 71.618722][ T5416] xt_TCPMSS: Only works on TCP SYN packets [ 71.665199][ T5144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.676889][ T5144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.693989][ T3635] ================================================================== [ 71.702177][ T3635] BUG: KCSAN: data-race in set_nlink / set_nlink [ 71.708566][ T3635] [ 71.710892][ T3635] read to 0xffff88810570c518 of 4 bytes by task 2960 on cpu 1: [ 71.718422][ T3635] set_nlink+0x2b/0xb0 [ 71.722506][ T3635] kernfs_iop_permission+0x1d5/0x220 [ 71.727804][ T3635] inode_permission+0x18c/0x300 [ 71.732639][ T3635] link_path_walk+0x14b/0x820 [ 71.737471][ T3635] path_openat+0x1aa/0x1f10 [ 71.741958][ T3635] do_filp_open+0xf7/0x200 [ 71.746362][ T3635] do_sys_openat2+0xab/0x120 [ 71.750947][ T3635] __x64_sys_openat+0xf3/0x120 [ 71.755697][ T3635] x64_sys_call+0x1025/0x2d60 [ 71.760367][ T3635] do_syscall_64+0xc9/0x1c0 [ 71.764939][ T3635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.770812][ T3635] [ 71.773119][ T3635] write to 0xffff88810570c518 of 4 bytes by task 3635 on cpu 0: [ 71.780726][ T3635] set_nlink+0x98/0xb0 [ 71.784784][ T3635] kernfs_iop_permission+0x1d5/0x220 [ 71.790049][ T3635] inode_permission+0x18c/0x300 [ 71.794968][ T3635] link_path_walk+0x14b/0x820 [ 71.799723][ T3635] path_openat+0x1aa/0x1f10 [ 71.804244][ T3635] do_filp_open+0xf7/0x200 [ 71.808659][ T3635] do_sys_openat2+0xab/0x120 [ 71.813387][ T3635] __x64_sys_openat+0xf3/0x120 [ 71.818170][ T3635] x64_sys_call+0x1025/0x2d60 [ 71.822831][ T3635] do_syscall_64+0xc9/0x1c0 [ 71.827325][ T3635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.833298][ T3635] [ 71.835618][ T3635] value changed: 0x00000163 -> 0x00000162 [ 71.841448][ T3635] [ 71.843771][ T3635] Reported by Kernel Concurrency Sanitizer on: [ 71.850082][ T3635] CPU: 0 UID: 0 PID: 3635 Comm: udevd Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 71.860411][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 71.870540][ T3635] ================================================================== [ 71.944247][ T5144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.200249][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.289055][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.388855][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.458724][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.565398][ T11] bridge_slave_1: left allmulticast mode [ 72.571175][ T11] bridge_slave_1: left promiscuous mode [ 72.577110][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.586281][ T11] bridge_slave_0: left allmulticast mode [ 72.591908][ T11] bridge_slave_0: left promiscuous mode [ 72.597625][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.708331][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.719056][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.729973][ T11] bond0 (unregistering): Released all slaves [ 72.857864][ T11] hsr_slave_0: left promiscuous mode [ 72.863647][ T11] hsr_slave_1: left promiscuous mode [ 72.871085][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.878843][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.887913][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.895831][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.907136][ T11] veth1_macvtap: left promiscuous mode [ 72.912779][ T11] veth0_macvtap: left promiscuous mode [ 72.918414][ T11] veth1_vlan: left promiscuous mode [ 72.924162][ T11] veth0_vlan: left promiscuous mode [ 73.007637][ T11] team0 (unregistering): Port device team_slave_1 removed [ 73.018601][ T11] team0 (unregistering): Port device team_slave_0 removed [ 73.540459][ T11] bridge_slave_1: left allmulticast mode [ 73.546155][ T11] bridge_slave_1: left promiscuous mode [ 73.551860][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.562649][ T11] bridge_slave_0: left allmulticast mode [ 73.568441][ T11] bridge_slave_0: left promiscuous mode [ 73.574172][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.583592][ T11] bridge_slave_1: left allmulticast mode [ 73.589308][ T11] bridge_slave_1: left promiscuous mode [ 73.595018][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.603515][ T11] bridge_slave_0: left allmulticast mode [ 73.609505][ T11] bridge_slave_0: left promiscuous mode [ 73.615549][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.757534][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.767511][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.777276][ T11] bond0 (unregistering): Released all slaves [ 73.786658][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.796489][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.806586][ T11] bond0 (unregistering): Released all slaves [ 73.959092][ T11] hsr_slave_0: left promiscuous mode [ 73.964724][ T11] hsr_slave_1: left promiscuous mode [ 73.971201][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.979370][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.991722][ T11] hsr_slave_0: left promiscuous mode [ 73.998566][ T11] hsr_slave_1: left promiscuous mode [ 74.004317][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.012116][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.046944][ T11] team0 (unregistering): Port device team_slave_1 removed [ 74.056718][ T11] team0 (unregistering): Port device team_slave_0 removed [ 74.109865][ T11] team0 (unregistering): Port device team_slave_1 removed [ 74.120083][ T11] team0 (unregistering): Port device team_slave_0 removed [ 74.608009][ T11] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.667642][ T11] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.718078][ T11] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.767129][ T11] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.806709][ T11] bridge_slave_1: left allmulticast mode [ 74.812469][ T11] bridge_slave_1: left promiscuous mode [ 74.818112][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.826501][ T11] bridge_slave_0: left allmulticast mode [ 74.832339][ T11] bridge_slave_0: left promiscuous mode [ 74.838344][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.958097][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.968351][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.978572][ T11] bond0 (unregistering): Released all slaves [ 75.068037][ T11] hsr_slave_0: left promiscuous mode [ 75.074033][ T11] hsr_slave_1: left promiscuous mode [ 75.080396][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.087869][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.095437][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.103051][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.111747][ T11] veth1_macvtap: left promiscuous mode [ 75.117247][ T11] veth0_macvtap: left promiscuous mode [ 75.122750][ T11] veth1_vlan: left promiscuous mode [ 75.128124][ T11] veth0_vlan: left promiscuous mode [ 75.193472][ T11] team0 (unregistering): Port device team_slave_1 removed [ 75.202835][ T11] team0 (unregistering): Port device team_slave_0 removed