last executing test programs: 3.900729252s ago: executing program 2 (id=2396): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x3d, 0x56d, &(0x7f0000000280)="$eJzs3V9v09wdwPGf+4+QSejRngmhqvCcp+yiSCU4KQRFXHnOSXogsSPbQe0VqmiKKlKYKJPW3mzcsE3aXgS3exF7R2jvYEw+TkpDm5pRmjCe7yeC49jHPr/jRP7JjY8tAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHL/uumVHWibobqjx/HoUtj++Hax9YobcGinOaFfESf9JoSDXslnXfvNx8dX0v2VZyt4tSSEtCnL4q6s/PPhxbma4/hkBT8T+weHzrX6/92ragVyg65fGLVlQTR2YODRtr6mViUNVq1bdO+uNWDVMS8ebcaLbyo+0l4SRWvFvqXKttqZ0aTPsBs2619LDmfdvV1y3qh6WOtqL4jC487AU++um1TJB09ZJF6d17qdfxEcmUYn22krt7PZ7a3kdSCuVP6dSJa9Sxa1UyuVKpVy9V7t333XnTsxwPyEnakz/S4vp+opHb+B8Zgb5X1piJJCubIg69eVLXSIJpT1m+UCW+Odz2z2e/4dZ/trHxYti8/+N7N2Ncfl/TCyTe+3LgRzKc9mSvvSlJ6+mHtFkX03REoiRWEIx0hbPzlGDOUpqUpWquPJE1qUhsShpiJGWaIllU2JJRNtvlC+RaPEkkVAiUbIivtwSJWWpSU3WRImWkmxKKF0JpCl18exWdmTX7vc1Uc64GI8qlcd2ozj83vWkckZvyf84v6938AbO6cMw/wMAAAAAgO+WY//67ti/2V+3Uw3T0u60wwIAAAAAAF+R/eV/KS3sNXvXxck//+dqAQAAAAAA/r84doxdekZflJ+yqR1x7HApLgIAAAAAAOA7YX/Lv5EW9h4oP4lzdLuUvPP//0wkQAAAAAAAcG5/zb3Hfty55Pzr3xJF886bzsZvnT0vreftzdrVLs8OtzQzKJPGonNlsBFbVLNibs7XS04hq3R0E8z3g2InLw7ntAD+LCKzn3ZpXAA/zsnf5eeszs/bWbk9XJK1UmyYli75YetBWTzvykyiN5I/vNj9o9ju/y1oX3FkZ7ffKz192d+2sbxJt/JmbzAk4sTIiDNieW3vt2DHXJza43k7EGPQbjFr1z3e/5nR/f45bb6V5azO8uCOt8XR/hfSNsulkd6ny46iKMhuv1c+Z8/fys2szs2Vm1lxShSV0rjPYLAvKsej+KJ9cTIKZySKyyKSF8XauCicz4sCAKZlJycLOScT/xcca78su8v/mN3fykpWZ2XRHljnFk/JK27eEd09Z3b754lnII3LsWm7/zhqN8uq79IV3o1tN25VnHQXzr7e+71c3T84vL27t/Ws96z3olJZq7p3XfdeReZtNwbFsUg/XCL3AAAy+c/Yya3h3M3Oqn8QOf2s+tdHlxSU5Km8lL5sy6odbWCvODh1q8VjlyGs5py1Fm2azJ7wsnrGueWCHeUw3G7lzLqjMaxN4qMAAGBilnPy8Bn5vzDM/6s5592juXz07HhBxtUtT3xfAADwS6Gj904x+YsTRabzpFyrlb1kXaso9B+pyNSbWpkg0ZG/7gVNrTpRmIR+2EonHpu6jlXc7XTCKFGNMFKdMDYb9snvavDo91i3vSAxftxpaS/Wyg+DxPMTVTfxZdXp/q5l4nUd2ZXjjvZNw/heYsJAxWE38nVJqVjrYxVNXQeJaZh0MlCdyLS9aFM9DlvdtlaOOBKZThJmGxy2ZYJGGLXtZkvT3tkAAHwj9g8On2/1+71XFzgx7T4CAIBRZGkAAAAAAAAAAAAAAAAAAAAAAL59kxj/x8Q0JhYGn/AE2hreCnraXb7gCWeiHZwTkWl2OffQ8acLPTABuHD/DQAA//89Mkar") ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x4b52, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4000000, 0x0) 2.184320802s ago: executing program 3 (id=2417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6}]}, 0x2c}, 0x1, 0xfffffffc}, 0x0) 2.108161058s ago: executing program 3 (id=2418): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000180)={0xa0000001}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE(r8, &(0x7f0000000700)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000600)=""/238, 0xee, 0x0, 0x6, 0x5195bf3a, 0x22e5, 0x3}}, 0x120) lseek(r2, 0x30, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f00000005c0)=0x10) sendto$inet6(r7, &(0x7f00000003c0)="cffe8a5963ff04978f089647d966b542375814518d0a828d70135552f9bcd609745893c00cd00246cb8798f2f9e4f6ca137f1bc8d46d90f2ba5328dbdf870a5b0dc428f2470b280aa860ff4e05f6a9779861c123b34ca669e1a89cac658bd94d79880d73d8755961d88bc49c702fe72b9846cf0d7b23617ee92c0f274a62918648a024e538649cd554224b3988cc4f41c84d6e25cbb3bdb82e6d4a29f864b52abc37d1e084e048aa90f145a455b08f475214a055e19bd557a027003b152461091a", 0x83, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x1, @private2, 0xffff}, 0xfffffffffffffcab) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0xe) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x10, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x5) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@setlink={0xf4, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10a40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'dvmrp1\x00'}, {0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'macsec0\x00'}, {0x14, 0x35, 'dvmrp1\x00'}]}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40001}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.970265049s ago: executing program 0 (id=2422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM(0x41555856, 0x0, &(0x7f0000ffa000/0x3000)=nil) r4 = socket(0x25, 0x2, 0xfffffffa) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000800fb00010000000010000004800000000000000000"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000660800000000000018000000000000000000000000000000950000000000002b0bc9260000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000003a413d3df0a18670ce17c7e981093059bd30c55bacab56b1293dead56e83f035b36981751f6158651ec3b305f9c99c78686530492f5ab0c5e19340c7591c8ac079e5c69aebd3b025caf4a598437cad5547fa0c31f38b76cb8e56199224a601dbc434df5e92c47b966406cdf5c34f6ba0b6e4ce994a3cbe58"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x4) connect$bt_l2cap(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() 1.412024065s ago: executing program 1 (id=2427): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @multicast2}, {0x306, @multicast}, 0x40, {0x2, 0x4e23, @multicast2}, 'veth0_to_hsr\x00'}) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0x800, 0x1, 0x20, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002200)={r3, &(0x7f0000000200)="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", &(0x7f0000001200)=""/4096}, 0x20) r4 = add_key$fscrypt_v1(&(0x7f0000002240), &(0x7f0000002280)={'fscrypt:', @desc2}, &(0x7f00000022c0)={0x0, "18d5a05d0fde8224100ef12aa55bfdc5a6b10ca0d2c4819b87fdc98cf8bc0170675dcbe92737e31066f0838dae3bae3bf733f1871f62d499187f2ca4cbae90d6", 0x19}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, r4, r1) r5 = socket(0x1e, 0x4, 0x401) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002340)={{0x1, 0x1, 0x18, r3, {0xe97}}, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)=@ipv4_newnexthop={0x98, 0x68, 0x20, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x8}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8001}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xa}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xeb5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xe0c}]}, @NHA_GROUP={0x1c, 0x2, [{0x2, 0x4}, {0x1, 0x2}, {0x1, 0x5}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000002500), 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000025c0)={'sit0\x00', &(0x7f0000002540)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x2, 0xd28e, {{0x13, 0x4, 0x1, 0x9, 0x4c, 0x64, 0x0, 0x5, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@cipso={0x86, 0x36, 0x3, [{0x5, 0xc, "06a1e412ab8c41fc10e9"}, {0x2, 0xf, "91184fc990e34ab46485aff992"}, {0x5, 0xc, "a0960b6b2730d7e4cf26"}, {0x1, 0x2}, {0x0, 0x7, "eb5a9db595"}]}]}}}}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002600)={0x4, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002740)={@map=r6, 0x36, 0x1, 0x9, &(0x7f0000002640)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000026c0)=[0x0, 0x0, 0x0], &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002780)={@ifindex=r7, r6, 0x1, 0x2008, r6, @link_id=r8, r10}, 0x20) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000027c0), r11) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002840), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x3c, r12, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10000080) bind$xdp(0xffffffffffffffff, &(0x7f0000002940)={0x2c, 0x0, r7, 0x9}, 0x10) add_key(&(0x7f0000002980)='logon\x00', &(0x7f00000029c0)={'syz', 0x3}, &(0x7f0000002a00)="283f3f2419cc2b1c7e4924b129b46664fe03179624fadcc493fca0420cabbcfed7a51427acbe7382d386a263214c02946e04c79ecf0afc1d891d178265e0dc0da8218c60505b19f79fd3b6ba487fd9f70df128317855c50e3a9e43dbb4862b609ced352a87ed63ce2cb2788e511b8e49110a77e052ba88cefa7ba23ec5242ac39c3261cbd7ce6d482b714013b451a763b8b2", 0x92, r1) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b00), r6) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x54, r13, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7e8}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) r14 = request_key(&(0x7f0000002c40)='cifs.spnego\x00', &(0x7f0000002c80)={'syz', 0x0}, &(0x7f0000002cc0)='.){\x00', r1) keyctl$setperm(0x5, r14, 0x20000000) fsconfig$FSCONFIG_SET_PATH(r9, 0x3, &(0x7f0000002d00)='\x00', &(0x7f0000002d40)='./file0\x00', 0xffffffffffffff9c) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000002d80)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002dc0)={r2, 0x1000, 0x1f}, &(0x7f0000002e00)={'enc=', 'raw', ' hash=', {'streebog512\x00'}}, &(0x7f0000002e80)="aba258e6f619e75318a99ca209ba70380829cd732c4da120f6a45c1485164966479fc9d74667e151f93396e46ad6e540f5aafc8e6eae80d2fbcc57bc0a7e7acbced6d68fab0a23ee24bd6f057e84e872d3cdf61bcbf8bca48fa5d50f999c7edb5d4fba9aa4dd6c969b676c134b9a5ce7c43269ccb25c67a1dcdb38678fda613fdd5cddcca0dd81e1501028a1a8f095e75d297d19be8396442002e7fc01fe86e5a320f1cc48c608c2170e9bd4a87504c570581df82b999c52d5c2e0f76869d95e75b50a14170191413285c7f04fff1297b72b30f822349c413d19d5142688c8cf760c1789b3171f8323f5c246ec5000406412f1111a3062e13cdf9ec810e9cc920a12523ac9929088139cfa488875d2744771b193853af59bda4409398f3fe4f8266bf8f926a4dcf23c84ed6d1ffcf79b20d06dc452e9a6a77623f73316cba2bc0f62f32700afc13523a32f106f64a5e6743ddf091a1675e1950136ecd781e4f8789e841d81e6084a9e2dd3beec8bd1d103c0efa5126413aa753686c29322bbcdd5ff7705aa256dc7a110c141114a31ee2571d79849646f6b74b3dd505df1694035bb4e36b3e15de1d2fed7c41dea9e53bce2ecbba39aec61995d99b85c59b6853360d969885043a60cb62314b7b31425a819c5f6b9166985211c1717fc9cbd4f067d71e0e5bc8a74d85b2e43b771ba5ebc65aec4c9b8376c935437ab2ec980d1a4fda2e6aa052a1b2f0b09c97d55925681a0e02f1ae110afeb06e8e2c5fb3221e0ac9745edbacc517218c57dd9b2f77d8cdc996db5887ccf20146c76d090570c6fa8cd86a3cd45a8389612549f587a9b17aa58cffe3f4385375f397db16b565089cc24d622026a8d8a32a43fa647baec214511b16a2207ffeffa4159d435f11870cd97350cf3b60cdd0b1af0997863b078d18de5b32af76994f9cdccbf8b16ffc5fb0183a26d529428e4b85bd446633d0d2bd61a2e7086ec86a80d71609cc6fca3767d9098103087c90571e453b8417ab89c2c8cc6eff21f81451eb2ee18f3f28286e665d43af7ba9649bdbf0892831b7983972f647c00ab76c05730413e565e7fae32f68ad17a4e7b2f28df20338ef12ac2f6cd7f4657ffdd0f03713256b3070b8cb5f830ab234335b3f737e2d893e94d10a4b97a89fc096b482dec06a1826d8aa4654d85d40ca0c5e25a58c6d1d1bc1f60bae7b606af8288d75e233e6beb85ae69e522628ec7562131a8c2f283e09ec13b5fa910189d44d2946b337e8b40e0581a3e385546154383dd686156cbd012e9de91ea1fb29b2d30d53f30bc3b3572126cf98d94755f1b0cc40a3c3165728a3ca4041c9a184ee8965fd08fddb93edbdb9248570037ba25195a67fafc326dcabd921b8ff5abbaa6be4fc804070e86167a2fa2d6b134b7933043862ffd1f071863591e2fc944a56c6d749a1ab072d2b9d6c7b94a10c25dd3aa4d84751be09212416b69d590773313ac14e78439d6b8c151042b7e1ec3ed64b60124ba25477b5c21d1826f0e9931445f4ccaf4d39f279967bef18a7505fdd464998be45dc1003ed239682f05bc41a0f4fc8d882147a375b9c24664ece121de8d91a0db79d0c16d268f98ff03733eb35d09146dbe25a5c14a59814c63dc69105d971245e67509cdbdf288f4c1d2163557ef5339f1add840bbb66435b8645bd4c34329de8937d74c1c6b3cf7cdd7fa977a4641bca887b6fc57607a271e05a5d81a3a9e77d797a66020ed43b37a0736aa1f5bb33b30ee4bde9754c82883acb898b1d83f627c6abffee807145501a89d4b8dfe0f46ba141ecc1465ddc19c1cd8ce5025d06f6113b0e0e4ace1e8bb97aee47cb8bfe511e1dc3588befc02e6c1fefc191df93a3d7a50715e7e90f26e10e26fa9d4b412d21839fee2083657aa0653c88e1d0cd38657baa01cfeed550676b17394bccacc22b31f80ec052ff3017f0abccf1ddcadbbb038cd37af90c6ab44e1ffee9003d3322dd8cdf9dc87c9aa26b674665441f645510ef2d2ef13fcd65fe6d4588a8318e769e29371223f0dc9cd73db18b1471a0ac269f7a1759d1b3b67e6e4ab2266684a75bc86b6018d9e86952e1cc82208334089267737b6098b40bc4a786c856e1d021778ff7b5f2699fa8f4bba8788bc0907010134bc283fe7db1fd9e86df109fc9eb1dcd26be195a9ca60c4a90f983b40ab2c9f5b70198178d9eb046e2d21b5ae289fef8c732d04e21f75bcc83ee3b3bb187fab9ac7a44ef1aea067bc4be2210149c391caa00054412625a413b23004b132d9319d570138009b5072c13d2938bc4559109068d649fe1763495cc11932e5adb5c560eb56dbc06a3493b6d1b7a21584747189d1632dae8999a89800124a281bae89f99e7c4b9662dc6b16c0314814966dea76b1c3798901d4344b6ee46ee0d9e8a8b5cdda5245c90a6e68d7a63a6961ad3823bae8da8afc5d4574764cfddf380be2e3154f019011c5488b25dd90c659e54a71d1b9036d67a9cca70f7ecb55920be535f10353e86c10c5a2a9dbc1aeb7df41bdea215ef74b37f39d2b96d0923375fef93da7d96280c5f73eef5054e4c86128f6bceb419f7d7fc31ea9cc988c45ceff107ab6e07eea5620dc24f21ee3aa635e43ef90cdd29e663819958b449e6b09c279d2b55655eac3713211c276bec651a6450235c3d51c731fc3e60d9899d0f539f53d49be0495c648c51480ff44c68aea4e1fe759c1826931acd4cbf1df90d5e6d00862559cbe6c08526db5251d4154ac6c02d5d4f59db6a4f933cc04cf6b510d07749f197fffb347c90838b09194f96895bafcce53c5d4c73d85b454f619997a70d24aae86cfde5c33047a20300d11d9dcbf9d18abb7c839aee067d3d61767d81c60e4b5dacc4e7e25319297b2be759f565831101cb6dfebdd54f1f5cc7020d7e233883c995f321c9fbf92fe1a08effbb4fbcb455ff8aee1c061f884946defd960adc577815bc7f730a417e99aa4bece7a6fa050db0e3510a764e1fb25e4ac971a6c2e77a8f1774fa60a9e88e35048db2d5b685e21b6ae6d81ca4c0321ea65ac175e83ad9cc020e24de59cbbc138bf81ac22422cdd7a528f86a8c73c17c37224b2f36ed90762e9267c8ff6cc3ba321a086d15da37cc1627fbb82716657f772f1046e3ad56f461077e1226c8949287ce275ddbe9d31e3480f09e23a1d5e465a5953eb95bd3888588a98f427cad86a8b234cd300f8372078765d464fa23bde960b78590a347b8823dffae0297b6a4302de89e0d96db6ae0199ec099f73719a662b6c30ab76da272447c3838e5a5779a94391ca0d1339f6a5a692ecbd723726ead21103fc5c5724403a079df1bedd7ab860aa19b133df2a286e06ae6f6c7ca689f3bf7ec388bcebd3d8ba82268fb3042569823cca26c3e0e5157b3ddb31bb584e4219d534cbdfe6aeed5cd11e30cb83125b69029f232a1b833f8b197d29019038cffb6303c016349a2eb478c7aae77b21b61342c040776e9b03bb08d3943844659b723c27b38e403394907df92f2da99db7f439310ff1e365d35eefbb055a3e627120bf9cc333f72b0e248ae27ee4e831a8793b45573fa2b9045f64e6075aad505b2bae299cb6a428cbe3126b6de3908a030d4e2d00d1312c1d12c6e4f9e7bb500a5228f9586c6af6caa124ba31086a03fce669fefe3baeee62cd77d88473f1f41916db7994e21753d9ab0c0ced7f48ffc792ae1ba813205eef1b6e71c7d64552d4c08ece8bff2da94e9f9946212af245e04cf18ee03f9cd6b12cab78f300d3dc089c0b796486f5fc84d40d3bf539ab54023de41b94c38dc76e4e5456b39eba5c72082e79217ff212b3e3a30318cebf5eb33f9cb4decf4c4442939574ec8f93133c2241ba6932efbe410e5a90b6e4802093f6db9b48693dadb45fdd811a1a9256b41678e7cdcf12c5b2b9fbaa7c3e1ac00f9362ec7a3e8587b1b7ecc7f941570ce39ce7144cb929c83694553022aa7c4dd72d8852a65e1923e44d5479c36455828e7147239c46e1a90e407f502e22639ec6e811c62a3bb579ffaddb42187862c457e87c26378793388757f541b0effe1440ec16d3b1b45b8db01ffaaf48cc165378209ce3963037ff58cf44eadb0bd923dcb499fc853a00c695573f0db7bc911db111f767680763e49935bb06cf6ca9176dd3aa1fb25b2b9b8f719280731b247e6506394072b903c8cf0c4013342d561b078cba61584ca8601962520f80be57b31d31022571c9a224fec5ba2528f1b4fc9578ed687d491704397ee98b4c0f33c23a682aa67a2f172a09867e0e4d9e2ceebfb7b69b12e9535151cc3624ac0c77eabb73972303aed9b43b2a7e97ae74630d1f265c288cbb542d843f67ea69661017c014553ce0e691aeb4614684a66c020d76c8a257157facb508fdfb84aa6d84d4be8584d5fa2267c49d8a8f5a2700a90b3d922dd366da409898eb3dfc9c5d405a40ee16b38a55dd2671c38b6892d9561961c64d9db4c85d54121fb43ed1975be37605aef269ef30cb68ba12701522bf8d041b0ff6a316f5c5b1110d3f79c060c22d484c3e01c9ae04479b7e80ffbc1beb101422e1549217f3e33d7d08e979802adb965a456186f5f6ffb2a9743a720438000ec0e3640da05451aa3dad25fbcdbc98a1f151ee72469cd947badec5f76436001f83bf6908f786795edc31ac08fb9ff7ed31d71b04fc0735f4cf4ff26c6a2a29582775f24ff21b47d19f6a264287a03061e0c55b7b79953bded01ecfea87a30d9baf9ea51e93460d92e3619e39c2b723eeaf702627455e6e03a878c3c52d94682072fe1380a9197b8951899b7e0c8da725a67a8c90a2772ded1c60a718ab1888c940bc12a379c173c53d4ecce85be58aa8eae9e495716b94916fe260353522cc88cbd82e1f69307844fd2ae878e616768041477d374f7d1ca652bd2f78d5a0af441cfdf35c575f23414bc64c1510940badf7b9128c926fc328275913c39d5cdf7492df7f624c8a4e3ec06131cc90b549f77628eac7f23a890cb00c19cf133a9042c0a4ac190ed50d6bc72efae976c93c3960f6786dd0c693ba71115f0223022bb14f8a23c364156a87044f0d4a20885b2c7d983f9474f1e002f6c75cda3e1d191dca5d0f7280b31424691c2e02acc10c384129cdbd499ccc8ba03000cb27816fd98ac1597a79972aa52754843aafe907ff4375adec34e544f92100feff8c2cb3044d3335e1bd26b695d785c6b72f6b2cdd0521a2a3512d23ba4ae4bacff5d2ad2dff0069904b796890161a4fe409f3a8505dc6fa95e306ba089e242b928323a9a353a821bed0e8685aa3ee1b6fd3168fc5f8a653d182c823aea9dea0a32f715b584aab826fe0a48e7766f9f16fa614628d66fccfb02eb54560afd583f15a94d059ee193fe08ca34b964b2acd7a914083dc81c26d5b1e55718becc7ea15d586de5f1bb4898f61b40411c25b8be02dfe9986f7b11018b964c813fc3fc2118220971b0fe1a6e0e8c59b1daf1cc32997d7bf0b6eb8d0550f59face032f149238ade090f8ab32c444c2fba9bc4c38fb6b1e6fa0b1a5c55581ae8bfaf419c1ef65d8412f7535c49f087cb7e3644742869fbc8e93c9a8aeaf77f80486b3a66f4e5b3d07db7bab3f35e95fbf061ce81d7d8619c05d9e2628aeefb97d1109d9df7d7872131a4f7146a4ae5e900c913aa3381f2b48501de038c435fdd585ba4a07c7875be0cf820a4acc93f68e60fd76c6fb88b91945412f41f4da7535fe5ac62e2691739c2e66941b38e0a6f9428b984e6908d01412a06c518f5da94a9e547ba3a31a41859f", &(0x7f0000003e80)="c5bb4197bc5238ddfaa9e034d5192e411bfe24dd2c6ad51e283d0d722c6677") 1.396665456s ago: executing program 1 (id=2430): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x20000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000005c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000440)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000005000000"], 0x8) setresuid(0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/54, 0x36}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000440)=""/251, 0xfb}], 0x3, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') setitimer(0x0, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r4) r5 = inotify_init1(0x0) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) fcntl$setsig(r5, 0xa, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.316125973s ago: executing program 1 (id=2434): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x7, 0x4, 0x9}, {0x5, 0x5, 0x1, 0x3}, {0x0, 0xff, 0xb, 0x4239636e}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x7c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="594316e0846d"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="08148afe42ab"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="da722a21e612"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040810) mount(&(0x7f0000000380)=@nullb, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='adfs\x00', 0x140081, &(0x7f0000000440)='\x9d\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2b0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffd1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5df4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "2fce91e25a8130e2b4aca769f16b112d77bdcfa057e078563088a66d888f134573"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "15fd3f757dfe439ace88fbb030719cb88fb50b48579a581bf9c51714b01b03ef5cd192d43f249086fda8cb9198f9e59a13276f29eba3a7d31720b7aeb535339cc95d38b6235359bb6d81ac4f7f42230755558667563adbccc9d90cfc27340d056daca9608af4386be1c76b8204b78d0852cc08fa27783410aa92322d4b8cf895446ef1bac2fbe2728388c108ce4218ff8f3363a84fa0c4e0dfbce2320997499822274a35af06784d948ba9a1dddabd82f06441551591a05cb0788f171355c49e7e8fbcf189ec77e45d614c4e6fa98ce982c16b024c41dde1fab9843a688e3c42bbcc59006efdd822b4096d3dfe413ca6d16eb7"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x44000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040810}, 0x10) 1.034587586s ago: executing program 0 (id=2440): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000001480)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) read(r2, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000202010100000000000000000a00000006000740000000004400028006000000000000002c00018014000300fc00001900000000000000000000000014000400fc000086"], 0x60}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000071a64044", @ANYRES32=r4, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001600)=ANY=[@ANYRESOCT=r4, @ANYBLOB="04a8912fde40b04948c751139553cb85f572d47b36daef822b8813459634b1f2ad87b2f90b1c2521b5b277304ae713af7e4e424dee91cbe31e2872afa69aca6271da806320e6eb11c829b83b938fa5e98c07952314d3be8cb920c9b2f0cae0b5ad171ab790de25d685dfcfd8a0dfd4e42a231e36f6dfbb70e8d188a29b6685ea9a16c55fa7b3e46cb85398323089aa6d3ce645f52285c4ad53bbbb0681cb7bd21e9e90e27c6b0d43be874413000afa01534c3b59f407f3bd4d324a66d4a6f259262610cf16c0123862af"], 0x3c}}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff545c}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.012613637s ago: executing program 4 (id=2441): socket(0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async) creat(0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x69d, 0x4fea, 0x7, 0x80000001, 0x1ff}, &(0x7f0000000000)=0x98) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="6a0af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a26c7670568982b4e020f698393a1587aee89eb5603111ced3a0f3881f9c24561f1b2607995daa56f151905ea23c22624c12533d3984e835a3c61a7a9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0c884625704f07372c29184ff7f4a7c0000070000006056fe"], 0x0}, 0x90) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000017c0)={0x14, 0x1b, 0x701, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 936.140924ms ago: executing program 4 (id=2442): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001c0073fc000000000005000007000003", @ANYRES32=r2, @ANYBLOB="020000000a000200bbbbbb0001bb00000c000e"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) 935.793023ms ago: executing program 4 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400eaffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) 934.136084ms ago: executing program 4 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x35}, {0x45}, {0x6, 0x0, 0x0, 0x1614a4a0}]}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0xec, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r4}, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) write(r2, &(0x7f0000000240)="2600000012003f20000000bf8a9d719797efcee3130000000d39036892f3f77156c2aea30a4b", 0x26) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x20f}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2d5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}]}, 0x50}, 0x1, 0x0, 0x0, 0x8011}, 0xc0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x6899ec4ae0cff075}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000680)={[{@norecovery}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@resuid}]}, 0x13, 0x57b, &(0x7f0000000940)="$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") r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r8, &(0x7f0000000080)=""/31, 0x1f) getdents(r8, 0x0, 0x500) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x8, 0x5, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='vm_unmapped_area\x00', r6}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r10, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) io_setup(0x5, &(0x7f0000003300)) 909.504065ms ago: executing program 3 (id=2445): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@usrquota}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x55f, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e00)={{}, {}, [], {}, [], {}, {0x20, 0x0, 0x8cff}}, 0x24, 0x0) 825.376123ms ago: executing program 3 (id=2446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="340000001900150000000000000081000a00000002020000000000001800098014"], 0x34}], 0x1}, 0x0) 722.080601ms ago: executing program 0 (id=2447): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x6000, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x81ffffff}, 0x97, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 421.036385ms ago: executing program 0 (id=2448): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x0, 0x1}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r4, &(0x7f0000000000)=""/178, 0xb2) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=0x0, @ANYRESDEC=r3, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$unix(0x1, 0x6, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x9c02, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xf0ffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000ea0000459000000000000000851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000000000000000000000000000950000000000000018010000756c6c2500000000002020207a0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d0000009500000000000000"], 0x0}, 0x90) 386.193998ms ago: executing program 4 (id=2449): creat(&(0x7f0000000600)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000f00000000001c14"], 0x30}}, 0x0) 331.787943ms ago: executing program 1 (id=2450): socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x611000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x80000001) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x3a, "4d2c09f2df64e903efad4c1173991c0fecd08e7494c553282694dd285ff8f624a9b5b4afc8757c35dd7ad8e37c3a7c947d4ed73c67e6e8681ef5"}, &(0x7f0000000100)=0x5e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5937, 0x30}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2c080) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000380)="e8278a3d15d130b24139f38532d0de485f3f484dc54774066e55d1cafbebfcd3da6c07d408db37ce5fc27598314377575b75b0f94ade695a17ad566995e7430f944cc6c9d71a0daf0c869a97cae57c52e10c94b76c6b35c48adc0b53de8d4ac5b6bfbadd3eaf813de9c4617d7c02e824c4ecc0930b6ad0c92214d23d058812c80e859252f37ed2d54171de8773055053a63b51c457eab397ead786ca02", 0x9d}], 0x2, 0x1, 0xb02b) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000480), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x4, 0x20, 0x7, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x12, 0x1, 0x0, 0x0, "6bac6a2994f31ad0de3f4e39187b4796b8105118c48a0db1862f8298816b0171a5f04f0c15619b4d6b57f239f771fefcbf372feac57b8bd437a5a710a1ac7715"}}, 0x80}, 0x1, 0x0, 0x0, 0x400c4}, 0x30) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x42c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2faee667}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x45}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa89}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe799}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0551}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x490fec0b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9adc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2990f2d3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x38}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe9e}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x274}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x86}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x359}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000d0) r4 = perf_event_open$cgroup(&(0x7f0000000b00)={0x2, 0x80, 0x1, 0x3, 0x7b, 0xf, 0x0, 0x99, 0x20050, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21ee5311, 0x4, @perf_config_ext={0xf, 0x7ff000000000000}, 0x2000, 0x5, 0x8001, 0x7, 0xa, 0x6, 0x0, 0x0, 0x7, 0x0, 0x9}, r0, 0x3, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x128, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6c92b536a6ac16523d85f976893f61bd"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9e1a7ec786dedc4b0e62b09213f3bab7"}]}, @NL802154_ATTR_SEC_KEY={0xe0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ef291156896d7106906f497cb4eb640f549bcef0ea93ed2c38ec777875965ed3"}, @NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4a365089e8a24861ee7fb2ae12dcf86193f6d38f14e0531ef6ce6d5f46d73f00"}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000e00), &(0x7f0000000e40)=0x30) r9 = openat2(r7, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x102, 0x2, 0x15}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r9) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r5) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r11, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000091) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r9, &(0x7f00000011c0)={&(0x7f0000001080), 0x10, &(0x7f0000001180)={&(0x7f0000001100)={0x5, 0x40, 0x3, {0x0, 0x2710}, {r12, r13/1000+10000}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "e43c06af9676e648"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004095}, 0x0) r14 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x200000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r9, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0], 0x0, 0xc8, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x86, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x8, 0xe8, 0x3, 0x3, 0x1210, r14, 0x4, '\x00', r15, r0, 0x4, 0x1, 0x5}, 0x48) 288.586166ms ago: executing program 1 (id=2451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [], {}, [], {}, {0x8}}, 0x24, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000280)) chown(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f0000000e80)="$eJzs3d9rW9cdAPDvla3MTpzZ2faQBZaYsZGELZIdL4nZQ5LB2J4C27J3z7NlYyxbxpKT2IThsOcxGGMb28v61JdC/4BCyZ9QCoH2PZTSEtokfehDWxVJV4nrSnZCJCuxPx84vuf+0P1+j4SOdO691g3gwBqNiKsR0RcRZyNiOF2eSUtsNkptu0cPb8/UShLV6vVPkkjSZc19Jen0SPqwgYj4w28j/pwkjQVblNc3FqeLxcJqOp+vLK3ky+sb5xaWpucL84XliYnxi5OXJi9MjnWsrZd//eG//v76by6//fOb96c+PvOXWr5D6bqt7eikxnOSrT8XTf0RsdqNYD3Ql7Yn+ywbJ93PBwCAndW+438vIn4cEY//2+tsAAAAgG6oXhmKL5KIKgAAALBvZerXwCaZXHotwFBkMrlc4xreH8SVKJbKlZ/NldaWZxvXyo5ENjO3UCyMpdcKj0Q2qc2P1+tP589vm5+IiGMR8c/hwfp8bqZUnO31wQ8AAAA4IGrj/KFMo16bfDbcGP8DAAAA+8xIrxMAAAAAus74HwAAAPa/b4//RxuTpH/vkwEAAAA67XfXrtVKtXn/69kb62uLpRvnZgvlxdzS2kxuprS6kpsvlebrv9m3tNv+iqXSyi9iee1WvlIoV/Ll9Y2ppdLacmWqfl/vqcIz3ScaAAAA6Khjp+6+n0TE5i8H66XmULrOWB32t8zzbZ50Kw9g7/X1OgGgZ1zgCweXMT6w28B+YI/yAAAAuuf0D5+c/x+MLef/j953bAD2u+c8/w/sI87/w8G17fz//3uVB7D3jPGB3Y4DtD3//07ncwEAALpjqF6STC4dAwxFJpPLRRyt3xYgm8wtFAtjEfHdiHhvOPud2vx4r5MGAAAAAAAAAAAAAAAAAAAAAAAAgFdMtZpEFQAAANjXIjIfJRGRxEDE8E+Gth8fOJR8PlyfRsTN/13/963pSmV1vLb80yfLK/9Jl5/vxREMAAAAYLvmOL05jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATnr08PZMs+xl3Ae/ioiRVvH7Y6A+HYhsRBx+nET/lsclEdHXgfibdyLieKv4SS2tGEmz2B4/ExGDPY5/pAPx4SC7W+t/rrZ6/2VitD5t/f7rT8uLejDarv/LPOn/+tr0f0d32fehdHri3pv5tvHvRJzob93/NOMnL9j//umPGxvt1lVfizjd8vMn+UasfGVpJV9e3zi3sDQ9X5gvLE9MjF+cvDR5YXIsP7dQLKR/W8b4x4/e+mqn9h9uE3+kXfuTRk7Vaut9nto2/+W9Ww+/32rDJOLB39J6i9f/eLv46XP/0/RzoLb+dLO+2ahvdfKNd0/u1P7ZNu3f7fU/026n25z9/V8/aNSyz/gIAKCbyusbi9PFYmH1Va/UGvMSpNHByujLkYbKwaz0umcCAAA67emX/l5nAgAAAAAAAAAAAAAAAAAAAAdX8///m7/l3I2fE9sab6BZSZI9bysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE6+DgAA///TSdFe") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0xa00000000000000, 0x0) 287.512096ms ago: executing program 2 (id=2397): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfb36b7c5eda090f7, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x7000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=interleave']) 287.246436ms ago: executing program 4 (id=2452): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$kcm(0x2, 0x0, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x700) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60f7d8ff00403c0020010000000000000000000000000000ff0200000000000000000000000000010004000000000000c9100000000000000000000000000000d6"], 0x0) socket$kcm(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x118, 0x118, 0x1b0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000060037d3425829569f0040008cbf1bee9d"], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18a58b64f712922247adecabb51730cc02d1000100ffffff00010000000000e08400000017a6f8f4563aae5c1663a30210f56708000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x20) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x5800005, 0x12, r5, 0x0) r6 = creat(&(0x7f0000000280)='./bus\x00', 0x1b3) write$cgroup_int(r6, &(0x7f0000000340), 0x12) 234.819361ms ago: executing program 3 (id=2453): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40440, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@isofs_parent={0x14, 0x2, {0xe, 0xfffe, 0x0, 0x0, 0xc00}}, 0xfbffffff) 184.287465ms ago: executing program 2 (id=2454): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000066006bcd9e3fe3dc6e08000007000000020000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5e40, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='freezer.self_freezing\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000580)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb9}}, @exit], &(0x7f0000000600)='syzkaller\x00', 0x6, 0xa6, &(0x7f0000000640)=""/166, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, r2, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x7fffffff, 0x78, &(0x7f0000000280)=""/120, 0x40f00, 0x7c23367857f72c59, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x1, &(0x7f0000000840)=[0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x1, 0x7, 0xc}]}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 165.160507ms ago: executing program 1 (id=2455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000000280)="$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") pread64(0xffffffffffffffff, &(0x7f0000004180)=""/4096, 0x1000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xf00}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 148.017148ms ago: executing program 2 (id=2456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010000304000000000000000100000000", @ANYRES32=r5, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x0) 83.951603ms ago: executing program 3 (id=2457): socket$inet(0x2, 0x0, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r1 = gettid() tkill(r1, 0x7) get_robust_list(r1, &(0x7f0000000580)=&(0x7f0000000400)={&(0x7f0000000200)={&(0x7f00000001c0)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f00000005c0)=0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfe6f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0xfea7) write$cgroup_subtree(r4, 0x0, 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r2}) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) exit(0x0) exit(0x0) exit(0x0) exit(0x0) exit(0x0) exit(0x0) exit(0x0) 75.111953ms ago: executing program 2 (id=2458): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="54010000100013070000034000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000064001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0"], 0x154}}, 0x0) 51.143126ms ago: executing program 0 (id=2459): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="640000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000002800128009000100766c616e00000000180002800c0002000e0000000a003d00060001000000000008000500", @ANYRES32=r2], 0x64}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in=@private=0xa010100}]}, 0xcc}}, 0x0) 132.36µs ago: executing program 2 (id=2460): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x208400, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x2, 0x20, [0x0, 0xffffffffffffff01, 0x8, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x8, @desc4}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/227) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x4, &(0x7f0000000280)=@raw=[@ldst={0x1, 0x2, 0x0, 0x0, 0xb, 0xffffffffffffffc0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @exit], &(0x7f00000002c0)='GPL\x00', 0xcdca, 0xf7, &(0x7f0000000300)=""/247, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x1, 0x1, 0xe634}, 0x10, 0x27ccb, r0, 0x7, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x1, 0x5, 0xf, 0xb}, {0x4, 0x3, 0xd}, {0x0, 0x4, 0xf}, {0x4, 0x2, 0x7, 0x3}, {0x1, 0x5, 0x2, 0x7}, {0x0, 0x4, 0xb, 0xa}, {0x0, 0x3, 0xc, 0x7}], 0x10, 0x2}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r1, r0, 0x1e, 0x0, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x8707, 0x700, 0xff, 0x2, {{0x39, 0x4, 0x2, 0x3, 0xe4, 0x64, 0x0, 0x2, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xf0, 0x1, 0x3, [{@remote, 0xe00}]}, @generic={0x89, 0xd, "577fd68b46be1a0c0416c4"}, @end, @noop, @timestamp_prespec={0x44, 0x54, 0x5f, 0x3, 0x9, [{@multicast1, 0xffff}, {@local, 0x6}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x8}, {@multicast2, 0x8e4}, {@loopback, 0xd}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x1}, {@rand_addr=0x5, 0x799}]}, @cipso={0x86, 0x3c, 0x2, [{0x7, 0xa, "670a5e542ff0da35"}, {0x7, 0x10, "3e3573cc0061e1a500a92f60997c"}, {0x0, 0xf, "4cb83eb2c077c09ea125253664"}, {0x2, 0xd, "c1b4d07fed63ec0b408102"}]}, @lsrr={0x83, 0x23, 0xd7, [@loopback, @multicast1, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010102, @empty]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x0, 0x6, 0x0, 0x1, 0x202f, r0, 0x1ff, '\x00', r2, r0, 0x1, 0x0, 0x1}, 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000840)={@in6={{0xa, 0x4e22, 0x9, @mcast1, 0x2}}, 0x0, 0x0, 0x13, 0x0, "1ee31e045fb61ec9e4fb13785a260282469d882a57d3046e7ab4363149d89232f81e370c9637aaf28ff1bac46fbd50ffcfebd3938247c83eb7651163c6d267a44c93fe794bedd671542489c46a11d0ac"}, 0xd8) r4 = getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs2/binder0\x00', 0x800, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000980), 0x900, 0x0) syz_open_procfs(r4, &(0x7f00000009c0)='oom_score_adj\x00') syz_open_dev$evdev(&(0x7f0000000a00), 0x7, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4f, 0x6, "0b71d1a633ecaa36871e6173041abac9dc586bb7c5e4e18fc3a9e8389d4a42e232191e0c26af1b9915e4df982d6914476ee589cbf3db9ee646f9372e63d2877d6e5c027a564c77ef0afa81"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x47}]}], {0x14}}, 0xf0}}, 0x4000) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000c00)={0x600000, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}}}, 0x88) syz_open_dev$usbmon(&(0x7f0000000cc0), 0x9, 0x40) io_setup(0x1, &(0x7f0000000d00)=0x0) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) io_pgetevents(r5, 0xd7, 0x6, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000e40)={r6, r7+60000000}, &(0x7f0000000ec0)={&(0x7f0000000e80)={[0x5]}, 0x8}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000f00)=0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000f40)={0x4, 0x9, 0x9, 0xc1, 0x9e, 0x81, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7, 0xa, 0xb9}, 0xe) ioperm(0x7, 0x3, 0x3) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) dup2(r8, r9) 0s ago: executing program 0 (id=2461): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbe78969e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0xfffffffffffffffb}) kernel console output (not intermixed with test programs): ity change from 0 to 256 [ 107.124133][ T29] audit: type=1400 audit(2000000058.991:3094): avc: denied { setattr } for pid=8434 comm="syz.0.1721" name="task" dev="proc" ino=25476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 107.133241][ T8433] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1720'. [ 107.158098][ T8433] 0ªX¹¦D: renamed from gretap0 [ 107.169569][ T8435] loop0: detected capacity change from 0 to 512 [ 107.173502][ T8433] 0ªX¹¦D: entered allmulticast mode [ 107.181152][ T8433] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 107.299086][ T8446] loop1: detected capacity change from 0 to 256 [ 107.318233][ T8446] FAT-fs (loop1): count of clusters too big (33555454) [ 107.325242][ T8446] FAT-fs (loop1): Can't find a valid FAT filesystem [ 107.349257][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1729'. [ 107.424773][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1734'. [ 107.433877][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 107.459343][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 107.469829][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1738'. [ 107.483221][ T8473] tipc: Enabling of bearer rejected, failed to enable media [ 107.553780][ T8496] FAULT_INJECTION: forcing a failure. [ 107.553780][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 107.566749][ T8496] CPU: 0 PID: 8496 Comm: syz.3.1745 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 107.578316][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.588511][ T8496] Call Trace: [ 107.591810][ T8496] [ 107.594754][ T8496] dump_stack_lvl+0xf2/0x150 [ 107.599410][ T8496] dump_stack+0x15/0x20 [ 107.603607][ T8496] should_fail_ex+0x229/0x230 [ 107.608308][ T8496] ? __get_vm_area_node+0xf7/0x1b0 [ 107.613480][ T8496] __should_failslab+0x92/0xa0 [ 107.618456][ T8496] should_failslab+0x9/0x20 [ 107.623019][ T8496] kmalloc_node_trace_noprof+0x50/0x2b0 [ 107.628672][ T8496] __get_vm_area_node+0xf7/0x1b0 [ 107.633719][ T8496] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 107.639670][ T8496] ? bpf_check+0xd5/0xa380 [ 107.644154][ T8496] ? __rcu_read_unlock+0x4e/0x70 [ 107.649202][ T8496] ? __mod_node_page_state+0x1c/0x80 [ 107.654532][ T8496] ? bpf_check+0xd5/0xa380 [ 107.659056][ T8496] vzalloc_noprof+0x5e/0x70 [ 107.663649][ T8496] ? bpf_check+0xd5/0xa380 [ 107.668094][ T8496] bpf_check+0xd5/0xa380 [ 107.672367][ T8496] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 107.678526][ T8496] ? cgroup_rstat_updated+0x99/0x550 [ 107.683883][ T8496] ? pcpu_chunk_relocate+0x183/0x280 [ 107.689211][ T8496] ? __mod_memcg_state+0x10d/0x200 [ 107.694421][ T8496] ? bpf_prog_alloc+0x59/0x150 [ 107.699236][ T8496] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 107.704493][ T8496] ? should_fail_ex+0xd7/0x230 [ 107.709278][ T8496] ? selinux_bpf_prog_load+0x35/0xe0 [ 107.714623][ T8496] ? __should_failslab+0x92/0xa0 [ 107.719581][ T8496] ? should_failslab+0x9/0x20 [ 107.724345][ T8496] ? kmalloc_trace_noprof+0x10b/0x2a0 [ 107.729898][ T8496] ? selinux_bpf_prog_load+0xbb/0xe0 [ 107.735195][ T8496] bpf_prog_load+0xed4/0x1060 [ 107.739987][ T8496] __sys_bpf+0x463/0x7a0 [ 107.744245][ T8496] __x64_sys_bpf+0x43/0x50 [ 107.748764][ T8496] x64_sys_call+0x2655/0x2d70 [ 107.753520][ T8496] do_syscall_64+0xc9/0x1c0 [ 107.758113][ T8496] ? clear_bhb_loop+0x55/0xb0 [ 107.762893][ T8496] ? clear_bhb_loop+0x55/0xb0 [ 107.767688][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.773606][ T8496] RIP: 0033:0x7f9235529bd9 [ 107.778105][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.797902][ T8496] RSP: 002b:00007f92347ab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.806376][ T8496] RAX: ffffffffffffffda RBX: 00007f92356b7f60 RCX: 00007f9235529bd9 [ 107.814422][ T8496] RDX: 0000000000000090 RSI: 00000000200003c0 RDI: 0000000000000005 [ 107.822395][ T8496] RBP: 00007f92347ab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.830450][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.838442][ T8496] R13: 000000000000000b R14: 00007f92356b7f60 R15: 00007fff24daf3b8 [ 107.846547][ T8496] [ 107.849621][ T8496] syz.3.1745: vmalloc error: size 936, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 107.865182][ T8496] CPU: 0 PID: 8496 Comm: syz.3.1745 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 107.876766][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.886950][ T8496] Call Trace: [ 107.890231][ T8496] [ 107.893185][ T8496] dump_stack_lvl+0xf2/0x150 [ 107.897820][ T8496] dump_stack+0x15/0x20 [ 107.902061][ T8496] warn_alloc+0x145/0x1b0 [ 107.906405][ T8496] __vmalloc_node_range_noprof+0x310/0xef0 [ 107.912295][ T8496] ? __rcu_read_unlock+0x4e/0x70 [ 107.917272][ T8496] ? __mod_node_page_state+0x1c/0x80 [ 107.922633][ T8496] ? bpf_check+0xd5/0xa380 [ 107.927122][ T8496] vzalloc_noprof+0x5e/0x70 [ 107.931648][ T8496] ? bpf_check+0xd5/0xa380 [ 107.936138][ T8496] bpf_check+0xd5/0xa380 [ 107.940393][ T8496] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 107.946650][ T8496] ? cgroup_rstat_updated+0x99/0x550 [ 107.952009][ T8496] ? pcpu_chunk_relocate+0x183/0x280 [ 107.957369][ T8496] ? __mod_memcg_state+0x10d/0x200 [ 107.962521][ T8496] ? bpf_prog_alloc+0x59/0x150 [ 107.967520][ T8496] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 107.972876][ T8496] ? should_fail_ex+0xd7/0x230 [ 107.977658][ T8496] ? selinux_bpf_prog_load+0x35/0xe0 [ 107.983043][ T8496] ? __should_failslab+0x92/0xa0 [ 107.988076][ T8496] ? should_failslab+0x9/0x20 [ 107.992774][ T8496] ? kmalloc_trace_noprof+0x10b/0x2a0 [ 107.998659][ T8496] ? selinux_bpf_prog_load+0xbb/0xe0 [ 108.003956][ T8496] bpf_prog_load+0xed4/0x1060 [ 108.008669][ T8496] __sys_bpf+0x463/0x7a0 [ 108.013030][ T8496] __x64_sys_bpf+0x43/0x50 [ 108.017542][ T8496] x64_sys_call+0x2655/0x2d70 [ 108.022235][ T8496] do_syscall_64+0xc9/0x1c0 [ 108.026756][ T8496] ? clear_bhb_loop+0x55/0xb0 [ 108.031479][ T8496] ? clear_bhb_loop+0x55/0xb0 [ 108.036431][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.042423][ T8496] RIP: 0033:0x7f9235529bd9 [ 108.046906][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.067105][ T8496] RSP: 002b:00007f92347ab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.075524][ T8496] RAX: ffffffffffffffda RBX: 00007f92356b7f60 RCX: 00007f9235529bd9 [ 108.083588][ T8496] RDX: 0000000000000090 RSI: 00000000200003c0 RDI: 0000000000000005 [ 108.091617][ T8496] RBP: 00007f92347ab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.099733][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.107749][ T8496] R13: 000000000000000b R14: 00007f92356b7f60 R15: 00007fff24daf3b8 [ 108.115733][ T8496] [ 108.119062][ T8496] Mem-Info: [ 108.123212][ T8496] active_anon:9302 inactive_anon:0 isolated_anon:0 [ 108.123212][ T8496] active_file:22464 inactive_file:2096 isolated_file:0 [ 108.123212][ T8496] unevictable:0 dirty:83 writeback:18 [ 108.123212][ T8496] slab_reclaimable:2734 slab_unreclaimable:22527 [ 108.123212][ T8496] mapped:15078 shmem:6598 pagetables:643 [ 108.123212][ T8496] sec_pagetables:0 bounce:0 [ 108.123212][ T8496] kernel_misc_reclaimable:0 [ 108.123212][ T8496] free:1890939 free_pcp:7627 free_cma:0 [ 108.168627][ T8496] Node 0 active_anon:37208kB inactive_anon:0kB active_file:89856kB inactive_file:8384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60312kB dirty:332kB writeback:72kB shmem:26392kB writeback_tmp:0kB kernel_stack:3536kB pagetables:2572kB sec_pagetables:0kB all_unreclaimable? no [ 108.197031][ T8496] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.223900][ T8496] lowmem_reserve[]: 0 2874 7852 0 [ 108.228971][ T8496] Node 0 DMA32 free:2957160kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960700kB mlocked:0kB bounce:0kB free_pcp:3540kB local_pcp:3540kB free_cma:0kB [ 108.257851][ T8496] lowmem_reserve[]: 0 0 4978 0 [ 108.262724][ T8496] Node 0 Normal free:4590516kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:45096kB inactive_anon:0kB active_file:89856kB inactive_file:8384kB unevictable:0kB writepending:404kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:19860kB local_pcp:18448kB free_cma:0kB [ 108.293147][ T8496] lowmem_reserve[]: 0 0 0 0 [ 108.297943][ T8496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.310961][ T8496] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957160kB [ 108.327439][ T8496] Node 0 Normal: 8*4kB (E) 1*8kB (E) 10*16kB (UM) 12*32kB (UE) 174*64kB (UME) 54*128kB (ME) 23*256kB (M) 40*512kB (UME) 69*1024kB (UME) 39*2048kB (UME) 1073*4096kB (UM) = 4590536kB [ 108.345765][ T8496] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 108.355270][ T8496] 24956 total pagecache pages [ 108.359996][ T8496] 5 pages in swap cache [ 108.364186][ T8496] Free swap = 124668kB [ 108.368344][ T8496] Total swap = 124996kB [ 108.372506][ T8496] 2097051 pages RAM [ 108.376417][ T8496] 0 pages HighMem/MovableOnly [ 108.381084][ T8496] 78484 pages reserved [ 108.413827][ T8508] veth1_macvtap: left promiscuous mode [ 108.525753][ T8510] hub 9-0:1.0: USB hub found [ 108.530456][ T8510] hub 9-0:1.0: 8 ports detected [ 108.554429][ T8522] loop1: detected capacity change from 0 to 512 [ 108.601491][ T8532] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.609417][ T8526] loop2: detected capacity change from 0 to 2048 [ 108.620190][ T8522] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.645004][ T8526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.672982][ T8229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.682590][ T5594] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 108.716420][ T8552] loop0: detected capacity change from 0 to 164 [ 108.798316][ T8563] netlink: 'syz.3.1769': attribute type 7 has an invalid length. [ 108.806196][ T8563] netlink: 'syz.3.1769': attribute type 39 has an invalid length. [ 108.889271][ T8576] veth0_macvtap: left promiscuous mode [ 108.909597][ T8579] loop3: detected capacity change from 0 to 1024 [ 108.921945][ T8579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.949833][ T7838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.039273][ T8582] FAULT_INJECTION: forcing a failure. [ 109.039273][ T8582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.052422][ T8582] CPU: 0 PID: 8582 Comm: syz.1.1763 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 109.063991][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 109.064808][ T8593] loop0: detected capacity change from 0 to 2048 [ 109.074125][ T8582] Call Trace: [ 109.074137][ T8582] [ 109.074145][ T8582] dump_stack_lvl+0xf2/0x150 [ 109.091376][ T8582] dump_stack+0x15/0x20 [ 109.095559][ T8582] should_fail_ex+0x229/0x230 [ 109.100252][ T8582] should_fail+0xb/0x10 [ 109.104511][ T8582] should_fail_usercopy+0x1a/0x20 [ 109.109549][ T8582] _copy_from_user+0x1e/0xd0 [ 109.114151][ T8582] __se_sys_memfd_create+0x26b/0x600 [ 109.119457][ T8582] __x64_sys_memfd_create+0x31/0x40 [ 109.124677][ T8582] x64_sys_call+0x28b7/0x2d70 [ 109.129368][ T8582] do_syscall_64+0xc9/0x1c0 [ 109.133971][ T8582] ? clear_bhb_loop+0x55/0xb0 [ 109.138723][ T8582] ? clear_bhb_loop+0x55/0xb0 [ 109.143421][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.149331][ T8582] RIP: 0033:0x7f736bf1bbd9 [ 109.153786][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.173556][ T8582] RSP: 002b:00007f736b17be28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 109.181985][ T8582] RAX: ffffffffffffffda RBX: 00000000000007a6 RCX: 00007f736bf1bbd9 [ 109.190238][ T8582] RDX: 00007f736b17bf00 RSI: 0000000000000000 RDI: 00007f736bf89d24 [ 109.198237][ T8582] RBP: 0000000020000a80 R08: 00007f736b17bbc7 R09: 00007f736b17be50 [ 109.206217][ T8582] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000280 [ 109.214215][ T8582] R13: 00007f736b17bf00 R14: 00007f736b17bec0 R15: 0000000020000040 [ 109.222224][ T8582] [ 109.234419][ T8594] loop3: detected capacity change from 0 to 136 [ 109.242625][ T8593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.295023][ T8593] loop0: detected capacity change from 2048 to 2047 [ 109.302283][ T8593] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #18: comm syz.0.1781: corrupted in-inode xattr: bad magic number in in-inode xattr [ 109.337015][ T5876] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /221/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=1937076323, rec_len=29797, size=2048 fake=0 [ 109.390458][ T8605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7954 sclass=netlink_route_socket pid=8605 comm=syz.4.1784 [ 109.404914][ T7186] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.617604][ T8611] loop1: detected capacity change from 0 to 128 [ 109.624344][ T8611] FAT-fs (loop1): Unrecognized mount option "00000000000000000000" or missing value [ 109.717462][ T3748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.763453][ T3748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.818389][ T3748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.854372][ T8629] loop1: detected capacity change from 0 to 2364 [ 109.864883][ T8629] iso9660: Unknown parameter 'ô.¤¬8i' [ 109.872427][ T3748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.912992][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 109.962044][ T3748] bridge_slave_1: left allmulticast mode [ 109.967804][ T3748] bridge_slave_1: left promiscuous mode [ 109.973495][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.977712][ T8638] loop1: detected capacity change from 0 to 1024 [ 109.988209][ T8638] EXT4-fs: Ignoring removed oldalloc option [ 109.994223][ T8638] EXT4-fs: Ignoring removed orlov option [ 109.994389][ T3748] bridge_slave_0: left allmulticast mode [ 110.002702][ T8638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.006370][ T3748] bridge_slave_0: left promiscuous mode [ 110.024371][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.062265][ T3748] bond0: left promiscuous mode [ 110.067161][ T3748] bond_slave_0: left promiscuous mode [ 110.072735][ T3748] bond_slave_1: left promiscuous mode [ 110.078247][ T3748] team0: left promiscuous mode [ 110.083078][ T3748] team_slave_0: left promiscuous mode [ 110.088645][ T3748] team_slave_1: left promiscuous mode [ 110.155304][ T3748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.166273][ T3748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.176988][ T3748] bond0 (unregistering): (slave team0): Releasing backup interface [ 110.186869][ T3748] bond0 (unregistering): Released all slaves [ 110.196573][ T3748] bond1 (unregistering): Released all slaves [ 110.207143][ T8638] bridge: RTM_NEWNEIGH with invalid ether address [ 110.226100][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.233199][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.240533][ T8618] bridge_slave_0: entered allmulticast mode [ 110.247411][ T8618] bridge_slave_0: entered promiscuous mode [ 110.254290][ T3748] tipc: Left network mode [ 110.254574][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.265851][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.273143][ T8618] bridge_slave_1: entered allmulticast mode [ 110.279901][ T8618] bridge_slave_1: entered promiscuous mode [ 110.297977][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.308966][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.329039][ T8618] team0: Port device team_slave_0 added [ 110.341280][ T3748] hsr_slave_0: left promiscuous mode [ 110.347555][ T3748] hsr_slave_1: left promiscuous mode [ 110.353852][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.361355][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.369233][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.376681][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.386491][ T3748] veth1_macvtap: left promiscuous mode [ 110.392103][ T3748] veth0_macvtap: left promiscuous mode [ 110.397904][ T3748] veth1_vlan: left promiscuous mode [ 110.403180][ T3748] veth0_vlan: left promiscuous mode [ 110.499494][ T3748] team0 (unregistering): Port device team_slave_1 removed [ 110.506731][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 110.506746][ T29] audit: type=1326 audit(2000000062.111:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.4.1795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a5c1e3bd9 code=0x0 [ 110.537261][ T3748] team0 (unregistering): Port device team_slave_0 removed [ 110.581950][ T8618] team0: Port device team_slave_1 added [ 110.602730][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.609949][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.636039][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.647796][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.654946][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.685402][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.716561][ T8618] hsr_slave_0: entered promiscuous mode [ 110.722939][ T8618] hsr_slave_1: entered promiscuous mode [ 110.729381][ T8618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.737077][ T8618] Cannot create hsr debugfs directory [ 110.872892][ T29] audit: type=1326 audit(2000000062.452:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736bf1bbd9 code=0x7fc00000 [ 110.896994][ T29] audit: type=1326 audit(2000000062.452:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f736bf1bbd9 code=0x7fc00000 [ 110.968944][ T3748] IPVS: stop unused estimator thread 0... [ 110.979781][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.037785][ T8652] loop1: detected capacity change from 0 to 512 [ 111.044732][ T8652] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 111.053553][ T8652] EXT4-fs (loop1): invalid journal inode [ 111.059374][ T8652] EXT4-fs (loop1): can't get journal size [ 111.066105][ T8652] EXT4-fs (loop1): 1 truncate cleaned up [ 111.072133][ T8652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.098925][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.103023][ T8618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.116902][ T8618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.125914][ T8618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.134573][ T8618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.191722][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.207053][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.218788][ T8660] ieee802154 phy0 wpan0: encryption failed: -90 [ 111.221674][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.232170][ T4177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.249569][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.256760][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.267459][ T8662] __nla_validate_parse: 4 callbacks suppressed [ 111.267479][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1800'. [ 111.315012][ T8618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.376502][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.465080][ T8682] netlink: 'syz.1.1806': attribute type 4 has an invalid length. [ 111.491358][ T8618] veth0_vlan: entered promiscuous mode [ 111.502638][ T8682] netlink: 'syz.1.1806': attribute type 4 has an invalid length. [ 111.525032][ T8618] veth1_vlan: entered promiscuous mode [ 111.561780][ T8695] FAULT_INJECTION: forcing a failure. [ 111.561780][ T8695] name failslab, interval 1, probability 0, space 0, times 0 [ 111.563233][ T8618] veth0_macvtap: entered promiscuous mode [ 111.574452][ T8695] CPU: 0 PID: 8695 Comm: syz.4.1810 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 111.587580][ T8618] veth1_macvtap: entered promiscuous mode [ 111.591703][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 111.591720][ T8695] Call Trace: [ 111.591728][ T8695] [ 111.606218][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.607571][ T8695] dump_stack_lvl+0xf2/0x150 [ 111.610914][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.613837][ T8695] dump_stack+0x15/0x20 [ 111.624308][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.628848][ T8695] should_fail_ex+0x229/0x230 [ 111.638907][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.642788][ T8695] ? __alloc_skb+0x10b/0x300 [ 111.653200][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.657845][ T8695] __should_failslab+0x92/0xa0 [ 111.667772][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.672325][ T8695] should_failslab+0x9/0x20 [ 111.682745][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.687453][ T8695] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 111.697495][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.701815][ T8695] ? nlmon_xmit+0x51/0x60 [ 111.712271][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.718042][ T8695] __alloc_skb+0x10b/0x300 [ 111.727864][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.732148][ T8695] netlink_ack+0xef/0x4f0 [ 111.732191][ T8695] netlink_rcv_skb+0x19c/0x230 [ 111.742645][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.742660][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.742678][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.747063][ T8695] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.756867][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.761186][ T8695] rtnetlink_rcv+0x1c/0x30 [ 111.766045][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.776402][ T8695] netlink_unicast+0x58d/0x660 [ 111.786222][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.796594][ T8695] netlink_sendmsg+0x5ca/0x6e0 [ 111.796644][ T8695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.796667][ T8695] __sock_sendmsg+0x140/0x180 [ 111.796690][ T8695] ____sys_sendmsg+0x312/0x410 [ 111.796745][ T8695] __sys_sendmsg+0x1e9/0x280 [ 111.802222][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.812035][ T8695] __x64_sys_sendmsg+0x46/0x50 [ 111.816445][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.826839][ T8695] x64_sys_call+0xb25/0x2d70 [ 111.826888][ T8695] do_syscall_64+0xc9/0x1c0 [ 111.831661][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.841451][ T8695] ? clear_bhb_loop+0x55/0xb0 [ 111.846232][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.851586][ T8695] ? clear_bhb_loop+0x55/0xb0 [ 111.851627][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.851671][ T8695] RIP: 0033:0x7f9a5c1e3bd9 [ 111.851689][ T8695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.851751][ T8695] RSP: 002b:00007f9a5b465048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.851774][ T8695] RAX: ffffffffffffffda RBX: 00007f9a5c371f60 RCX: 00007f9a5c1e3bd9 [ 111.851790][ T8695] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 111.851805][ T8695] RBP: 00007f9a5b4650a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.851819][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.851833][ T8695] R13: 000000000000000b R14: 00007f9a5c371f60 R15: 00007ffefcabec48 [ 111.851853][ T8695] [ 112.022856][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.054202][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.064909][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.075137][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.085699][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.095643][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.106194][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.116061][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.126531][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.136585][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.147092][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.157141][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.167623][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.177523][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.188077][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.190831][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 112.197935][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.217548][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.227544][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.238126][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.247968][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.258409][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.276566][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.288468][ T8618] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.297512][ T8618] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.306440][ T8618] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.315187][ T8618] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.326466][ T8712] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1814'. [ 112.346963][ T8712] 9pnet_fd: Insufficient options for proto=fd [ 112.439299][ T8726] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1820'. [ 112.449061][ T8726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1820'. [ 112.449684][ T8728] FAULT_INJECTION: forcing a failure. [ 112.449684][ T8728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.471214][ T8728] CPU: 1 PID: 8728 Comm: syz.0.1791 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 112.482845][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 112.492958][ T8728] Call Trace: [ 112.496370][ T8728] [ 112.499318][ T8728] dump_stack_lvl+0xf2/0x150 [ 112.503948][ T8728] dump_stack+0x15/0x20 [ 112.508124][ T8728] should_fail_ex+0x229/0x230 [ 112.512824][ T8728] should_fail+0xb/0x10 [ 112.516999][ T8728] should_fail_usercopy+0x1a/0x20 [ 112.522026][ T8728] _copy_from_user+0x1e/0xd0 [ 112.526696][ T8728] copy_msghdr_from_user+0x54/0x2a0 [ 112.532011][ T8728] __sys_sendmmsg+0x22a/0x500 [ 112.536871][ T8728] __x64_sys_sendmmsg+0x57/0x70 [ 112.541748][ T8728] x64_sys_call+0xa87/0x2d70 [ 112.546517][ T8728] do_syscall_64+0xc9/0x1c0 [ 112.551062][ T8728] ? clear_bhb_loop+0x55/0xb0 [ 112.555783][ T8728] ? clear_bhb_loop+0x55/0xb0 [ 112.560634][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.566566][ T8728] RIP: 0033:0x7facd3d19bd9 [ 112.571038][ T8728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.590798][ T8728] RSP: 002b:00007facd2f9b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 112.599213][ T8728] RAX: ffffffffffffffda RBX: 00007facd3ea7f60 RCX: 00007facd3d19bd9 [ 112.607199][ T8728] RDX: 0000000000000002 RSI: 0000000020003b40 RDI: 0000000000000000 [ 112.615170][ T8728] RBP: 00007facd2f9b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.623147][ T8728] R10: 000000002404881c R11: 0000000000000246 R12: 0000000000000001 [ 112.631152][ T8728] R13: 000000000000000b R14: 00007facd3ea7f60 R15: 00007ffd911a01a8 [ 112.639127][ T8728] [ 112.684587][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1824'. [ 112.696823][ T8737] netlink: 'syz.0.1824': attribute type 27 has an invalid length. [ 112.755020][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.762274][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.823335][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.837982][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.883638][ T8737] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.892786][ T8737] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.901910][ T8737] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.910827][ T8737] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.234306][ T8775] loop1: detected capacity change from 0 to 512 [ 113.261003][ T8775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.273688][ T8775] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.292837][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.446496][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1839'. [ 113.480597][ T8803] netlink: 'syz.1.1840': attribute type 10 has an invalid length. [ 113.549069][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1841'. [ 113.558138][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 113.575727][ T29] audit: type=1400 audit(2000000064.953:3112): avc: denied { remount } for pid=8805 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.646377][ T8822] netlink: 'syz.4.1846': attribute type 4 has an invalid length. [ 113.668294][ T8822] netlink: 'syz.4.1846': attribute type 4 has an invalid length. [ 113.690257][ T8824] loop1: detected capacity change from 0 to 1024 [ 113.697649][ T8824] EXT4-fs: Ignoring removed orlov option [ 113.703392][ T8824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.719641][ T8824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.733313][ T29] audit: type=1400 audit(2000000065.092:3113): avc: denied { setattr } for pid=8823 comm="syz.1.1847" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.761496][ T29] audit: type=1400 audit(2000000065.120:3114): avc: denied { read } for pid=8829 comm="syz.4.1849" path="socket:[27320]" dev="sockfs" ino=27320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.776528][ T8824] process 'syz.1.1847' launched './file0/file0' with NULL argv: empty string added [ 113.784959][ T29] audit: type=1400 audit(2000000065.129:3115): avc: denied { execute } for pid=8823 comm="syz.1.1847" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.817292][ T29] audit: type=1400 audit(2000000065.156:3116): avc: denied { execute_no_trans } for pid=8823 comm="syz.1.1847" path="/208/file1/file0/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.841955][ T29] audit: type=1400 audit(2000000065.156:3117): avc: denied { create } for pid=8823 comm="syz.1.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.864489][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.887557][ T8834] veth1_virt_wifi: entered promiscuous mode [ 113.894803][ T8834] veth1_virt_wifi: left promiscuous mode [ 113.933649][ T8836] loop1: detected capacity change from 0 to 2048 [ 113.940460][ T8836] EXT4-fs: Ignoring removed bh option [ 113.954096][ T8836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.967239][ T8840] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1852'. [ 113.977984][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.028242][ T29] audit: type=1400 audit(2000000065.360:3118): avc: denied { map } for pid=8841 comm="syz.4.1854" path="socket:[27342]" dev="sockfs" ino=27342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.052832][ T8848] loop1: detected capacity change from 0 to 2048 [ 114.078788][ T8848] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.1853: casefold flag without casefold feature [ 114.101469][ T8848] EXT4-fs (loop1): get root inode failed [ 114.107190][ T8848] EXT4-fs (loop1): mount failed [ 114.212842][ T8860] netlink: 'syz.0.1857': attribute type 10 has an invalid length. [ 114.220811][ T8751] IPVS: starting estimator thread 0... [ 114.221539][ T8860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.265066][ T8867] loop2: detected capacity change from 0 to 2048 [ 114.272377][ T8867] EXT4-fs (loop2): invalid inodes per group: 63264 [ 114.272377][ T8867] [ 114.300929][ T8848] loop1: detected capacity change from 0 to 128 [ 114.309209][ T8848] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.322217][ T8848] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.323674][ T8865] IPVS: using max 2352 ests per chain, 117600 per kthread [ 114.365526][ T8848] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 114.370782][ T8879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65119 sclass=netlink_route_socket pid=8879 comm=syz.2.1865 [ 114.469105][ T5594] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.486764][ T4027] syz_tun: left promiscuous mode [ 114.518520][ T8883] loop2: detected capacity change from 0 to 128 [ 114.530847][ T8883] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.543188][ T8883] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.599701][ T8897] loop1: detected capacity change from 0 to 512 [ 114.606966][ T8883] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.607315][ T8897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.628145][ T8897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 114.636123][ T8897] System zones: 1-12 [ 114.642413][ T8897] EXT4-fs (loop1): 1 truncate cleaned up [ 114.648891][ T8897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.669470][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.695155][ T8902] usb usb1: usbfs: process 8902 (syz.2.1875) did not claim interface 0 before use [ 114.726246][ T8906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8906 comm=syz.2.1878 [ 114.748356][ T8906] loop2: detected capacity change from 0 to 256 [ 114.755728][ T8906] FAT-fs (loop2): bogus number of directory entries (17407) [ 114.763253][ T8906] FAT-fs (loop2): Can't find a valid FAT filesystem [ 114.771911][ T8908] SELinux: Context Ž is not valid (left unmapped). [ 114.778699][ T8908] SELinux: Context Q±!¤ö¦€@ó is not valid (left unmapped). [ 114.820385][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.845512][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.860876][ T8912] loop1: detected capacity change from 0 to 512 [ 114.869549][ T8912] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 114.877832][ T8912] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 114.886651][ T8912] EXT4-fs (loop1): 1 truncate cleaned up [ 114.893031][ T8912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.906573][ T8912] ext4: Unknown parameter '$FCò&Pƒ·÷R\A @3ÙÕÍp' [ 114.914141][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.952882][ T8912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.976799][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.010096][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.038419][ T8934] loop2: detected capacity change from 0 to 256 [ 115.067874][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.106925][ T8940] loop1: detected capacity change from 0 to 2048 [ 115.113777][ T8911] chnl_net:caif_netlink_parms(): no params data found [ 115.153898][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.161174][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.161541][ T8940] loop1: p1 < > p3 [ 115.168638][ T8911] bridge_slave_0: entered allmulticast mode [ 115.175871][ T8940] loop1: p3 size 134217728 extends beyond EOD, truncated [ 115.179134][ T8911] bridge_slave_0: entered promiscuous mode [ 115.196888][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.203800][ T8940] netlink: 'syz.1.1889': attribute type 8 has an invalid length. [ 115.204177][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.214508][ T8951] netlink: 'syz.1.1889': attribute type 8 has an invalid length. [ 115.228130][ T8911] bridge_slave_1: entered allmulticast mode [ 115.235097][ T8911] bridge_slave_1: entered promiscuous mode [ 115.257776][ T8911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.270408][ T8955] loop2: detected capacity change from 0 to 128 [ 115.286073][ T8955] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.286696][ T8911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.310287][ T8955] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.345825][ T8955] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.358050][ T11] bridge_slave_1: left allmulticast mode [ 115.363837][ T11] bridge_slave_1: left promiscuous mode [ 115.369519][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.381840][ T11] bridge_slave_0: left allmulticast mode [ 115.387610][ T11] bridge_slave_0: left promiscuous mode [ 115.393373][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.656581][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.667328][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.678460][ T11] bond0 (unregistering): Released all slaves [ 115.685726][ T8229] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.696165][ T8911] team0: Port device team_slave_0 added [ 115.704468][ T8911] team0: Port device team_slave_1 added [ 115.753500][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.760499][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.786587][ T8911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.808293][ T11] tipc: Disabling bearer [ 115.813741][ T11] tipc: Left network mode [ 115.827276][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.834252][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.860265][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.902327][ T11] hsr_slave_0: left promiscuous mode [ 115.909166][ T11] hsr_slave_1: left promiscuous mode [ 115.917715][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.925293][ T9008] loop2: detected capacity change from 0 to 128 [ 115.925533][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.939858][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.947370][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.957110][ T11] dummy0: left allmulticast mode [ 115.962181][ T11] dummy0: left promiscuous mode [ 115.967225][ T11] veth1_macvtap: left promiscuous mode [ 115.972811][ T11] veth0_macvtap: left promiscuous mode [ 116.041291][ T11] team0 (unregistering): Port device team_slave_1 removed [ 116.069836][ T9010] xt_cgroup: xt_cgroup: no path or classid specified [ 116.108172][ T9016] loop2: detected capacity change from 0 to 2048 [ 116.126856][ T9016] EXT4-fs: Ignoring removed bh option [ 116.132444][ T9016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.139320][ T9016] EXT4-fs: quotafile must be on filesystem root [ 116.160657][ T8911] hsr_slave_0: entered promiscuous mode [ 116.169660][ T8911] hsr_slave_1: entered promiscuous mode [ 116.178060][ T8911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.188976][ T8911] Cannot create hsr debugfs directory [ 116.244671][ T9035] netlink: 'syz.2.1921': attribute type 4 has an invalid length. [ 116.269760][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 116.269776][ T29] audit: type=1400 audit(2000000067.427:3127): avc: denied { validate_trans } for pid=9037 comm="syz.2.1923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 116.317017][ T29] audit: type=1326 audit(2000000067.482:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.1.1924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f736bf1bbd9 code=0x0 [ 116.358093][ T9043] loop2: detected capacity change from 0 to 128 [ 116.517418][ T11] IPVS: stop unused estimator thread 0... [ 116.591502][ T8911] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.600543][ T8911] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.609507][ T8911] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.618552][ T8911] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.660678][ T8911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.674152][ T8911] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.686442][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.693611][ T8749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.705142][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.712249][ T8749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.742101][ T8911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.796726][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.917192][ T8911] veth0_vlan: entered promiscuous mode [ 116.927097][ T8911] veth1_vlan: entered promiscuous mode [ 116.945020][ T8911] veth0_macvtap: entered promiscuous mode [ 116.952876][ T8911] veth1_macvtap: entered promiscuous mode [ 116.964740][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.975480][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.985394][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.995944][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.005827][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.016335][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.026211][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.036753][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.046688][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.057152][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.067029][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.077555][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.087394][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.097855][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.107738][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.118182][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.128081][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.138525][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.150692][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.159507][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.169988][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.179929][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.190717][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.200685][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.211214][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.221102][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.231617][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.241507][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.252185][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.262282][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.272928][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.282802][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.293244][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.303061][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.313581][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.323431][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.334025][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.345914][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.354851][ T8911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.363597][ T8911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.372467][ T8911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.381213][ T8911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.403342][ T9071] loop2: detected capacity change from 0 to 512 [ 117.433201][ T9071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.446664][ T9071] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.461933][ T9077] loop1: detected capacity change from 0 to 256 [ 117.475354][ T9077] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.494579][ T9077] tipc: Started in network mode [ 117.499722][ T9077] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 117.507410][ T9077] tipc: Enabled bearer , priority 10 [ 117.515493][ T8229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.517449][ T9082] vlan2: entered promiscuous mode [ 117.582106][ T29] audit: type=1400 audit(2000000068.645:3129): avc: denied { create } for pid=9083 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 117.602649][ T29] audit: type=1400 audit(2000000068.645:3130): avc: denied { create } for pid=9083 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 117.623914][ T29] audit: type=1400 audit(2000000068.645:3131): avc: denied { write } for pid=9083 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 117.644666][ T29] audit: type=1400 audit(2000000068.645:3132): avc: denied { create } for pid=9083 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 117.665016][ T29] audit: type=1400 audit(2000000068.645:3133): avc: denied { create } for pid=9083 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.686235][ T29] audit: type=1400 audit(2000000068.645:3134): avc: denied { create } for pid=9083 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 117.706578][ T29] audit: type=1400 audit(2000000068.645:3135): avc: denied { setopt } for pid=9083 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 117.730747][ T29] audit: type=1400 audit(2000000068.655:3136): avc: denied { watch } for pid=9085 comm="syz.4.1931" path="/2/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 117.843717][ T9100] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.965840][ T9109] __nla_validate_parse: 15 callbacks suppressed [ 117.965875][ T9109] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1940'. [ 118.079441][ T9086] cgroup: fork rejected by pids controller in /syz4 [ 118.219343][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1943'. [ 118.454761][ T9393] loop0: detected capacity change from 0 to 256 [ 118.462963][ T9393] FAT-fs (loop0): bogus number of directory entries (17407) [ 118.467415][ T9389] loop1: detected capacity change from 0 to 256 [ 118.470411][ T9393] FAT-fs (loop0): Can't find a valid FAT filesystem [ 118.485094][ T9389] FAT-fs (loop1): bogus logical sector size 0 [ 118.491226][ T9389] FAT-fs (loop1): Can't find a valid FAT filesystem [ 118.608644][ T9402] loop1: detected capacity change from 0 to 1024 [ 118.615329][ T9402] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 118.673376][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'. [ 118.701701][ T9406] loop2: detected capacity change from 0 to 2048 [ 118.719509][ T4751] tipc: Node number set to 15444650 [ 118.726711][ T9406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.782977][ T8229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.831255][ T9411] loop2: detected capacity change from 0 to 256 [ 118.836442][ T9413] loop0: detected capacity change from 0 to 512 [ 118.845556][ T9413] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 118.860243][ T9413] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1958: invalid indirect mapped block 1 (level 1) [ 118.874290][ T9413] EXT4-fs (loop0): 1 truncate cleaned up [ 118.880226][ T9413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.936584][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1960'. [ 118.960208][ T8618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.995838][ T9420] loop2: detected capacity change from 0 to 1024 [ 119.013608][ T9420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.048155][ T8229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.058381][ T9429] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 119.068196][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1965'. [ 119.112749][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1967'. [ 119.161247][ T9445] loop0: detected capacity change from 0 to 512 [ 119.168367][ T9445] EXT4-fs: Ignoring removed nobh option [ 119.174259][ T9445] EXT4-fs: journaled quota format not specified [ 119.358962][ T9456] loop1: detected capacity change from 0 to 512 [ 119.371636][ T9456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.387160][ T9456] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.420226][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.625192][ T9482] bridge0: port 2(bridge_slave_1) entered listening state [ 119.665640][ T9493] loop0: detected capacity change from 0 to 512 [ 119.695844][ T9495] loop1: detected capacity change from 0 to 1024 [ 119.703663][ T9495] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.714865][ T9495] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 119.725679][ T9495] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.733350][ T9495] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1988: Invalid block bitmap block 0 in block_group 0 [ 119.750536][ T9495] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.1988: Failed to acquire dquot type 0 [ 119.763963][ T9495] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.1988: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.779035][ T9495] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1988: Invalid inode bitmap blk 0 in block_group 0 [ 119.796947][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6883: comm kworker/u8:3: Failed to release dquot type 0 [ 119.808846][ T9495] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 119.820547][ T9495] EXT4-fs (loop1): 1 orphan inode deleted [ 119.826923][ T9495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.885567][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.002332][ T9506] 9pnet_fd: Insufficient options for proto=fd [ 120.111947][ T9519] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1994'. [ 120.170346][ T3748] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.196011][ T9536] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1998'. [ 120.205007][ T9536] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1998'. [ 120.227767][ T9498] chnl_net:caif_netlink_parms(): no params data found [ 120.261579][ T3748] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.292661][ T9551] loop1: detected capacity change from 0 to 512 [ 120.301338][ T9551] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.319388][ T9551] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 120.335222][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.337555][ T9551] EXT4-fs (loop1): 1 truncate cleaned up [ 120.342354][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.348961][ T9551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.367819][ T9498] bridge_slave_0: entered allmulticast mode [ 120.374459][ T9498] bridge_slave_0: entered promiscuous mode [ 120.375861][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2001'. [ 120.381641][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.396505][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.405118][ T9498] bridge_slave_1: entered allmulticast mode [ 120.411976][ T9498] bridge_slave_1: entered promiscuous mode [ 120.425397][ T3748] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.477671][ T9498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.490120][ T9567] loop0: detected capacity change from 0 to 512 [ 120.494183][ T9498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.520649][ T9567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.541659][ T3748] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.546277][ T9567] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.591261][ T9498] team0: Port device team_slave_0 added [ 120.604867][ T9498] team0: Port device team_slave_1 added [ 120.634744][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.641771][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.667942][ T9498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.682968][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.690059][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.716151][ T9498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.753638][ T9498] hsr_slave_0: entered promiscuous mode [ 120.760818][ T9498] hsr_slave_1: entered promiscuous mode [ 120.766984][ T9498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.778804][ T9498] Cannot create hsr debugfs directory [ 120.794381][ T3748] bridge_slave_1: left allmulticast mode [ 120.800117][ T3748] bridge_slave_1: left promiscuous mode [ 120.805839][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.808210][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.823597][ T3748] bridge_slave_0: left allmulticast mode [ 120.829358][ T3748] bridge_slave_0: left promiscuous mode [ 120.835173][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.986700][ T3748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.998458][ T3748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.009484][ T3748] bond0 (unregistering): Released all slaves [ 121.024299][ T9586] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.097700][ T3748] hsr_slave_0: left promiscuous mode [ 121.103636][ T3748] hsr_slave_1: left promiscuous mode [ 121.109479][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.117058][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.125595][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.133108][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.144025][ T3748] veth0_macvtap: left promiscuous mode [ 121.149737][ T3748] veth1_vlan: left promiscuous mode [ 121.155046][ T3748] veth0_vlan: left promiscuous mode [ 121.233472][ T8618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.257975][ T3748] team0 (unregistering): Port device team_slave_1 removed [ 121.284910][ T3748] team0 (unregistering): Port device team_slave_0 removed [ 121.377989][ T9610] sg_write: data in/out 185/70 bytes for SCSI command 0x0-- guessing data in; [ 121.377989][ T9610] program syz.4.2024 not setting count and/or reply_len properly [ 121.528211][ T9629] loop0: detected capacity change from 0 to 512 [ 121.535325][ T9629] EXT4-fs: Mount option(s) incompatible with ext2 [ 121.983083][ T9498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.993453][ T9498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.014168][ T9498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.031198][ T9498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.063235][ T9654] syzkaller0: entered promiscuous mode [ 122.079770][ T9653] syzkaller0: left promiscuous mode [ 122.179908][ T9663] loop2: detected capacity change from 0 to 2048 [ 122.211521][ T9498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.251175][ T9663] loop2: unable to read partition table [ 122.257386][ T9663] loop2: partition table beyond EOD, truncated [ 122.263685][ T9663] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 122.371385][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 122.371402][ T29] audit: type=1400 audit(2000000073.067:3155): avc: denied { write } for pid=9669 comm="[[-" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.386738][ T9674] loop0: detected capacity change from 0 to 512 [ 122.409174][ T9674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.421267][ T9674] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.430559][ T9674] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 122.438987][ T9678] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.453989][ T9498] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.476659][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.483828][ T8747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.498527][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.505724][ T8747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.604303][ T9693] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 122.610042][ T9498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.748125][ T9498] veth0_vlan: entered promiscuous mode [ 122.772255][ T9715] loop2: detected capacity change from 0 to 1024 [ 122.779229][ T9498] veth1_vlan: entered promiscuous mode [ 122.791956][ T9715] EXT4-fs (loop2): inodes count not valid: 0 vs 32 [ 122.814382][ T9498] veth0_macvtap: entered promiscuous mode [ 122.839894][ T9498] veth1_macvtap: entered promiscuous mode [ 122.860240][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.870932][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.880946][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.891474][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.901480][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.912022][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.921999][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.932465][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.942362][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.952939][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.962796][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.973273][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.983135][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.986108][ T9708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21267 sclass=netlink_route_socket pid=9708 comm=syz.4.2060 [ 122.993799][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.993825][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.993854][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.037511][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.047994][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.060661][ T9498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.069861][ T9718] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 123.084592][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.095403][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.105474][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.116396][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.125288][ T29] audit: type=1400 audit(2000000073.759:3156): avc: denied { mount } for pid=9729 comm="syz.2.2067" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 123.126431][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.159256][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.169379][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.180069][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.189974][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.200406][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.210276][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.220711][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.230543][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.241038][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.251123][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.261686][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.271621][ T9498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.282199][ T9498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.297600][ T9498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.306764][ T9498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.315640][ T9498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.324498][ T9498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.333344][ T9498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.371660][ T9741] netlink: 'syz.0.2070': attribute type 10 has an invalid length. [ 123.382852][ T9741] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 123.392556][ T9741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.473986][ T9748] loop1: detected capacity change from 0 to 512 [ 123.486744][ T9752] __nla_validate_parse: 9 callbacks suppressed [ 123.486820][ T9752] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2074'. [ 123.510836][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2075'. [ 123.524083][ T8747] IPVS: starting estimator thread 0... [ 123.535515][ T9748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.550062][ T9754] netlink: 'syz.2.2075': attribute type 3 has an invalid length. [ 123.551669][ T9748] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.609508][ T29] audit: type=1400 audit(2000000074.202:3157): avc: denied { getopt } for pid=9770 comm="syz.3.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.614559][ T9748] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.2073: corrupted inode contents [ 123.629687][ T9755] IPVS: using max 2448 ests per chain, 122400 per kthread [ 123.657540][ T9748] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.2073: mark_inode_dirty error [ 123.673370][ T9748] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.2073: corrupted inode contents [ 123.692054][ T9780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26640 sclass=netlink_route_socket pid=9780 comm=syz.2.2083 [ 123.697686][ T9771] tap0: tun_chr_ioctl cmd 1074025694 [ 123.755795][ T9748] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2073: mark_inode_dirty error [ 123.801232][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.826356][ T9771] loop3: detected capacity change from 0 to 4096 [ 123.835215][ T9771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.886390][ T9857] loop0: detected capacity change from 0 to 164 [ 123.910255][ T9860] loop1: detected capacity change from 0 to 512 [ 123.918324][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 123.947510][ T29] audit: type=1400 audit(2000000074.525:3158): avc: denied { ioctl } for pid=9854 comm="syz.0.2089" path="socket:[32120]" dev="sockfs" ino=32120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.976455][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'. [ 123.979570][ T9860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.005140][ T9860] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.018632][ T9860] netlink: 'syz.1.2091': attribute type 10 has an invalid length. [ 124.019917][ T9498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.026806][ T9860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2091'. [ 124.044791][ T9860] tipc: Resetting bearer [ 124.069289][ T9860] team0: Port device geneve1 added [ 124.094006][ T9881] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.110727][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.148251][ T29] audit: type=1400 audit(2000000074.710:3159): avc: denied { map } for pid=9884 comm="syz.3.2095" path="socket:[32158]" dev="sockfs" ino=32158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.193027][ T29] audit: type=1326 audit(2000000074.710:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.0.2099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd3d19bd9 code=0x0 [ 124.216789][ T9894] bpf: Bad value for 'uid' [ 124.230408][ T9900] loop2: detected capacity change from 0 to 512 [ 124.237461][ T9900] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 124.246490][ T29] audit: type=1400 audit(2000000074.774:3161): avc: denied { remount } for pid=9892 comm="syz.4.2104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 124.283119][ T9894] sock: sock_set_timeout: `syz.4.2104' (pid 9894) tries to set negative timeout [ 124.312879][ T9900] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 124.352412][ T9910] loop0: detected capacity change from 0 to 1024 [ 124.361515][ T29] audit: type=1400 audit(2000000074.903:3162): avc: denied { unmount } for pid=8911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 124.393448][ T9910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.416796][ T9900] bridge0: entered promiscuous mode [ 124.416985][ T9922] rdma_op ffff888116461d80 conn xmit_rdma 0000000000000000 [ 124.422103][ T9900] bridge0: entered allmulticast mode [ 124.444056][ T29] audit: type=1326 audit(2000000074.977:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.4.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18111bd9 code=0x7ffc0000 [ 124.469821][ T29] audit: type=1326 audit(2000000074.977:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.4.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d18111bd9 code=0x7ffc0000 [ 124.581319][ T9928] FAULT_INJECTION: forcing a failure. [ 124.581319][ T9928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.594755][ T9928] CPU: 1 PID: 9928 Comm: syz.4.2114 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 124.606328][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 124.616421][ T9928] Call Trace: [ 124.619721][ T9928] [ 124.622668][ T9928] dump_stack_lvl+0xf2/0x150 [ 124.627490][ T9928] dump_stack+0x15/0x20 [ 124.631722][ T9928] should_fail_ex+0x229/0x230 [ 124.636509][ T9928] __should_fail_alloc_page+0xfd/0x110 [ 124.641993][ T9928] __alloc_pages_noprof+0x109/0x360 [ 124.647289][ T9928] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 124.652756][ T9928] shmem_get_folio_gfp+0x3e4/0xb70 [ 124.657900][ T9928] shmem_write_begin+0xa0/0x1c0 [ 124.662765][ T9928] generic_perform_write+0x1d5/0x410 [ 124.668198][ T9928] ? __pfx_shmem_write_end+0x10/0x10 [ 124.673606][ T9928] shmem_file_write_iter+0xc8/0xf0 [ 124.678742][ T9928] vfs_write+0x78f/0x900 [ 124.683124][ T9928] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 124.689027][ T9928] ksys_write+0xeb/0x1b0 [ 124.693297][ T9928] __x64_sys_write+0x42/0x50 [ 124.698005][ T9928] x64_sys_call+0x27ef/0x2d70 [ 124.702700][ T9928] do_syscall_64+0xc9/0x1c0 [ 124.707224][ T9928] ? clear_bhb_loop+0x55/0xb0 [ 124.711935][ T9928] ? clear_bhb_loop+0x55/0xb0 [ 124.716717][ T9928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.722662][ T9928] RIP: 0033:0x7f1d1811075f [ 124.727157][ T9928] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 124.746788][ T9928] RSP: 002b:00007f1d17392e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 124.755208][ T9928] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f1d1811075f [ 124.763212][ T9928] RDX: 0000000000080000 RSI: 00007f1d0ef73000 RDI: 0000000000000008 [ 124.771240][ T9928] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000061f [ 124.779342][ T9928] R10: 00000000000003c4 R11: 0000000000000293 R12: 0000000000000008 [ 124.787353][ T9928] R13: 00007f1d17392f00 R14: 00007f1d17392ec0 R15: 00007f1d0ef73000 [ 124.795387][ T9928] [ 124.824202][ T9933] Cannot find add_set index 0 as target [ 124.839180][ T9933] usb usb8: usbfs: process 9933 (syz.3.2117) did not claim interface 0 before use [ 124.883183][ T9939] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2119'. [ 124.990410][ T8618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.118082][ T9955] loop0: detected capacity change from 0 to 128 [ 125.127448][ T9955] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.138259][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2123'. [ 125.145100][ T9955] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.228587][ T9955] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 125.292800][ T9965] loop2: detected capacity change from 0 to 512 [ 125.352118][ T9955] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 125.364534][ T9965] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.2130: corrupted in-inode xattr: invalid ea_ino [ 125.383452][ T8618] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.389365][ T9965] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2130: couldn't read orphan inode 12 (err -117) [ 125.400503][ T9972] FAULT_INJECTION: forcing a failure. [ 125.400503][ T9972] name failslab, interval 1, probability 0, space 0, times 0 [ 125.417030][ T9972] CPU: 0 PID: 9972 Comm: syz.4.2134 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 125.422399][ T9965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.428628][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.428645][ T9972] Call Trace: [ 125.428654][ T9972] [ 125.428663][ T9972] dump_stack_lvl+0xf2/0x150 [ 125.461572][ T9972] dump_stack+0x15/0x20 [ 125.465873][ T9972] should_fail_ex+0x229/0x230 [ 125.470561][ T9972] ? alloc_empty_file+0xd0/0x310 [ 125.475513][ T9972] __should_failslab+0x92/0xa0 [ 125.480368][ T9972] should_failslab+0x9/0x20 [ 125.484891][ T9972] kmem_cache_alloc_noprof+0x4c/0x290 [ 125.490311][ T9972] alloc_empty_file+0xd0/0x310 [ 125.495085][ T9972] alloc_file_pseudo+0xc3/0x140 [ 125.500040][ T9972] __shmem_file_setup+0x1bb/0x1f0 [ 125.505091][ T9972] shmem_file_setup+0x3b/0x50 [ 125.509792][ T9972] __se_sys_memfd_create+0x31d/0x600 [ 125.515167][ T9972] __x64_sys_memfd_create+0x31/0x40 [ 125.520405][ T9972] x64_sys_call+0x28b7/0x2d70 [ 125.525257][ T9972] do_syscall_64+0xc9/0x1c0 [ 125.529793][ T9972] ? clear_bhb_loop+0x55/0xb0 [ 125.534576][ T9972] ? clear_bhb_loop+0x55/0xb0 [ 125.539318][ T9972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.545233][ T9972] RIP: 0033:0x7f1d18111bd9 [ 125.549655][ T9972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.569293][ T9972] RSP: 002b:00007f1d17392d78 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 125.577713][ T9972] RAX: ffffffffffffffda RBX: 0000000000001058 RCX: 00007f1d18111bd9 [ 125.585775][ T9972] RDX: 00007f1d17392dfc RSI: 0000000000000000 RDI: 00007f1d1817fd24 [ 125.593797][ T9972] RBP: 0000000020001080 R08: 00007f1d17392b17 R09: 0000000000000000 [ 125.601926][ T9972] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 125.610154][ T9972] R13: 00007f1d17392dfc R14: 00007f1d17392e00 R15: 00007ffd2b6c4538 [ 125.618138][ T9972] [ 125.626376][ T9974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 125.698742][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'. [ 125.889231][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 125.944036][T10014] loop0: detected capacity change from 0 to 8192 [ 125.957509][ T8229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.996538][T10014] loop0: p2 p3 p4 [ 126.001694][T10014] loop0: p2 size 64053 extends beyond EOD, truncated [ 126.009172][T10018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.017630][T10014] loop0: p3 start 458496 is beyond EOD, truncated [ 126.024190][T10014] loop0: p4 size 50331648 extends beyond EOD, truncated [ 126.151016][T10022] loop2: detected capacity change from 0 to 8192 [ 126.184405][T10022] loop2: p2 p3 p4 [ 126.188565][T10022] loop2: p2 start 452985600 is beyond EOD, truncated [ 126.188589][T10022] loop2: p3 size 33554432 extends beyond EOD, truncated [ 126.191644][T10022] loop2: p4 start 8388607 is beyond EOD, truncated [ 126.221636][T10039] loop3: detected capacity change from 0 to 512 [ 126.235924][T10039] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz.3.2155: iget: special inode unallocated [ 126.249502][T10039] EXT4-fs (loop3): get root inode failed [ 126.255422][T10039] EXT4-fs (loop3): mount failed [ 126.345314][T10046] loop3: detected capacity change from 0 to 256 [ 126.402494][T10052] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2158'. [ 126.506413][T10061] loop3: detected capacity change from 0 to 2048 [ 126.532516][T10061] Process accounting resumed [ 126.545882][T10061] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.563652][T10061] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 126.576014][T10061] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.576014][T10061] [ 126.585719][T10061] EXT4-fs (loop3): Total free blocks count 0 [ 126.591718][T10061] EXT4-fs (loop3): Free/Dirty block details [ 126.597749][T10061] EXT4-fs (loop3): free_blocks=2415919104 [ 126.603508][T10061] EXT4-fs (loop3): dirty_blocks=16 [ 126.608734][T10061] EXT4-fs (loop3): Block reservation details [ 126.614756][T10061] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 126.632253][ T9498] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 126.644565][ T9498] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.644565][ T9498] [ 126.661343][T10065] syz.4.2163 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.673531][T10069] tipc: Started in network mode [ 126.678446][T10069] tipc: Node identity e0000001, cluster identity 4711 [ 126.685342][T10069] tipc: Enabling of bearer rejected, failed to enable media [ 126.745770][T10081] netlink: 'syz.1.2171': attribute type 10 has an invalid length. [ 126.768071][T10086] loop0: detected capacity change from 0 to 256 [ 126.777043][T10086] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.822466][T10101] loop1: detected capacity change from 0 to 512 [ 126.833360][T10104] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.849317][T10101] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz.1.2179: iget: special inode unallocated [ 126.849693][T10101] EXT4-fs (loop1): get root inode failed [ 126.867461][T10101] EXT4-fs (loop1): mount failed [ 126.920227][T10101] loop1: detected capacity change from 0 to 1024 [ 126.954820][T10104] xt_CT: No such helper "snmp" [ 127.151233][T10134] loop0: detected capacity change from 0 to 256 [ 127.176769][T10134] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.194685][T10142] IPv6: NLM_F_REPLACE set, but no existing node found! [ 127.226687][T10152] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 127.307722][T10170] 9pnet_fd: Insufficient options for proto=fd [ 127.314331][T10171] 9pnet_fd: Insufficient options for proto=fd [ 127.321905][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 127.400418][T10186] loop2: detected capacity change from 0 to 512 [ 127.433305][T10186] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 127.438113][T10194] dummy0: entered promiscuous mode [ 127.441735][T10186] System zones: 0-2, 18-18, 34-34 [ 127.452710][T10194] dummy0: left promiscuous mode [ 127.461703][T10186] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2207: bg 0: block 248: padding at end of block bitmap is not set [ 127.477370][T10186] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.2207: Failed to acquire dquot type 1 [ 127.499932][T10186] EXT4-fs (loop2): 1 truncate cleaned up [ 127.507288][T10186] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.667745][T10247] loop0: detected capacity change from 0 to 1024 [ 127.741808][T10247] loop0: detected capacity change from 0 to 256 [ 127.774372][T10247] FAT-fs (loop0): Directory bread(block 64) failed [ 127.796640][T10247] FAT-fs (loop0): Directory bread(block 65) failed [ 127.811710][T10268] devpts: called with bogus options [ 127.817502][T10247] FAT-fs (loop0): Directory bread(block 66) failed [ 127.828172][T10247] FAT-fs (loop0): Directory bread(block 67) failed [ 127.834901][T10247] FAT-fs (loop0): Directory bread(block 68) failed [ 127.841702][T10247] FAT-fs (loop0): Directory bread(block 69) failed [ 127.858698][T10247] FAT-fs (loop0): Directory bread(block 70) failed [ 127.870848][T10247] FAT-fs (loop0): Directory bread(block 71) failed [ 127.879660][T10247] FAT-fs (loop0): Directory bread(block 72) failed [ 127.889598][T10247] FAT-fs (loop0): Directory bread(block 73) failed [ 128.027685][T10291] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 8388608, id = 0 [ 128.065457][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 128.065488][ T29] audit: type=1400 audit(2000000002.187:3210): avc: denied { write } for pid=10296 comm="syz.0.2249" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.149844][ T29] audit: type=1400 audit(2000000002.261:3211): avc: denied { tracepoint } for pid=10302 comm="syz.0.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.204532][T10317] netem: change failed [ 128.322783][ T29] audit: type=1400 audit(2000000002.427:3212): avc: denied { view } for pid=10327 comm="syz.4.2260" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 128.421015][T10333] xt_TCPMSS: Only works on TCP SYN packets [ 128.465183][ T29] audit: type=1326 audit(2000000002.556:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.2264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d18111bd9 code=0x0 [ 128.488460][ T29] audit: type=1326 audit(2000000002.556:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.2264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d18111bd9 code=0x0 [ 128.519141][ T29] audit: type=1326 audit(2000000002.602:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.4.2264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d18111bd9 code=0x0 [ 128.605202][T10346] loop1: detected capacity change from 0 to 128 [ 128.613987][T10346] openvswitch: netlink: VXLAN extension 15664 out of range max 1 [ 128.733584][T10355] IPVS: Unknown mcast interface: ipvlan1 [ 128.967955][ T29] audit: type=1400 audit(2000000003.018:3216): avc: denied { remount } for pid=10376 comm="syz.2.2278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 129.075620][T10387] loop1: detected capacity change from 0 to 8192 [ 129.082619][ T29] audit: type=1326 audit(2000000003.128:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.3.2284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f299e147bd9 code=0x0 [ 129.106797][T10387] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.121949][T10400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45073 sclass=netlink_route_socket pid=10400 comm=syz.4.2285 [ 129.149308][T10405] __nla_validate_parse: 8 callbacks suppressed [ 129.149327][T10405] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2286'. [ 129.231783][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 129.240755][T10420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2293'. [ 129.249763][T10422] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2294'. [ 129.277546][T10424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10424 comm=syz.0.2295 [ 129.355964][T10440] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 129.414129][T10457] loop0: detected capacity change from 0 to 512 [ 129.421178][T10457] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 129.434216][T10457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 129.442478][T10457] System zones: 1-12 [ 129.449254][T10457] EXT4-fs (loop0): orphan cleanup on readonly fs [ 129.455655][T10457] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.2308: Inode bitmap for bg 0 marked uninitialized [ 129.463943][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'. [ 129.481722][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 129.488205][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.496070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.503884][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.511734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.519551][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.527435][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.532570][T10457] ext4: Unknown parameter 'éÑ¿f§G“(—_þ3©¤»1;' [ 129.535282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.545694][T10465] ext4: Unknown parameter 'éÑ¿f§G“(—_þ3©¤»1;' [ 129.549148][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.555786][T10457] EXT4-fs error (device loop0): ext4_map_blocks:580: inode #2: block 5: comm syz.0.2308: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.562990][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.563029][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.584639][T10457] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz.0.2308: error -117 reading directory block [ 129.605084][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.612942][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.620781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.628606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.636446][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.644269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.652100][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.660048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.667886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.675723][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.683536][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.691389][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.699223][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.707064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.714879][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.722726][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.730548][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.738368][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.746632][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.754564][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.762403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.770232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.778104][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.785951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.793821][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.801652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.809464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.817304][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.825209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.833038][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.840865][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.848778][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.856606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.864465][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.872288][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.880121][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.888049][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.895894][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.903739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.911612][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.919423][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.927287][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.935120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.942976][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.950812][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.958661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.966766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.974613][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.982461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.990312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.998160][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.005981][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.013848][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.052906][T10472] netlink: 'syz.2.2314': attribute type 6 has an invalid length. [ 130.093442][T10478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2312'. [ 130.113886][ T29] audit: type=1400 audit(2000000004.070:3218): avc: denied { getopt } for pid=10479 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.134862][T10481] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 130.141502][T10481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.149079][T10481] vhci_hcd vhci_hcd.0: Device attached [ 130.156873][T10484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2319'. [ 130.180740][T10490] IPv6: Can't replace route, no match found [ 130.202513][T10489] bond2: entered promiscuous mode [ 130.207691][T10489] bond2: entered allmulticast mode [ 130.213001][T10489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.221823][T10493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2322'. [ 130.230994][T10493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2322'. [ 130.251612][ T29] audit: type=1326 audit(2000000004.208:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10494 comm="syz.1.2323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f736bf1bbd9 code=0x0 [ 130.333209][T10509] lo: entered promiscuous mode [ 130.338101][T10509] lo: entered allmulticast mode [ 130.373646][T10515] netlink: 'syz.0.2327': attribute type 8 has an invalid length. [ 130.381525][ T3164] vhci_hcd: vhci_device speed not set [ 130.401022][T10519] loop0: detected capacity change from 0 to 512 [ 130.416627][T10519] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.452973][ T3164] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 130.487904][T10532] loop2: detected capacity change from 0 to 512 [ 130.501349][T10530] loop0: detected capacity change from 0 to 1024 [ 130.510416][T10532] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.526520][T10532] EXT4-fs: Cannot change quota options when quota turned on [ 130.536290][T10530] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.592271][T10542] FAULT_INJECTION: forcing a failure. [ 130.592271][T10542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.605515][T10542] CPU: 0 PID: 10542 Comm: syz.4.2342 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 130.617170][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 130.627275][T10542] Call Trace: [ 130.630598][T10542] [ 130.633534][T10542] dump_stack_lvl+0xf2/0x150 [ 130.638170][T10542] dump_stack+0x15/0x20 [ 130.642360][T10542] should_fail_ex+0x229/0x230 [ 130.647048][T10542] should_fail+0xb/0x10 [ 130.651214][T10542] should_fail_usercopy+0x1a/0x20 [ 130.656256][T10542] _copy_from_user+0x1e/0xd0 [ 130.660858][T10542] input_event_from_user+0x126/0x1e0 [ 130.666242][T10542] ? input_inject_event+0xe1/0x100 [ 130.671370][T10542] evdev_write+0x288/0x420 [ 130.675932][T10542] ? __pfx_evdev_write+0x10/0x10 [ 130.680890][T10542] vfs_write+0x28b/0x900 [ 130.685153][T10542] ? __fget_files+0x1da/0x210 [ 130.689851][T10542] ksys_write+0xeb/0x1b0 [ 130.694114][T10542] __x64_sys_write+0x42/0x50 [ 130.698864][T10542] x64_sys_call+0x27ef/0x2d70 [ 130.703664][T10542] do_syscall_64+0xc9/0x1c0 [ 130.708199][T10542] ? clear_bhb_loop+0x55/0xb0 [ 130.712891][T10542] ? clear_bhb_loop+0x55/0xb0 [ 130.717615][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.723602][T10542] RIP: 0033:0x7f1d18111bd9 [ 130.728026][T10542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.747704][T10542] RSP: 002b:00007f1d17393048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.756172][T10542] RAX: ffffffffffffffda RBX: 00007f1d1829ff60 RCX: 00007f1d18111bd9 [ 130.764194][T10542] RDX: 00000000000012d8 RSI: 0000000020000040 RDI: 0000000000000003 [ 130.772170][T10542] RBP: 00007f1d173930a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.780223][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.788224][T10542] R13: 000000000000000b R14: 00007f1d1829ff60 R15: 00007ffd2b6c4538 [ 130.796245][T10542] [ 130.808808][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'. [ 130.850245][T10485] vhci_hcd: connection reset by peer [ 130.866300][ T9839] vhci_hcd: stop threads [ 130.870608][ T9839] vhci_hcd: release socket [ 130.875062][ T9839] vhci_hcd: disconnect device [ 130.914603][T10579] loop3: detected capacity change from 0 to 512 [ 130.936380][T10579] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.195792][T10608] syzkaller0: entered allmulticast mode [ 131.281471][T10619] FAULT_INJECTION: forcing a failure. [ 131.281471][T10619] name failslab, interval 1, probability 0, space 0, times 0 [ 131.294261][T10619] CPU: 1 PID: 10619 Comm: syz.1.2364 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 131.305942][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 131.316010][T10619] Call Trace: [ 131.319306][T10619] [ 131.322294][T10619] dump_stack_lvl+0xf2/0x150 [ 131.326922][T10619] dump_stack+0x15/0x20 [ 131.331188][T10619] should_fail_ex+0x229/0x230 [ 131.335953][T10619] ? io_cqring_event_overflow+0x5a/0x300 [ 131.341667][T10619] __should_failslab+0x92/0xa0 [ 131.346513][T10619] should_failslab+0x9/0x20 [ 131.351140][T10619] __kmalloc_noprof+0xa5/0x370 [ 131.355945][T10619] io_cqring_event_overflow+0x5a/0x300 [ 131.361465][T10619] io_req_cqe_overflow+0x89/0xb0 [ 131.366436][T10619] __io_submit_flush_completions+0x34e/0xa00 [ 131.372502][T10619] io_submit_sqes+0xe91/0x1080 [ 131.377300][T10619] ? kstrtouint_from_user+0xb0/0xe0 [ 131.382526][T10619] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 131.388162][T10619] ? __fget_files+0x1da/0x210 [ 131.392913][T10619] ? fput+0x13b/0x180 [ 131.397052][T10619] ? ksys_write+0x178/0x1b0 [ 131.401677][T10619] __x64_sys_io_uring_enter+0x78/0x90 [ 131.407155][T10619] x64_sys_call+0x25ab/0x2d70 [ 131.411866][T10619] do_syscall_64+0xc9/0x1c0 [ 131.416574][T10619] ? clear_bhb_loop+0x55/0xb0 [ 131.421370][T10619] ? clear_bhb_loop+0x55/0xb0 [ 131.426148][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.432170][T10619] RIP: 0033:0x7f736bf1bbd9 [ 131.436596][T10619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.456303][T10619] RSP: 002b:00007f736b19d048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 131.464857][T10619] RAX: ffffffffffffffda RBX: 00007f736c0a9f60 RCX: 00007f736bf1bbd9 [ 131.472853][T10619] RDX: 0000000000000000 RSI: 0000000000002def RDI: 0000000000000005 [ 131.480844][T10619] RBP: 00007f736b19d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.488844][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.496845][T10619] R13: 000000000000000b R14: 00007f736c0a9f60 R15: 00007fff1e099438 [ 131.504898][T10619] [ 131.550212][T10621] netlink: 'syz.1.2365': attribute type 10 has an invalid length. [ 131.888597][T10632] ebt_among: dst integrity fail: 101 [ 131.931690][T10638] netlink: 'syz.1.2374': attribute type 8 has an invalid length. [ 131.931962][T10640] loop0: detected capacity change from 0 to 256 [ 131.976089][T10642] 9pnet: p9_errstr2errno: server reported unknown error [ 132.034214][T10647] loop1: detected capacity change from 0 to 512 [ 132.059835][T10660] loop0: detected capacity change from 0 to 1024 [ 132.068075][T10660] ext4: Bad value for 'max_dir_size_kb' [ 132.075356][T10647] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.090689][T10647] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.2377: corrupted inode contents [ 132.091368][T10666] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.114928][T10647] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.2377: mark_inode_dirty error [ 132.126900][T10647] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.2377: corrupted inode contents [ 132.139336][T10647] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2377: mark_inode_dirty error [ 132.182946][T10670] loop0: detected capacity change from 0 to 2048 [ 132.233869][T10676] loop1: detected capacity change from 0 to 1024 [ 132.241375][T10676] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.362684][T10686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.523535][T10697] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.570459][ T9839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.658773][ T9839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.741024][T10701] loop0: detected capacity change from 0 to 764 [ 132.790754][ T9839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.832973][ T9839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.910707][T10702] chnl_net:caif_netlink_parms(): no params data found [ 132.929275][ T9839] bridge_slave_0: left allmulticast mode [ 132.935211][ T9839] bridge_slave_0: left promiscuous mode [ 132.941002][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.110501][ T9839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.178915][T10724] loop3: detected capacity change from 0 to 512 [ 133.190069][ T9839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.200935][T10724] EXT4-fs (loop3): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 133.219183][ T9839] bond0 (unregistering): Released all slaves [ 133.237614][ T9839] bond1 (unregistering): Released all slaves [ 133.254046][ T9839] bond2 (unregistering): Released all slaves [ 133.296289][T10726] loop3: detected capacity change from 0 to 512 [ 133.327379][T10726] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.351995][T10728] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072802358528) [ 133.362782][T10728] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 133.400019][ T9839] hsr_slave_0: left promiscuous mode [ 133.406516][ T9839] hsr_slave_1: left promiscuous mode [ 133.416099][ T9839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.423787][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.439086][ T9839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.446613][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.464669][ T9839] veth1_macvtap: left promiscuous mode [ 133.470396][ T9839] veth1_vlan: left promiscuous mode [ 133.475674][ T9839] veth0_vlan: left promiscuous mode [ 133.515128][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 133.515145][ T29] audit: type=1326 audit(2000000007.217:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.548390][T10740] ebt_among: dst integrity fail: 101 [ 133.555240][ T29] audit: type=1326 audit(2000000007.217:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.579153][ T29] audit: type=1326 audit(2000000007.217:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.603204][ T29] audit: type=1326 audit(2000000007.217:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.626986][ T29] audit: type=1326 audit(2000000007.217:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.650523][ T29] audit: type=1326 audit(2000000007.217:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.674297][ T29] audit: type=1326 audit(2000000007.217:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.697933][ T29] audit: type=1326 audit(2000000007.217:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.721443][ T29] audit: type=1326 audit(2000000007.217:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.745078][ T29] audit: type=1326 audit(2000000007.217:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10736 comm="syz.1.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736bf1bbd9 code=0x7ffc0000 [ 133.865594][ T9839] team0 (unregistering): Port device team_slave_1 removed [ 133.881583][ T9839] team0 (unregistering): Port device team_slave_0 removed [ 133.895157][T10752] loop0: detected capacity change from 0 to 2048 [ 133.920018][T10752] EXT4-fs: Ignoring removed bh option [ 133.925674][T10752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.952354][T10752] EXT4-fs: quotafile must be on filesystem root [ 133.968271][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.975483][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.982918][T10702] bridge_slave_0: entered allmulticast mode [ 133.992135][T10702] bridge_slave_0: entered promiscuous mode [ 133.999619][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.006812][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.018113][T10702] bridge_slave_1: entered allmulticast mode [ 134.034935][T10702] bridge_slave_1: entered promiscuous mode [ 134.069179][T10702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.092974][T10763] loop0: detected capacity change from 0 to 512 [ 134.095660][T10702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.119953][T10763] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.134201][T10770] loop3: detected capacity change from 0 to 512 [ 134.152955][T10770] EXT4-fs: Ignoring removed i_version option [ 134.163297][T10770] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 134.166759][T10702] team0: Port device team_slave_0 added [ 134.188902][T10702] team0: Port device team_slave_1 added [ 134.213001][T10702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.220070][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.246236][T10702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.260197][T10702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.267245][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.293238][T10702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.337317][T10702] hsr_slave_0: entered promiscuous mode [ 134.364802][T10702] hsr_slave_1: entered promiscuous mode [ 134.371238][T10702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.386823][T10702] Cannot create hsr debugfs directory [ 134.413143][T10782] ebt_among: dst integrity fail: 101 [ 134.875259][T10702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.915767][T10702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.943353][T10702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.988107][T10702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.074722][T10814] __nla_validate_parse: 7 callbacks suppressed [ 135.074741][T10814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2431'. [ 135.141798][T10702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.160910][T10702] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.177853][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.184973][ T8742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.230659][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.237815][ T8742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.360204][T10702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.500803][T10861] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2444'. [ 135.527227][T10702] veth0_vlan: entered promiscuous mode [ 135.534718][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2440'. [ 135.547077][T10702] veth1_vlan: entered promiscuous mode [ 135.552896][T10861] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2444'. [ 135.559877][T10864] loop3: detected capacity change from 0 to 1024 [ 135.575882][T10864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.590152][T10702] veth0_macvtap: entered promiscuous mode [ 135.598521][T10702] veth1_macvtap: entered promiscuous mode [ 135.615864][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.626594][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.636584][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.647532][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.657784][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.668309][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.678286][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.688784][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.698614][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.709092][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.719176][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.729825][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.739767][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.750216][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.760083][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.770528][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.780357][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.790822][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.802782][T10702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.815076][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.825609][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.835559][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.846053][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.855937][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.866432][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.876301][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.886754][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.896595][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.907089][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.916511][ T3164] usb 7-1: enqueue for inactive port 0 [ 135.916947][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.922402][ T3164] usb 7-1: enqueue for inactive port 0 [ 135.932856][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.948277][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.958785][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.968714][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.979181][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.989255][T10702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.999732][T10702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.012047][T10702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.022000][ T3164] vhci_hcd: vhci_device speed not set [ 136.037059][T10702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.045958][T10702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.054767][T10702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.054808][T10702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.088584][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2449'. [ 136.178354][T10885] loop1: detected capacity change from 0 to 512 [ 136.238788][T10894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2454'. [ 136.258405][T10891] loop3: detected capacity change from 0 to 2048 [ 136.319559][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 136.396683][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2459'. [ 136.426006][T10907] loop0: detected capacity change from 0 to 2048 [ 136.446497][T10911] loop1: detected capacity change from 0 to 164 [ 136.450602][T10910] loop3: detected capacity change from 0 to 512 [ 136.459822][T10911] ================================================================== [ 136.467961][T10911] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 136.475337][T10911] [ 136.477657][T10911] write to 0xffff888237c2b990 of 8 bytes by task 10907 on cpu 0: [ 136.485373][T10911] invalidate_bh_lru+0x8b/0xf0 [ 136.490169][T10911] smp_call_function_many_cond+0x690/0xc20 [ 136.496007][T10911] on_each_cpu_cond_mask+0x3c/0x90 [ 136.501147][T10911] invalidate_bh_lrus+0x2a/0x30 [ 136.506101][T10911] invalidate_bdev+0x42/0x70 [ 136.510718][T10911] loop_set_status+0x114/0x550 [ 136.513206][T10910] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.515500][T10911] lo_ioctl+0x892/0x1330 [ 136.530108][T10911] blkdev_ioctl+0x35f/0x450 [ 136.534646][T10911] __se_sys_ioctl+0xd3/0x150 [ 136.539281][T10911] __x64_sys_ioctl+0x43/0x50 [ 136.543915][T10911] x64_sys_call+0x1581/0x2d70 [ 136.548682][T10911] do_syscall_64+0xc9/0x1c0 [ 136.553249][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.559169][T10911] [ 136.561491][T10911] read to 0xffff888237c2b990 of 8 bytes by task 10911 on cpu 1: [ 136.569117][T10911] has_bh_in_lru+0x35/0x1f0 [ 136.573621][T10911] smp_call_function_many_cond+0x2d5/0xc20 [ 136.579427][T10911] on_each_cpu_cond_mask+0x3c/0x90 [ 136.584546][T10911] invalidate_bh_lrus+0x2a/0x30 [ 136.589427][T10911] set_blocksize+0x283/0x2b0 [ 136.594037][T10911] sb_set_blocksize+0x2c/0xb0 [ 136.598826][T10911] isofs_fill_super+0xa2a/0x12a0 [ 136.603770][T10911] get_tree_bdev+0x253/0x2e0 [ 136.608393][T10911] isofs_get_tree+0x1c/0x30 [ 136.612921][T10911] vfs_get_tree+0x56/0x1d0 [ 136.617355][T10911] do_new_mount+0x227/0x690 [ 136.621868][T10911] path_mount+0x49b/0xb30 [ 136.626201][T10911] __se_sys_mount+0x27f/0x2d0 [ 136.630890][T10911] __x64_sys_mount+0x67/0x80 [ 136.635483][T10911] x64_sys_call+0x25c9/0x2d70 [ 136.640178][T10911] do_syscall_64+0xc9/0x1c0 [ 136.644695][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.650609][T10911] [ 136.652922][T10911] value changed: 0xffff8881048cfa90 -> 0x0000000000000000 [ 136.660028][T10911] [ 136.662381][T10911] Reported by Kernel Concurrency Sanitizer on: [ 136.668618][T10911] CPU: 1 PID: 10911 Comm: syz.1.2455 Tainted: G W 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 136.680257][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 136.690349][T10911] ================================================================== [ 136.717030][T10907] loop0: detected capacity change from 2048 to 2047 [ 136.724055][T10918] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #18: comm syz.0.2461: corrupted in-inode xattr: bad magic number in in-inode xattr [ 136.744991][ T8618] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /154/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=1937076323, rec_len=29797, size=2048 fake=0 [ 137.021971][ T9839] bridge_slave_1: left allmulticast mode [ 137.027656][ T9839] bridge_slave_1: left promiscuous mode [ 137.034280][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.042159][ T9839] bridge_slave_0: left allmulticast mode [ 137.047814][ T9839] bridge_slave_0: left promiscuous mode [ 137.053518][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.184410][ T9839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.194224][ T9839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.204008][ T9839] bond0 (unregistering): Released all slaves [ 137.236160][ T9839] tipc: Left network mode [ 137.333234][ T9839] IPVS: stopping backup sync thread 10291 ... [ 137.341819][ T9839] hsr_slave_0: left promiscuous mode [ 137.348282][ T9839] hsr_slave_1: left promiscuous mode [ 137.354173][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.362712][ T9839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.365649][ T9498] EXT4-fs unmount: 35 callbacks suppressed [ 137.365669][ T9498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.425485][ T9839] team0 (unregistering): Port device team_slave_1 removed [ 137.437073][ T9839] team0 (unregistering): Port device team_slave_0 removed [ 137.706872][ T9839] IPVS: stop unused estimator thread 0...