last executing test programs: 3.157171182s ago: executing program 4 (id=702): r0 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) 3.129415144s ago: executing program 4 (id=703): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41555856, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000780)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)="5a5aa9e52388bdc1be689aca4fd6b57f92d7a91ebccf25026cb76c010ec08878fe82b6bae3ffee079de6b0d4f7e319333311174effc2103478ba681c023a2037302c0f23880b1a5c0918a5caf7f0b9145b33edba45b1d5f441a2a972c4", 0x5d}, {&(0x7f0000000480)="8b57762dcc78e7a53958ddf5270f0c70111507c546ee9a67d651", 0x1a}], 0x2}}, {{&(0x7f0000001800)=@phonet={0x23, 0x3, 0x7}, 0x80, 0x0}}], 0x2, 0x44044) recvmmsg(r1, &(0x7f0000002a00), 0x1, 0x40000145, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2000000000000066, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfb9000000000000070200fff8ffffffb703000008000000b704000097eb39498500000058000000950000e9000000007eba0243f7ce1f2e59d34bd237202084226811a57acb747b29381d61b242ab2010bf854dce7066c494017789637f7bc79a49347b7bcf8cad18f66b0286"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xfffffffc, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x3, &(0x7f00000004c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000500)=[{0x0, 0x1, 0xf, 0x1}, {0x5, 0x3, 0x1}, {0x2, 0x2, 0x6, 0x2}], 0x10, 0x2}, 0x90) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x14295, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x6263, &(0x7f0000000000)={0x0, 0x4000000, 0x1, 0x0, 0xca, 0x0, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback, 0xfffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e580e", '\x00', "fffffffffffffffd"}, 0x38) write$binfmt_script(r8, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) 2.915541472s ago: executing program 4 (id=705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [], {0x14, 0x11, 0x1, 0x4}}, 0x28}}, 0x0) unshare(0x22020400) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8a2}}]}}, 0x0, 0x4e}, 0x20) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000010000007020000f8ffffffb7030000feffffffb704e40000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0xfec, &(0x7f0000002300)=""/4076, 0x41100}, 0x90) 2.821035439s ago: executing program 2 (id=707): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d00)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a44000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000040003800900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff00000000000000008500000053000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) shutdown(r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)="e29c891ec90ec2d36cafd60d7434ef14e45bb60341f22328fcbbde877b387f5dbaff7c0dcb4ab180ef4f3c96f07a6a8fff834d6cb4b67c6fd4ab85360eb791f6811c39cf72502cf8bfb6a40496daf2efa219d5f6a53dc79b24fd7f89a54583169f49d3d62d44f525285b7311", 0xffffff02}], 0x1}, 0x4008) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) keyctl$session_to_parent(0x12) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r7, 0x31f}, 0x14}}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0000080001fffe0000003d00000046000040000010783fffffffac1414aa00000000762840145d640cb4981c646ebc0233bbd5382d2088fdb207b467d9bf33e61f3c922527273dda967849af6e448579398ae8064f27061c07141ba80c6ba140594e79b3944a72a0d5cce4b8e2ec7dc4471e5167eaefe3490476e72ba9d90bf84a955844b6dcf33e2db39912852a63fe1b51dc42bacd1d7a68f24fecae408216c8e335f57b4b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000500907800000b0300050246000040460000400002d58838068b91000000"], 0x4e) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1ff}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 2.768788363s ago: executing program 1 (id=708): unshare(0x22020400) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2.711057008s ago: executing program 1 (id=709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000002300000095"], &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="160a0000000000006110ac000000000095000f0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x80140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2, 0xfe}, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0xffffffffffffffff, 0x0, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='io_uring_complete\x00', r0}, 0xfffffffffffffe7c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) unshare(0x22020400) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2.581592139s ago: executing program 2 (id=710): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x4, 0xa10, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x28, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000088000000bf0900000000000035090100000000009500000000000000980a0000fcffffff18120000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000182a0000", @ANYRES32, @ANYBLOB="0000000003000000bf9100000000000056070000000000008500000000000000b700b596675620fb644f00f70000000032ab3a8a4b63f938f86550ec31cf42c70b8390616b35c40d867ec42b4554c02516f5b8f524f4a73d917f79bde5ec0dfd809ce3abc47069af44f40a1b1af135b650678a65423b5200f75c25cad8cf741ecdf6a1a37c7dfc5ce65b1532bef52eb376219c29a56b0b2eea729519cd1b4dd559fe2a4b34075916914679104340000000000000000000", @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x10000000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8005) 2.066150201s ago: executing program 4 (id=714): r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001140)={'batadv_slave_0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001440)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='cachefiles_mark_failed\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={0x1, 0x0, 0x3, 0x0, 0x2, 0x0, 0x20, 0x1}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x108314, 0x0, 0x6, 0x9, 0x4, 0x8002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = eventfd2(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x11}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0) shutdown(r4, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = accept$inet6(r3, 0x0, &(0x7f00000000c0)) getpeername$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000008009f40f791000000000000000000850000008a00000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1.942859411s ago: executing program 1 (id=717): r0 = memfd_create(&(0x7f0000000040)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x406, r2) ftruncate(r3, 0x401) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x1d}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001dc0)=@newtfilter={0x3ec4, 0x2c, 0x0, 0x200, 0x0, {}, [@TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0x3e90, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xf, 0xfff1}}, @TCA_U32_ACT={0x3e84, 0x7, [@m_pedit={0x3c24, 0x1a, 0x0, 0x0, {{0xa}, {0x2bf8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xb0c, 0x2, 0xffffffffeffffff6, 0x0, 0x700}, 0x2, 0x7f}, [{0x5ef, 0x7, 0x2, 0x1ff, 0x4, 0x10000}, {0x6, 0x9, 0x800, 0x8, 0x0, 0x6}, {0xfffffffe, 0x3c, 0x5dde, 0x1, 0x5, 0x6}, {0x5, 0x3, 0x8, 0x6, 0x800, 0x7}, {0x8, 0x8, 0x3, 0x1ff, 0xff, 0xd}, {0x3, 0x8, 0x4, 0x1, 0x8001, 0x2}, {0x9, 0x6, 0x8, 0x0, 0xda9, 0x10001}, {0xc, 0x6, 0x9, 0x4671, 0x9, 0x7}, {0xd, 0x6, 0x6, 0xa, 0x0, 0xe29}, {0x100, 0x0, 0xffffffff, 0x9, 0x9, 0xe}, {0x100, 0xefa, 0x40, 0x25, 0x7}, {0x5d1c, 0xa, 0x44, 0xfffffffb, 0x6, 0x10001}, {0x9, 0x7, 0x0, 0x9, 0xf, 0x8}, {0x810, 0x7, 0x5, 0x2, 0x9}, {0xfffffffb, 0x0, 0xf9, 0x5, 0x2, 0x5}, {0x3, 0x9, 0x100, 0xffffffec, 0xfffffffc, 0xe33b}, {0x92de, 0x0, 0x0, 0x1, 0xffffffff, 0x10001}, {0xa41a, 0x6, 0xe, 0xff, 0xe8b3, 0x2}, {0x61ad, 0x884, 0x4, 0x9, 0xfffffffb, 0x9}, {0x8000, 0x3, 0x6, 0xffff, 0x948, 0x3}, {0x3, 0xffffffcf, 0x101, 0x1000, 0x1c2c, 0x2}, {0x0, 0xd, 0x6, 0x3d, 0x80000000, 0x5}, {0x10, 0x2, 0x401, 0x3, 0x6, 0x1}, {0x9, 0x7, 0x9, 0x5, 0x1}, {0x4, 0x6, 0xb2f9, 0x0, 0x48}, {0x7, 0x8, 0x4e, 0x2, 0x4, 0x80000001}, {0x6196, 0x8, 0x10000, 0xfffeffff, 0x5d6, 0x81}, {0x5, 0x2, 0x671e, 0x2, 0x5}, {0x6, 0xffff0c2f, 0x9, 0x1000, 0xadac, 0x4}, {0x3, 0x5, 0xc, 0x40, 0x1, 0x2}, {0x8, 0x10, 0x4, 0x800, 0x8, 0x2}, {0x293c, 0x1, 0x2, 0x7fff, 0x10000, 0x3}, {0x1ff, 0x401, 0x268, 0x401, 0x1, 0x45a71fb4}, {0x1, 0xb, 0x4, 0x7, 0x400, 0x3}, {0xc, 0xc, 0x1540, 0x1000, 0x0, 0x1}, {0x8, 0x4, 0xf, 0xfffffffd, 0x2180, 0x9}, {0x9, 0x0, 0x10, 0x71, 0xe0, 0x1}, {0x3, 0x8001, 0x0, 0x3, 0x0, 0x6}, {0x7, 0x3, 0x3, 0x3, 0x0, 0x7}, {0x3ac4, 0xa5, 0x8b, 0xc685, 0x4}, {0x5, 0xdb, 0x5, 0x5, 0xf5, 0x2}, {0x5, 0xc, 0x0, 0x488, 0x1, 0x8}, {0x16, 0x6, 0x401, 0x2, 0x8, 0xb6e1}, {0x4, 0x3, 0x8a0d, 0x9, 0x0, 0x5}, {0x10000, 0xea79, 0x9, 0x7, 0x6, 0x9}, {0xa, 0x2e7, 0x3, 0x3ff, 0x8, 0x3}, {0x400, 0x5, 0x2, 0x2, 0x8, 0x96}, {0xa20, 0x80, 0xdd, 0xc, 0x26, 0x6}, {0x0, 0x7, 0x3, 0x5, 0x7, 0x7}, {0x1000, 0x4, 0x7, 0x9, 0x5, 0x3}, {0x2, 0x9, 0x7fffffff, 0x4, 0x7, 0x8}, {0x2, 0x400, 0x401, 0x80000000, 0xfffffff8, 0xfff}, {0x8, 0x1, 0x4, 0xc0, 0x200}, {0x3, 0x8, 0x1, 0x100, 0x8, 0x9}, {0x0, 0x7, 0x9, 0x10000, 0x2, 0x7}, {0xb4, 0x2, 0x4, 0x8, 0xfffffffa, 0x2}, {0x200, 0xf56, 0x3, 0x1, 0xcd6, 0x7}, {0x6fab7a8f, 0x4, 0xfffffffe, 0x4, 0xfffffffa, 0x1}, {0x6b6c, 0x0, 0x6, 0x6, 0x6, 0xffffffff}, {0x80000001, 0xc, 0x2, 0x3, 0x2, 0x2db7}, {0x6, 0x1, 0x0, 0x4, 0x8, 0x3ff}, {0x0, 0x8, 0xf4, 0x32d, 0x6, 0xfffffffc}, {0x9, 0x4, 0x6, 0x9, 0x1, 0x5}, {0xfffff801, 0x8, 0x4, 0xff, 0xfffffff8, 0xaec}, {0x9, 0x0, 0x1, 0x5, 0x24, 0x8}, {0xffff8000, 0x2, 0x0, 0x1000, 0x3, 0xb25}, {0x4, 0x4a, 0x0, 0x7d6, 0x8, 0x3}, {0x6, 0x6, 0xba6, 0x6, 0x6, 0x4}, {0x7ff, 0xc6d, 0x1, 0x9, 0xffffffff, 0x5}, {0x1, 0x7fff, 0x8422, 0x8, 0x80, 0x7}, {0x4, 0x3, 0xf, 0x20000, 0xb4c3, 0xb2}, {0x6, 0xfffff62d, 0xa, 0x2, 0x4, 0x7}, {0x745a, 0x233, 0xffffffff, 0x6, 0x5, 0x9}, {0x81, 0x3, 0x1, 0x100, 0x3, 0x4}, {0x10001, 0x3db, 0xff, 0x2, 0x9}, {0x80, 0x7, 0xd48, 0x9956, 0xf, 0x17}, {0x80000001, 0x1, 0x7d, 0x1, 0x1, 0x6}, {0xb, 0x80, 0xc96, 0x7f, 0xfcd, 0xff}, {0x100, 0x0, 0x3, 0x3, 0x72, 0x5}, {0x1, 0x2, 0x8, 0x4, 0x10000}, {0xc8000000, 0x81, 0xe511, 0xd8, 0x4, 0x1}, {0x7, 0x8, 0x7, 0x0, 0x2, 0x6}, {0x712, 0x8, 0x7, 0x4, 0x7, 0x4}, {0x7b, 0x8000, 0x5, 0x9, 0xff, 0xfffff001}, {0x3, 0xb, 0x1, 0x7fffffff, 0x1ff, 0xa04}, {0x2800, 0xfffffff8, 0xa3, 0xc, 0x40, 0x6}, {0x80000000, 0xf294, 0x2, 0x141, 0x80, 0x738}, {0x3, 0x20000, 0x4, 0x635, 0x5, 0xcca}, {0x36a, 0x3ff, 0x3, 0x80, 0xfffffbff, 0x3}, {0x6, 0x800, 0x6, 0xa, 0x1, 0x5}, {0x8, 0x5, 0x30000, 0x73, 0xd6a, 0x3}, {0x9, 0xffff, 0x7ff, 0x68d53eac, 0x1536, 0x2}, {0x3, 0x1ff, 0xa450, 0x1, 0x3, 0x9}, {0x7fdd, 0x7, 0x7, 0x1ff, 0x4, 0x7f}, {0xbfc, 0x1, 0xc, 0xffff0001, 0x7, 0x6}, {0x2, 0x6, 0x8, 0x8, 0x5, 0x1000}, {0x1, 0x3ff, 0x7fff, 0xfffffff8, 0x10000, 0x9}, {0x4, 0x9dfa, 0xd8f, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x3278, 0x9, 0x8, 0x4}, {0x80000001, 0x3, 0x3, 0xffff0001, 0x6, 0x401}, {0xea, 0x1, 0x401, 0x5, 0x3, 0xfffffff8}, {0x2, 0x0, 0x800000, 0x9, 0x7, 0x9}, {0x5, 0x43c, 0x3, 0x5b, 0x311a, 0xffff}, {0x1a67, 0x0, 0xb9c, 0x101, 0x4, 0x7f}, {0x2beb, 0x0, 0x7, 0x1bc0, 0x2, 0x1}, {0x4, 0x800, 0x1, 0x4, 0x8001, 0xffffffff}, {0x0, 0x8, 0x100, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x400, 0x5, 0x61a, 0x3}, {0x0, 0x1ff, 0xa, 0x6, 0xf14b, 0xc5}, {0x4, 0x8, 0x200, 0x3, 0x4, 0x2}, {0x1, 0x8, 0x3, 0x10000, 0x0, 0x5ddc}, {0x9, 0x80000000, 0xa6, 0x101, 0x1, 0x5}, {0x9, 0x0, 0x1b40000, 0x5, 0x3, 0x6}, {0x401, 0xffffffff, 0x7ff, 0x3, 0x7, 0x5}, {0x6, 0xf, 0x2, 0x0, 0x13, 0x6}, {0x3, 0x9, 0x94, 0x6, 0x400, 0x2}, {0xffff0000, 0x76, 0x3, 0xe, 0x1, 0x2}, {0x5, 0x6, 0xa, 0x200, 0x0, 0x6}, {0x1, 0x5, 0x4, 0x8, 0x7f, 0x4}, {0x9, 0x6, 0x2, 0x8000, 0x899, 0x7fffffff}, {0x5, 0x0, 0x1, 0xfffffff8, 0xf, 0x1}, {0xed, 0xd0, 0xdd6a, 0x5, 0x6d27, 0xd137}, {0x80000001, 0x5, 0x80, 0xc0000000, 0x21, 0x1}, {0xd, 0x8, 0x10000, 0x8, 0x1153a82e, 0x8}, {0x5, 0x0, 0x6, 0x2, 0xc, 0x3}, {0x2, 0x7, 0x6, 0x0, 0x8, 0x2}, {0x2, 0xb0, 0x8001, 0x8000, 0x2, 0xd}, {0x1, 0xffffff0c, 0x9, 0x9, 0x40, 0xb}], [{0x3, 0x1}, {0x1, 0x1}, {0x8}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x1}, {0x4}, {}, {0x4}, {0x1}, {}, {}, {}, {0x3}, {0x2}, {0x5}, {0x5}, {0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x76309eca6b36c8df}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0xd66bcd8db4e4829, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x5, 0xd8d9d1eceb16f3e2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3}, {0x2}, {0x4}, {0x4}, {0x2}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x0, 0x10000000, 0x0, 0x1}, 0x2, 0x9, [{0x8000, 0x2, 0x9, 0xb190, 0x0, 0x2}]}, [{0x0, 0x800, 0x6, 0x3, 0x9, 0x2}, {0x7, 0x9, 0x8, 0x96d, 0x5, 0x2}, {0x0, 0x3, 0x9, 0x10001, 0x0, 0x7}, {0x2, 0xce2, 0x800, 0x2, 0x6, 0x9}, {0x9, 0x5, 0x7ff, 0xfd98, 0x1, 0x7fff}, {0x7, 0x7, 0x8000, 0x401, 0x5, 0x1}, {0x9, 0x8, 0xfffffff5, 0x40, 0x8f25, 0xd07e}, {0x4, 0x7, 0x2, 0xffffff40, 0x3, 0x3bf}, {0x4, 0x8, 0x3, 0x8000, 0xffffffff, 0x2}, {0xd99c, 0x4, 0xfffffff4, 0x8}, {0x3, 0x4, 0x80000001, 0x3, 0x5, 0x9}, {0xfea6, 0xf, 0x1ff, 0x6e, 0x2, 0xffff}, {0x4, 0x5, 0x92a4, 0xff, 0x401, 0x6}, {0x9, 0x8, 0x3ff, 0x5, 0xfffffffe, 0x8001}, {0x36c7, 0xa, 0x6, 0xa8, 0x1, 0x2}, {0x0, 0x1, 0x98b2, 0x1, 0x8, 0x7ff}, {0x8, 0x6, 0x7, 0x7fff, 0x10, 0x9}, {0x7, 0x81, 0x3, 0x7, 0x7a, 0xf}, {0x3, 0x4, 0x7, 0x9e73, 0x3, 0x5d01}, {0x4, 0x81, 0xe, 0x9, 0xa8, 0xe}, {0x6, 0x382f, 0x5, 0xdc4}, {0xffffffff, 0xfffffffa, 0x15e4, 0x7, 0x3, 0x3}, {0xe5, 0x100000, 0x4, 0xffffffff, 0x9, 0x9}, {0x5, 0x18, 0x3, 0xe, 0x4, 0x400}, {0x9, 0xffffe546, 0x5, 0x1, 0x4, 0x4}, {0x2, 0xa, 0x7, 0x6, 0x1, 0x3}, {0x1, 0x8, 0x4e, 0xde, 0x2, 0x7}, {0x9, 0x1, 0x7, 0x2, 0x9, 0x2}, {0x0, 0x2, 0x2, 0x2, 0xffffff57, 0x2}, {0x6, 0x0, 0x18e, 0x1000000, 0x8, 0x1}, {0x6, 0xc, 0x4, 0x200, 0x401, 0x185}, {0x9679, 0x8, 0xe000000, 0xd, 0x0, 0x10001}, {0x3, 0x7, 0x5, 0xfd7c, 0x5, 0x8000}, {0xd, 0x4, 0x8, 0x3, 0x5268d603, 0xfffff801}, {0x6, 0x1, 0x26, 0x40, 0x9611, 0xb}, {0xacde092, 0x9, 0x9, 0x4, 0x4, 0x4}, {0x7, 0xfff, 0xfffffff8, 0x5, 0x400, 0x6}, {0x2, 0x5, 0xed4, 0x0, 0xe4, 0x5a}, {0x1, 0x6f, 0xd, 0x9, 0x4, 0x1}, {0xd, 0x6, 0x15e5, 0x3, 0x917e, 0xe52f}, {0x8001, 0x3ff, 0xf, 0xff, 0x7, 0x10}, {0x9, 0xf, 0xab, 0x6, 0x7f, 0x8}, {0xe2, 0x1, 0x3b, 0x4, 0x8, 0x2}, {0x3, 0x1000, 0x1, 0x2, 0x6, 0x55}, {0x8, 0x7, 0xafe8, 0xf8e, 0x13, 0x6a}, {0x517, 0x8, 0x9, 0xfffffff8, 0xffff, 0x9}, {0x101, 0xfffffffc, 0xb, 0xe, 0x5, 0x9}, {0x3975d75b, 0x2, 0xff, 0x2, 0x3, 0x1000}, {0x8000, 0x200, 0x5, 0x8, 0x2, 0x9}, {0xf, 0x6, 0x8001, 0x0, 0x401, 0x2}, {0x99, 0x2, 0x5, 0x4, 0xb}, {0xf, 0x43f, 0xf0, 0x2, 0x401, 0xd97}, {0x8, 0x3, 0x3083, 0x7ebe, 0x401}, {0x4, 0x100, 0x9, 0x400, 0x0, 0x200}, {0x8, 0x7, 0x6, 0x6, 0x5d9, 0xb13}, {0x0, 0x0, 0x5, 0xc5, 0x8000, 0xe}, {0x40, 0x6, 0x3, 0x4, 0xb, 0xa}, {0x9, 0x9, 0x7, 0x2, 0x0, 0x7}, {0x7, 0x7, 0xc, 0x3, 0xfffffffa, 0x5d}, {0x898, 0x4, 0xa, 0x5, 0x7, 0x800}, {0x3, 0x7a0, 0xc31, 0xfffffffc, 0x10001, 0x6}, {0x6, 0x9ac, 0x9, 0x2, 0x74, 0x7fffffff}, {0x5, 0x1, 0x4, 0x2, 0x4, 0x8000}, {0xffff, 0x10001, 0x12d8, 0x6, 0x3ff, 0x1000}, {0x5, 0x1, 0x2, 0x9, 0xfffeffff, 0x71}, {0x2, 0x2, 0x7, 0x3, 0x9, 0x7fffffff}, {0x3, 0x8, 0x9bd, 0x6, 0x7f, 0x100}, {0x6, 0x0, 0x81, 0x6, 0x5, 0x101}, {0x1, 0x7, 0x1, 0x2, 0xffffffff, 0x9}, {0x2, 0x3, 0xffffffff, 0x14000, 0x1, 0x7}, {0x7ff, 0x9, 0x6e, 0x8, 0x25}, {0xcee6, 0x1ff, 0x2, 0xa, 0x9, 0x8}, {0x61e1, 0x7fffffff, 0xd, 0x1, 0xfffff6c8}, {0xf7cd, 0x16d3, 0x2, 0x7, 0x126, 0x7}, {0x2, 0x7, 0x7, 0xff, 0x1, 0x5}, {0x4, 0x7, 0x0, 0x10001, 0x4}, {0x400, 0xca3, 0x2, 0x8, 0x7, 0x4}, {0xff, 0x7f, 0x6, 0x2, 0x101, 0x6}, {0xee90, 0x1, 0x7ff, 0x2, 0x6, 0xf84}, {0x4, 0xfffffff5, 0x6, 0x9, 0x9, 0xd8}, {0xe, 0xffff, 0x5, 0x7fffffff, 0x0, 0x6}, {0x0, 0xb3d2, 0x1, 0x101, 0x3ff, 0x3}, {0xe0, 0x9, 0x229, 0x0, 0x401}, {0x1, 0x0, 0xfd, 0x4, 0x7d0b6b21, 0x7fffffff}, {0x7, 0x2, 0x110, 0x7, 0x4, 0x7}, {0x7ff, 0x1, 0x2, 0x4287bdf3}, {0x0, 0x6, 0x8bb, 0x0, 0x5, 0x2c}, {0x779, 0x80, 0x6, 0x8000, 0x9, 0x6}, {0x7, 0x2, 0x0, 0x9, 0x7, 0x800}, {0x0, 0x0, 0x9, 0x8, 0x4, 0x100}, {0xa20e, 0x7, 0x1, 0x7ff}, {0x4, 0x6, 0x6, 0x4, 0x3, 0x3}, {0x7, 0x7fff, 0x9, 0xe4fd, 0x8, 0x800}, {0x7fffffff, 0xffffffff, 0xc3e, 0x9, 0xfffffff8, 0x1}, {0x9, 0x7, 0x7fff, 0x2, 0x6, 0x3}, {0xfffffffa, 0x80000000, 0x1, 0x8, 0x6, 0x1}, {0x9, 0xffffffcf, 0x9, 0xfffffeff, 0x7, 0x5}, {0x5, 0x81, 0x8, 0xffffff01, 0x2, 0x1ff}, {0x7, 0x67, 0xfff, 0x10, 0x2, 0x7}, {0x9, 0x4, 0xa0, 0x32d, 0x8, 0x3}, {0x8, 0x1, 0x6, 0x1, 0x0, 0x3}, {0xfff, 0x1, 0x6, 0x6, 0x0, 0x6}, {0x859b26a, 0x6, 0x80000001, 0xfffffffb, 0x4, 0x1984}, {0x4, 0x0, 0x80000001, 0xe, 0xfff, 0x6b}, {0x6, 0x14, 0x1ff, 0x4, 0x200, 0xa1}, {0x6, 0xffff, 0x1, 0x8, 0x2, 0xffff}, {0x7cfb, 0x7, 0x8, 0x8e, 0x1, 0xcafa}, {0xb, 0xffffff2f, 0x5, 0xe025, 0xff, 0x40}, {0x977, 0x1, 0x2d1, 0x273, 0x6, 0x9f27}, {0x6, 0x7, 0xb, 0x5, 0x7a2, 0x400}, {0xfffffffb, 0x7, 0x6, 0xa, 0x6, 0xb618}, {0x80000000, 0x100, 0x800, 0x8000, 0x8, 0x39e}, {0xa53, 0xb3, 0x1, 0x4, 0x3, 0x7}, {0x200, 0x3, 0x10001, 0x9, 0xc311, 0x7}, {0x2, 0x400, 0x4506b0c1, 0xc58, 0x15b, 0x3}, {0x260000, 0x5, 0x6, 0x5, 0xa4d, 0x9}, {0x3, 0x800, 0xfa8, 0x9, 0x965, 0x4}, {0xf, 0x4, 0x9, 0xd, 0x9, 0x5}, {0x8000, 0x800, 0x80000001, 0x8d91, 0x40, 0x2}, {0xfffff629, 0x6, 0xfffffffb, 0x6, 0x0, 0x7}, {0x400, 0x6, 0xc80000, 0x1, 0x9, 0x8}, {0x2, 0x2, 0x3e16dc83, 0xffff, 0x4080, 0x1}, {0x2, 0x9, 0x7, 0x3, 0x1, 0x101}, {0x10001, 0x6, 0x2, 0x7, 0xc0, 0x10001}, {0x5, 0xe9, 0x1, 0x4, 0x0, 0x8}, {0xb, 0x4, 0xffffffff, 0x1ff, 0x5, 0x8}, {0x7, 0x0, 0x9, 0x100, 0x3, 0x3}, {0xdf8d, 0x100, 0x0, 0x2, 0x7ff, 0xff}], [{0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x4}, {0x2}, {0x3, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x3}, {0x0, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3}, {0x3}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x37473868c1e37185}, {0x3}, {0x5}, {0x5, 0x1}, {0x3}, {0x3}, {}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0xbc, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x9, 0xb, 0x7, 0x8, 0xd55}, 0xaf, 0x0, [{0x8, 0x9, 0x2, 0x8000, 0x0, 0x800}, {0x4, 0x0, 0x2, 0x80000000, 0xfffffffd, 0x9}, {0x5, 0x3, 0x7, 0x0, 0x8, 0x2}, {0x6, 0x0, 0x800000, 0xffffffff, 0x5}, {0x3, 0x3ff, 0x0, 0x6, 0x2, 0x4}, {0x3664, 0x3, 0x3, 0x40, 0x7f, 0x2}]}, [{0x6, 0x7, 0xfffffff2, 0xb30, 0x401, 0x200}, {0x2, 0x3, 0x7ff, 0x76d0, 0x5, 0xffff}, {0xd6, 0xfffffff7, 0x7, 0x8, 0x2, 0x4}, {0x9, 0x1ff, 0x0, 0xeb5b, 0x8, 0x8}, {0xc80b, 0x2, 0x5, 0x81, 0x2, 0x2}, {0x9, 0x0, 0x2, 0x4, 0x8, 0xce7c}, {0x42d5, 0x2, 0x4, 0x1eb3, 0x3, 0x7}, {0xbf2, 0x9, 0xa, 0x9, 0xffffffea, 0x8001}, {0x313, 0x4, 0x3, 0x50, 0xff, 0x5}, {0x2, 0x4, 0x1, 0x10000, 0x5, 0x3}, {0x7, 0xffff7fff, 0x4, 0x4, 0xc9c2, 0x9}, {0x9, 0x2, 0x4, 0x2, 0x2, 0x4}, {0xffff, 0x7, 0x2, 0xb37, 0x2, 0x6}, {0x4, 0x8001, 0x80000000, 0xed6, 0xf8, 0x3ff}, {0xc3, 0x8, 0x10, 0x1, 0x5, 0x1}, {0xc, 0x2, 0x0, 0x7, 0x3, 0x8}, {0x9, 0x200, 0x5, 0x7, 0xfff, 0xfff}, {0x4, 0x81, 0x5, 0x0, 0x100, 0x81}, {0x3, 0x3, 0x3, 0x450, 0x7, 0x2}, {0x8000, 0x2, 0x9, 0x4, 0x6, 0x6}, {0x7, 0x6, 0x7b60, 0x8, 0xe, 0x5}, {0x1, 0x3, 0x8, 0x7, 0xfffffff9, 0x9}, {0x8, 0x8000, 0x2, 0xfff, 0x743a350e, 0x7ff}, {0xff, 0xc867, 0x6, 0xe5b036cc, 0x1, 0x1}, {0x80000001, 0x9, 0xee4e, 0x5, 0x800, 0x400}, {0x5, 0x1, 0x2, 0x7, 0x3dd9, 0x1a}, {0xfff, 0xc, 0x4, 0x1, 0x1, 0x9}, {0x1, 0x3, 0x4, 0x8, 0xd15b, 0x80000000}, {0x6, 0x4, 0x8001, 0x4544, 0x2, 0x3}, {0xdd2, 0x0, 0xfffffffd, 0x3, 0x1d27, 0x7f}, {0x9, 0x2, 0x5, 0x80, 0x7fff, 0x8001}, {0x8, 0x3, 0x2, 0x0, 0x10000}, {0x8, 0x3, 0x12, 0x7, 0x86, 0x5}, {0x6, 0x1, 0x5, 0x8a0, 0x13, 0x4}, {0x35df, 0xa, 0xfffffffc, 0xffffffff, 0x9, 0x401}, {0x5, 0x7, 0x9, 0xada6, 0x7, 0x6cd}, {0x8, 0x0, 0x80, 0x81, 0xffffff96, 0x401}, {0x9, 0x10, 0x7b30, 0xff, 0x1d3, 0x3ff}, {0x5, 0xe3, 0x8, 0x9, 0x7ff, 0xfffff801}, {0x7fff, 0x4, 0xfffffff7, 0xd, 0x5}, {0x7, 0x2, 0x717, 0x3ff, 0x3, 0x32b}, {0x50, 0x2f8f0ae1, 0x7, 0xffffff08, 0x6, 0x967}, {0x7, 0x7fff, 0x9, 0x5, 0x7f, 0x9}, {0x3, 0x4, 0x1ff, 0x83d8, 0x0, 0x362}, {0x1, 0x0, 0x7fffffff, 0x81, 0x4, 0x3}, {0xfffffffa, 0x6, 0x0, 0x0, 0xf91, 0x7fff}, {0x4, 0x0, 0x6, 0x40, 0x8000, 0xfffffffc}, {0xc, 0x7fffffff, 0x1, 0x9, 0x4, 0x6}, {0x5e0, 0x7, 0x10000, 0xc, 0x1ff, 0x341e7359}, {0x10001, 0x8, 0xfffffff8, 0x3, 0x6, 0xffff8000}, {0x9, 0x800, 0x9, 0x101, 0x8}, {0x6, 0x1, 0x0, 0x3, 0x8001, 0xfffffff7}, {0x81, 0x6, 0x7, 0x9, 0x80000001, 0x8}, {0x2, 0xffffff80, 0x9, 0x1, 0x298, 0x800}, {0x200, 0x2, 0xaf0, 0xf87, 0x879, 0x1}, {0x9375, 0x3e3d, 0x6, 0x2, 0x2, 0x8}, {0x9, 0x9, 0x2, 0x100, 0x80000001, 0x3}, {0x3, 0x2142, 0x2, 0x1, 0x9, 0x1}, {0xa, 0x80, 0x3, 0x7fff, 0x9, 0x1}, {0x1, 0x2, 0x800, 0x80000000, 0xf350, 0x98ad}, {0x4, 0x3, 0x9, 0x4, 0x6, 0x1fc}, {0xe, 0x7, 0x1, 0xffffffff, 0x81, 0x2b}, {0x8001, 0x0, 0x3d, 0x9, 0x6, 0x1000}, {0x8, 0x1, 0x4b2ea853, 0x8, 0x80000000, 0x9}, {0x3, 0x61, 0x0, 0x10, 0x8, 0x5}, {0x8, 0x8000, 0x1800000, 0x10001, 0xfa, 0x40}, {0x3a8, 0x8, 0x8, 0x0, 0x8, 0x2}, {0x8, 0x0, 0x742, 0x6, 0x80000001, 0x2}, {0x7, 0x8, 0x4, 0x10000, 0x80000001, 0x9}, {0x87, 0x2, 0x9, 0x3, 0xffffffff, 0x6}, {0xf75d, 0x6, 0xf82, 0x6, 0x101, 0xeb2f}, {0x5, 0x2, 0x8, 0xf, 0x98, 0x9}, {0x40, 0x7, 0x75b, 0xfffffffa, 0xad7, 0x5}, {0x8, 0x7, 0x6, 0x425, 0x10000, 0x1}, {0x101, 0x10, 0x8a, 0x80000000, 0x1, 0x81d5}, {0x2, 0x2, 0x1ff, 0x55, 0x8001, 0x8000}, {0x40, 0x6, 0x3, 0x200, 0x6, 0x10}, {0x5, 0x772, 0x1, 0x5, 0x10001, 0x75f6}, {0x580, 0x6, 0xb1, 0x8, 0x8e0c, 0x4794}, {0x6, 0x1000, 0x3a4, 0x9fa, 0x2, 0x5}, {0x7f, 0x0, 0x4, 0xaa, 0x7, 0x1ff}, {0xff, 0x8, 0x1, 0xf2, 0x8, 0xa}, {0x4, 0xfffffff5, 0x3, 0x9, 0x97b, 0x1}, {0x0, 0x9, 0x9, 0x2, 0x7, 0x8}, {0x3, 0x2, 0x3, 0x0, 0xffffffff}, {0x8, 0xa1, 0x3a, 0x8a2a, 0xfffffffe, 0x4}, {0xfffffffb, 0x2, 0x9, 0x5, 0x7, 0x4}, {0x9, 0x3, 0xac5, 0x7, 0x62f, 0xd}, {0x7, 0x24c, 0xa, 0x0, 0x0, 0x1}, {0x1, 0x401, 0x7, 0x8, 0x2, 0x9}, {0xc40, 0xdd, 0x8, 0x90, 0x9}, {0xe9e, 0x6, 0x0, 0x80000000, 0x7, 0x3}, {0x6, 0x2, 0x1000, 0x7fff, 0x6, 0x6}, {0xdd, 0x5, 0x6, 0x200, 0x1aa, 0x3ff}, {0x6, 0xbb, 0x200, 0x0, 0x4, 0xf3}, {0xee, 0x5, 0x1, 0x1, 0x9, 0x2}, {0x3, 0x81, 0x4, 0x1b8, 0xe9, 0x10000}, {0xf, 0x7, 0x9, 0x3861, 0xfffffffe, 0x6}, {0x4, 0x7, 0x82, 0x9, 0x2a7, 0x3}, {0x8, 0x1, 0x5, 0x7fffffff, 0x7ff, 0x3}, {0x1, 0x1b81, 0x5, 0x4d6, 0x4b, 0xfffffffa}, {0x0, 0x1, 0x5, 0x200, 0x0, 0x2}, {0x7, 0xa8, 0x10000, 0x80000001, 0x7c, 0x9}, {0x0, 0x7, 0x1, 0x5, 0xffffffff}, {0xc80, 0x3, 0x3c, 0x3, 0xac1b, 0x5}, {0x0, 0x1, 0x0, 0xc, 0x1, 0x3}, {0x1, 0x6, 0x8, 0x0, 0x3, 0x8}, {0x7, 0x4, 0x4, 0x81, 0x8, 0x4}, {0x2, 0x6, 0x1, 0xffff, 0x7fff, 0x7}, {0x8001, 0x0, 0xd, 0x0, 0x100, 0x3}, {0x2, 0xa39f, 0xd62, 0xe9f1, 0x3e55, 0x1}, {0x8, 0xfffffff7, 0x8000, 0x9627, 0x2}, {0x1, 0x7, 0x2, 0x0, 0x8, 0x9b7d}, {0x2, 0x3, 0x1, 0x2, 0xffff, 0x8}, {0x80000000, 0x6, 0x7fffffff, 0x8, 0x1000}, {0x8, 0x45a2, 0x7, 0x1000, 0x1ff, 0xfffff564}, {0x4, 0x93, 0x10001, 0xc, 0xc, 0x4}, {0x5a5, 0x80000000, 0x9, 0x7, 0x0, 0x5}, {0x0, 0xe4, 0x7, 0x5, 0x3, 0x2}, {0x5, 0xf, 0x5, 0x9, 0x4, 0x6}, {0x8, 0x8001, 0x7fff, 0xffffff09, 0x2, 0x4}, {0x383, 0xbc, 0x800, 0xfffffff9, 0xa2, 0x8}, {0x4, 0x8000, 0x2, 0xb9f4, 0x7ff, 0x80000001}, {0x0, 0x8, 0x4, 0xb000000, 0x6, 0x3}, {0x2, 0x9, 0x2, 0x10001, 0x8, 0x3}, {0x4, 0x3, 0x62e1551c, 0x400, 0x80, 0x7}, {0xd, 0x40, 0x9, 0x4, 0x3e457d66, 0x2}, {0x9, 0x2, 0x5, 0xffffffc7, 0x9b, 0xf4ba881}], [{0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x7}, {0x2}, {0x0, 0x47149e4bccad7be2}, {0x5, 0x1}, {}, {0xf}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x7}, {0x2, 0x1}, {0x4}, {0x2}, {0x4}, {0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x144, 0x4, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd06}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x401, 0x6, 0x69, 0xfffffffe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x1, 0x3, 0x2, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x263d}}]}, {0xcd, 0x6, "f54f51b813d481bae60a9837f50795874c2c8c07ab346c9c385c1b66ed227e89d5de33a8062ee1dd7ae007a36e0e2f3f35159f62202b3dffd2326ea88280c2607adcff85660b47d80f14bdae7ddea6c4904d8d839350ca6ba19ad1c5a3c837472bb39e17464d09dcd18e98d45664f2bdac44fca87b017402d7d86c4f1ca035307ff40a05153dae5a2137dc38058621dfb4b6b3af0609365f9e76be4b4975adeec17bd34fa2200aa5e0131f0beea50a162f81d583539ed82dc772d9738b26d92b181ace380d01a893dd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x118, 0x17, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0x8d, 0x2, 0xab, 0x7ff}, 0xf}}]}, {0xbb, 0x6, "d0d78ab454826661f40b3d8bb7e9259fc8a2e4b80bea6f5ecfcb0ddd70e259f6d4b5a343d3fe0fa58152d366e1cbbf2401645f4ab63c2d87ff30a4ac1227f43386ed808eb7941691c04b2ecda55766925f504f540d1018cc3595f6049b1239016a1e9abc34e038f1cbde938f52da0c481b6097fa06cbed86fecc75f32a8f66ef74c0476f8710193530eeced2f3088f1a8b8a7df73dd64eb9f75fd71342fc4a523562d3ddb5b1687dccf1f17f55873da131c6ea22763d86"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x3ec4}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth1_to_bond\x00', @broadcast}) 1.937866221s ago: executing program 1 (id=718): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000140), 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e24, 0x800f5, @dev}, 0x1c, 0x0}, 0x0) 1.934217912s ago: executing program 1 (id=719): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@empty, 0x0, 0x6c}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000500014002", 0x23}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e24, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) 1.83220528s ago: executing program 0 (id=721): r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x314) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) unshare(0x68060200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0xda) socket$kcm(0xa, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14ef64e6564dd7b9}, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x5}, 0x90) getsockopt$SO_COOKIE(r3, 0x1, 0x39, 0x0, &(0x7f0000001580)) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000003b2a02355878337d2c00000000290000003600"/33], 0x18}}], 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r7, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) 1.83158951s ago: executing program 1 (id=722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xffffffffffffffdf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b07020000f8ffffffb703000008000000b70400000000000085000000821100"/68, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x1e, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001900150000000000000000000a0000000202000000000000200009"], 0x3c}], 0x1}, 0x0) kexec_load(0xd, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0xd, 0xfffffffffffffffe}], 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f00000001c0)='.\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x0, 0x8, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0xf}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x4}}, 0x90}}, 0x0) recvmmsg(r6, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.719296959s ago: executing program 3 (id=724): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xf56}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x200012, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRES16=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") unlink(&(0x7f0000000080)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x1200}, 0x44004) r4 = socket(0x10, 0x2, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x3, 0x1070, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000bc0), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000080)}, 0x20) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000180)={'bond0\x00', &(0x7f00000001c0)}) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000), 0x4) setresuid(0x0, 0x0, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f00000003c0), 0x8, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) 1.718525169s ago: executing program 2 (id=725): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2200054, &(0x7f0000000080), 0x4, 0x244, &(0x7f0000000480)="$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") r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095", @ANYRES64, @ANYBLOB="912155bb712928dcfb94e6cade5761c7d6cc39236acff0ecf5bc86d8271865ad892cba5daded626f1c15aa87cdf7e3fb4f0f8fce3aafdc335555348ab433753f92005b91652d5e32eae3d94b01a11663ee94d89ee606a3ce89eec1ee2db43a3f", @ANYBLOB="a049c3f7e29a1a88f694ba2c9c1b758d466ca5633fdcd421c8b120842f92e5a3bad4faab19f2334e21b496848826dd2f1c8fb5fb07d4feb1f91e1eb51ed0c1075cdc01d39e8505020c5b1cd1e642eafa9e07847c4a1934c1c9aaeebfd677559d99dbbf11dd739c4bdefd07a9c2fccc1378c6c43fc7bd48b2573fd6622314b30e46f61cc9aff6f8de9fe1b357da177357f6a10fbf7dbcf00470cb67370bb7cd395a86dab87a405bb9e65c0840ee4f0f33a74c2b9469957385391de19c2377958bc7f26ba9fbfc5add9bbb49205807"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x22a, &(0x7f0000000800)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000990000000c0001800500020012000000"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000b00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="10002abd7000fddbdf2508000000050005001e0000000500050007000000080002000300000050000180060005004e210000060005004e22000014000400fe8000000000000000000000000000aa140004000000000000000000000000000000000014000400fe80000000000000000000000000003c040006802c0001800800060010000000060001000200000008000700", @ANYRES32=r9, @ANYBLOB="060005004e230000080006000800000014000680050002000d0000000600010002000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20028840}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdirat(r7, &(0x7f00000001c0)='./file2\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f0000000800)={@id={0x2, 0x0, @d}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x25, &(0x7f0000000000)={0x1}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r11, 0x26, &(0x7f0000000000)) fcntl$lock(r11, 0x7, &(0x7f00000006c0)) fcntl$lock(r10, 0x7, &(0x7f00000006c0)) fcntl$lock(r10, 0x25, &(0x7f0000000180)) utime(&(0x7f0000000600)='./file0\x00', 0x0) 1.545600504s ago: executing program 0 (id=726): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<-&||!') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000080)='./file0/../file0/../file0\x00', 0x53f802, 0x0) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3ec, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x98, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT={0x134, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, {0x8, 0x2, @remote}}}]}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0xdc, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async, rerun: 32) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async, rerun: 32) sendto$inet(r4, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xb) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) (rerun: 64) connect$inet(r4, &(0x7f0000000180), 0x10) 964.798571ms ago: executing program 3 (id=727): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x3, 0x67) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="accc384a", @ANYRES16=r2, @ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="f801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYRESDEC=0x0], 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x4040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r7}}, 0x20}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @broadcast}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) setgroups(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xc, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000005c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x0) sched_setscheduler(0x0, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000940)={[{@nodiscard}, {}, {@auto_da_alloc_val}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nodelalloc}, {@acl}, {@debug}]}, 0x5, 0x588, &(0x7f0000001900)="$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") flock(r10, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 919.843435ms ago: executing program 0 (id=728): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000500014002", 0x23}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e24, @local}, @ib={0x1b, 0x0, 0x700, {"00000000000000000000000000000001"}}}}, 0x118) 918.913755ms ago: executing program 4 (id=729): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000000080003400000000a0900010073797a30000000000900020073797a31"], 0x5c}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffad) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = syz_mount_image$msdos(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10084d8, &(0x7f0000000200)=ANY=[@ANYRES32], 0xfd, 0x1c3, &(0x7f0000000b00)="$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") r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7, 0x3030, r1, 0x79f26000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x3, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="460adc0900000000000000000000000000000000c8b4ebc6c9e47c49d005b39b49acfcdbf31c7e2075d9694c87ed41540bf22eed660fcdb8be3719ad59ef47a723f7aa50b4a6036157ffb0504586235a22c69e1a919d6a366766635632a6242624eb5bba34aa3a0d831f5983d39ce95e80e6d033a3f61b6e7a0139b38b68405b57fb4d833eebb9f7bdffc15aedc16c7b2373e304b045601936ba195d37e6ddfefc41fcaef850333a22a4dcde38db0bdf34d400000000443598eff7cc58bf0cf3f03b6398ab8b3f69ee953ed28f7e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x8, 0x30f, &(0x7f00000004c0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xacc2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r4, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/227, 0x14}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8}, 0xe) listen(r5, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, '\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, 0x0, &(0x7f0000000100)='./file0\x00') getxattr(0x0, 0x0, 0x0, 0x0) 918.308375ms ago: executing program 2 (id=730): r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) socket$unix(0x1, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4dd, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32], 0x34}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xa8, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x3d}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6e605f59a9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a5d8b8f58ec488558030c27972"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r7, r8, &(0x7f00000001c0), 0x8bb98) (async) fcntl$addseals(r8, 0x409, 0x8) (async) socket$inet6(0xa, 0x3, 0xf6) (async) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012", 0x37}], 0x1}, 0x0) (rerun: 32) 891.956797ms ago: executing program 0 (id=731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) kexec_load(0xffffffffff3f0000, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x0) 840.293221ms ago: executing program 0 (id=732): socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x8240}, 0x0, 0x80000000000, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac1414aa08000700e00000e018000a00", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf25010062180000080005000100000008000700000000000800070009000000140002007767320000000000000000000000000008000700fd03000008000500010000000800050000000000c59087feb84314aaab609703aa467b7f73fe22be2982060000000000000015f4d225e23dd042864e1f050e09f1984e045cd128fe9be51e1457a8257834e74161b4789f499988e56fdd"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8045) r3 = socket$inet6(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={@local, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x40, 0x0, 0x0, 0x0, 0x2e0032}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000d40)={[{@grpquota}, {@usrquota}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nomblk_io_submit}, {@bh}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r4 = open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x304009a, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYBLOB="8de47b74fc"], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000001280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="1068c693b60d99009f0003000832af0734b3ec59c1f97d0d0454f425370945027a54be7f13c1552eb8697ca0a120ee9fb1d96ebc1931a7149a7c14ecfa0aaa6a81488b746ab0c29c7a76ad95791ed7bd472996c9afdd3a5e98fa96895549b1db66a5332d3c004f37d2ccfc28e2d5bc55e56eea7642713fd29ac7fccc2befba420e9aec208e39aefb1eab8c4da80e0bf3732a99e705f3ffb8f55a18cc13db2661b453af09204a16124729e735ff0ad840a40a1a47282978286ce49f9849f9e66bf35bc1d64f460f1ca400"/213, @ANYRES8=r3, @ANYRES16], 0x1c}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x10}, 0xfffffffffffffef0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000007c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) 411.609986ms ago: executing program 3 (id=733): socket$igmp(0x2, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r0 = syz_open_dev$sg(0x0, 0x8a, 0x202000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) (async) socket$kcm(0x29, 0x5, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDISABIO(r3, 0x4b37) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8100, &(0x7f0000000400)=ANY=[], 0x0, 0x25d, &(0x7f0000001b80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000040801010000000000000000000000000600024000000000050003003a0000001c6a33d53ccac4311760e22adb1d025b61634cd14fb610ac6331d64292de40a492611f42d920d344487bb82f847d2283228167be0969ac08312bb6ab5d15c7120f316250afb037270137e1cc68b1a6114a9a861f35968219c945490d76baa9"], 0x24}}, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000a00)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noquota}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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") getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x2d, &(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018460000f8ffffff00000000000000009500000000000000852000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000008520000003000000184a000005000000000000000000000018000000000000400000000080010000f57140000b00000018350000040000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x8d8, 0x75, &(0x7f0000000380)=""/117, 0x41100, 0x44, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x1, 0x10, 0x661f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r5, r5, r5], 0x0, 0x10, 0x914}, 0x90) (async) sched_setscheduler(0x0, 0x0, 0x0) 362.08664ms ago: executing program 4 (id=734): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x8030000}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 272.156138ms ago: executing program 0 (id=735): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x4, 0xa10, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x28, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000088000000bf0900000000000035090100000000009500000000000000980a0000fcffffff18120000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000182a0000", @ANYRES32, @ANYBLOB="0000000003000000bf9100000000000056070000000000008500000000000000b700b596675620fb644f00f70000000032ab3a8a4b63f938f86550ec31cf42c70b8390616b35c40d867ec42b4554c02516f5b8f524f4a73d917f79bde5ec0dfd809ce3abc47069af44f40a1b1af135b650678a65423b5200f75c25cad8cf741ecdf6a1a37c7dfc5ce65b1532bef52eb376219c29a56b0b2eea729519cd1b4dd559fe2a4b34075916914679104340000000000000000000", @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x10000000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8005) 271.378298ms ago: executing program 2 (id=736): syz_emit_ethernet(0x10b, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}, "dd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe"}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x20000007) 172.018056ms ago: executing program 3 (id=737): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) 84.280233ms ago: executing program 3 (id=738): socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10012, 0xffffffffffffffff, 0x1000) r0 = socket(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000180)=@known='security.apparmor\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x20001000}, 0xffffffffffffff07) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$TCSETS(r3, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/icmp6\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) 67.061284ms ago: executing program 2 (id=739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "00ed3e37ee005597", "481aa07b38b160075f01d217e8c9ff3f", "2a541a02", "778f7d1808189975"}, 0x28) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x5c, 0x0, @loopback}, 0x58) 0s ago: executing program 3 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x14) kernel console output (not intermixed with test programs): ered forwarding state [ 61.023852][ T4676] ext4: Bad value for 'sb' [ 61.033164][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.040270][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.056591][ T29] audit: type=1400 audit(1723256871.495:300): avc: denied { read } for pid=4674 comm="syz.3.309" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.062767][ T4439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.089230][ T29] audit: type=1400 audit(1723256871.495:301): avc: denied { open } for pid=4674 comm="syz.3.309" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.089257][ T29] audit: type=1400 audit(1723256871.495:302): avc: denied { ioctl } for pid=4674 comm="syz.3.309" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.109675][ T4377] veth1_vlan: entered promiscuous mode [ 61.128343][ T29] audit: type=1400 audit(1723256871.495:303): avc: denied { write } for pid=4674 comm="syz.3.309" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.232649][ T4680] bond1: entered promiscuous mode [ 61.238870][ T4680] bond1: entered allmulticast mode [ 61.246708][ T4680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.264217][ T4680] bond1 (unregistering): Released all slaves [ 61.275517][ T4681] loop3: detected capacity change from 0 to 512 [ 61.298835][ T4377] veth0_macvtap: entered promiscuous mode [ 61.307315][ T4377] veth1_macvtap: entered promiscuous mode [ 61.327912][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.334589][ T4681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.342778][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.369303][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.383733][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.396081][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.408931][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.425116][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.438782][ T4681] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.446888][ T4439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.474159][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.488852][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.501921][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.514591][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.526080][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.541165][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.597175][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.637799][ T4377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.649782][ T4377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.661502][ T4377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.675561][ T4377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.747332][ T29] audit: type=1400 audit(1723256872.185:304): avc: denied { mount } for pid=4377 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.838209][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.869970][ T4439] veth0_vlan: entered promiscuous mode [ 61.891422][ T4439] veth1_vlan: entered promiscuous mode [ 62.071198][ T4439] veth0_macvtap: entered promiscuous mode [ 62.123669][ T4439] veth1_macvtap: entered promiscuous mode [ 62.265802][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.281272][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.292963][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.304928][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.315554][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.327145][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.338816][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.349931][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.365267][ T4439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.407375][ T4742] loop3: detected capacity change from 0 to 136 [ 62.415284][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.426244][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.436920][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.449612][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.460237][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.471967][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.482249][ T4439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.496428][ T4439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.510455][ T4439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.520873][ T4439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.532857][ T4439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.544217][ T4439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.553970][ T4439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.600665][ T4748] loop3: detected capacity change from 0 to 128 [ 62.640622][ T4751] loop0: detected capacity change from 0 to 1024 [ 62.699434][ T4751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.730436][ T4751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.767603][ T4748] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.795017][ T4748] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.806981][ T4761] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 62.818379][ T4761] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 63.312907][ T4777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.317'. [ 63.353831][ T4780] loop3: detected capacity change from 0 to 256 [ 63.364931][ T4782] loop1: detected capacity change from 0 to 1024 [ 63.376554][ T4780] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.402456][ T4782] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.431333][ T4780] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.547710][ T29] audit: type=1400 audit(1723256873.995:305): avc: denied { ioctl } for pid=4791 comm="syz.0.321" path="socket:[8593]" dev="sockfs" ino=8593 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.602696][ T4796] loop0: detected capacity change from 0 to 1024 [ 63.630857][ T4800] loop2: detected capacity change from 0 to 1024 [ 63.643121][ T4796] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.679095][ T4796] FAULT_INJECTION: forcing a failure. [ 63.679095][ T4796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.694867][ T4796] CPU: 0 UID: 0 PID: 4796 Comm: syz.0.323 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 63.706971][ T4796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 63.718095][ T4796] Call Trace: [ 63.723036][ T4796] [ 63.727198][ T4796] dump_stack_lvl+0xf2/0x150 [ 63.731997][ T4796] dump_stack+0x15/0x20 [ 63.737314][ T4796] should_fail_ex+0x229/0x230 [ 63.744318][ T4796] should_fail+0xb/0x10 [ 63.749865][ T4796] should_fail_usercopy+0x1a/0x20 [ 63.759800][ T4796] copy_page_from_iter_atomic+0x22a/0xda0 [ 63.767324][ T4796] ? ext4_da_write_begin+0x1ba/0x550 [ 63.774005][ T4796] generic_perform_write+0x323/0x580 [ 63.779954][ T4796] ext4_buffered_write_iter+0x1f6/0x380 [ 63.787620][ T4796] ext4_file_write_iter+0x29f/0xe30 [ 63.795249][ T4796] ? path_openat+0x19bc/0x1f10 [ 63.801012][ T4796] ? _parse_integer_limit+0x167/0x180 [ 63.807194][ T4796] ? _parse_integer+0x27/0x30 [ 63.813445][ T4697] loop4: detected capacity change from 0 to 512 [ 63.814517][ T4796] ? kstrtoull+0x110/0x140 [ 63.822165][ T4697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.828113][ T4796] do_iter_readv_writev+0x3b0/0x470 [ 63.828144][ T4796] vfs_writev+0x2e0/0x880 [ 63.828171][ T4796] __se_sys_pwritev2+0x10c/0x1d0 [ 63.853822][ T4796] __x64_sys_pwritev2+0x78/0x90 [ 63.859382][ T4796] x64_sys_call+0x271f/0x2d60 [ 63.865022][ T4796] do_syscall_64+0xc9/0x1c0 [ 63.870064][ T4796] ? clear_bhb_loop+0x55/0xb0 [ 63.878041][ T4796] ? clear_bhb_loop+0x55/0xb0 [ 63.883902][ T4796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.892273][ T4796] RIP: 0033:0x7f91a89c79f9 [ 63.898005][ T4796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.923618][ T4796] RSP: 002b:00007f91a7647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 63.933895][ T4796] RAX: ffffffffffffffda RBX: 00007f91a8b55f80 RCX: 00007f91a89c79f9 [ 63.944997][ T4796] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000009 [ 63.954194][ T4796] RBP: 00007f91a7647090 R08: 0000000000000000 R09: 0000000000000000 [ 63.963749][ T4796] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000001 [ 63.973827][ T4796] R13: 0000000000000000 R14: 00007f91a8b55f80 R15: 00007ffc02a208d8 [ 63.983033][ T4796] [ 63.999929][ T4697] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.008893][ T4800] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.009382][ T4697] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.308: bg 0: block 248: padding at end of block bitmap is not set [ 64.041468][ T4697] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.308: Failed to acquire dquot type 1 [ 64.083628][ T4697] EXT4-fs (loop4): 1 truncate cleaned up [ 64.452462][ T4819] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 64.465240][ T4819] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 64.478877][ T4821] loop3: detected capacity change from 0 to 128 [ 64.499758][ T4821] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.611218][ T4832] loop4: detected capacity change from 0 to 1024 [ 64.671929][ T4832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.687248][ T4837] loop2: detected capacity change from 0 to 256 [ 64.706615][ T4837] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.748219][ T4837] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.794209][ T4837] bridge_slave_0: default FDB implementation only supports local addresses [ 64.838806][ T4846] SELinux: Context system_u:object_r:fuse_device_t:s0 is not valid (left unmapped). [ 65.073189][ T4856] loop3: detected capacity change from 0 to 128 [ 65.152761][ T4856] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.203890][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 65.203901][ T29] audit: type=1400 audit(1723256875.645:309): avc: denied { mounton } for pid=4854 comm="syz.3.339" path="/85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.308049][ T29] audit: type=1400 audit(1723256875.715:310): avc: denied { mount } for pid=4854 comm="syz.3.339" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 65.572198][ T4874] loop2: detected capacity change from 0 to 128 [ 65.609287][ T4874] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.858420][ T4887] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 65.868332][ T4887] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 66.016267][ T29] audit: type=1400 audit(1723256876.455:311): avc: denied { ioctl } for pid=4890 comm="syz.1.349" path="socket:[8173]" dev="sockfs" ino=8173 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.054127][ T4897] FAULT_INJECTION: forcing a failure. [ 66.054127][ T4897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.072584][ T4897] CPU: 1 UID: 0 PID: 4897 Comm: syz.2.350 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 66.087017][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 66.100452][ T4897] Call Trace: [ 66.103795][ T4897] [ 66.107266][ T4897] dump_stack_lvl+0xf2/0x150 [ 66.112828][ T4897] dump_stack+0x15/0x20 [ 66.119830][ T4897] should_fail_ex+0x229/0x230 [ 66.126653][ T4897] should_fail+0xb/0x10 [ 66.132468][ T4897] should_fail_usercopy+0x1a/0x20 [ 66.138747][ T4897] _copy_to_user+0x1e/0xa0 [ 66.145038][ T4897] simple_read_from_buffer+0xa0/0x110 [ 66.153091][ T4897] proc_fail_nth_read+0xfc/0x140 [ 66.159615][ T4897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.166064][ T4897] vfs_read+0x1a2/0x6e0 [ 66.172244][ T4897] ? __rcu_read_unlock+0x4e/0x70 [ 66.179371][ T4897] ? __fget_files+0x1da/0x210 [ 66.186604][ T4897] ksys_read+0xeb/0x1b0 [ 66.191552][ T4897] __x64_sys_read+0x42/0x50 [ 66.198018][ T4897] x64_sys_call+0x27d3/0x2d60 [ 66.203301][ T4897] do_syscall_64+0xc9/0x1c0 [ 66.209227][ T4897] ? clear_bhb_loop+0x55/0xb0 [ 66.214481][ T4897] ? clear_bhb_loop+0x55/0xb0 [ 66.220151][ T4897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.227819][ T4897] RIP: 0033:0x7f6d596b643c [ 66.233155][ T4897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 66.257325][ T4897] RSP: 002b:00007f6d58337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.267448][ T4897] RAX: ffffffffffffffda RBX: 00007f6d59845f80 RCX: 00007f6d596b643c [ 66.276701][ T4897] RDX: 000000000000000f RSI: 00007f6d583370a0 RDI: 0000000000000004 [ 66.288587][ T4897] RBP: 00007f6d58337090 R08: 0000000000000000 R09: 0000000000000000 [ 66.300809][ T4897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.311588][ T4897] R13: 0000000000000000 R14: 00007f6d59845f80 R15: 00007ffdaf667f08 [ 66.321932][ T4897] [ 66.415489][ T4899] loop1: detected capacity change from 0 to 1024 [ 66.433607][ T29] audit: type=1400 audit(1723256876.875:312): avc: denied { getopt } for pid=4898 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.474009][ T4903] loop4: detected capacity change from 0 to 512 [ 66.496290][ T3545] Trying to write to read-only block-device loop1 [ 66.524304][ T4903] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.550356][ T29] audit: type=1400 audit(1723256876.905:313): avc: denied { unmount } for pid=3545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 66.557482][ T4913] loop1: detected capacity change from 0 to 1024 [ 66.573300][ T29] audit: type=1400 audit(1723256876.915:314): avc: denied { unlink } for pid=3545 comm="syz-executor" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.915302][ T4929] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 66.926075][ T4929] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 66.944777][ T29] audit: type=1400 audit(1723256877.355:315): avc: denied { create } for pid=4926 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.011959][ T4927] xt_hashlimit: max too large, truncated to 1048576 [ 67.067633][ T4927] netlink: 72 bytes leftover after parsing attributes in process `syz.2.359'. [ 67.073639][ T29] audit: type=1400 audit(1723256877.445:316): avc: denied { write } for pid=4926 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.107757][ T29] audit: type=1400 audit(1723256877.445:317): avc: denied { nlmsg_read } for pid=4926 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.136271][ T29] audit: type=1400 audit(1723256877.445:318): avc: denied { write } for pid=4926 comm="syz.2.359" path="socket:[8803]" dev="sockfs" ino=8803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.470199][ T4951] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 67.487986][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 67.552262][ T4959] loop2: detected capacity change from 0 to 128 [ 67.590527][ T4959] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.614671][ T4957] loop1: detected capacity change from 0 to 4096 [ 67.877090][ T4872] loop3: detected capacity change from 0 to 512 [ 67.914979][ T4872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.012441][ T4872] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.034515][ T4975] syzkaller0: entered promiscuous mode [ 68.042507][ T4975] syzkaller0: entered allmulticast mode [ 68.063319][ T4872] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.343: bg 0: block 248: padding at end of block bitmap is not set [ 68.089799][ T4872] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.343: Failed to acquire dquot type 1 [ 68.105842][ T4872] EXT4-fs (loop3): 1 truncate cleaned up [ 68.114414][ T4872] EXT4-fs mount: 23 callbacks suppressed [ 68.114430][ T4872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.142911][ T4377] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.217978][ T4984] loop1: detected capacity change from 0 to 1024 [ 68.309403][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.345390][ T4989] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 68.356802][ T4989] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 68.535686][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 68.683714][ T5004] loop3: detected capacity change from 0 to 128 [ 68.778043][ T5004] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.800166][ T5004] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.907092][ T5012] syzkaller0: entered promiscuous mode [ 68.917065][ T5012] syzkaller0: entered allmulticast mode [ 69.042033][ T3263] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.118082][ T5023] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 69.128580][ T5023] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 69.218967][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 69.243857][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 69.843408][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.932149][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.001635][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.092883][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.147923][ T5017] loop2: detected capacity change from 0 to 512 [ 70.181571][ T5017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.212618][ T5017] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.234880][ T5017] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.391: bg 0: block 248: padding at end of block bitmap is not set [ 70.266246][ T5017] __quota_error: 12 callbacks suppressed [ 70.266262][ T5017] Quota error (device loop2): write_blk: dquota write failed [ 70.285465][ T5017] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.299122][ T5017] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.391: Failed to acquire dquot type 1 [ 70.327502][ T36] bridge_slave_1: left allmulticast mode [ 70.336345][ T5017] EXT4-fs (loop2): 1 truncate cleaned up [ 70.337786][ T36] bridge_slave_1: left promiscuous mode [ 70.352000][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.366034][ T36] bridge_slave_0: left allmulticast mode [ 70.369299][ T5017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.377318][ T36] bridge_slave_0: left promiscuous mode [ 70.403307][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.549937][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.563757][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.595545][ T36] bond0 (unregistering): Released all slaves [ 70.650121][ T5044] chnl_net:caif_netlink_parms(): no params data found [ 70.754370][ T36] hsr_slave_0: left promiscuous mode [ 70.762598][ T5081] loop3: detected capacity change from 0 to 1024 [ 70.777683][ T36] hsr_slave_1: left promiscuous mode [ 70.785136][ T4377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.809858][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.818138][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.828689][ T5081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.874753][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.885479][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.903447][ T5081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.926113][ T36] veth1_macvtap: left promiscuous mode [ 70.938085][ T36] veth0_macvtap: left promiscuous mode [ 70.945714][ T36] veth1_vlan: left promiscuous mode [ 70.955310][ T36] veth0_vlan: left promiscuous mode [ 71.390440][ T36] team0 (unregistering): Port device team_slave_1 removed [ 71.429823][ T36] team0 (unregistering): Port device team_slave_0 removed [ 71.476516][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.486631][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.498508][ T5044] bridge_slave_0: entered allmulticast mode [ 71.513014][ T5044] bridge_slave_0: entered promiscuous mode [ 71.523537][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.532498][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.541722][ T5044] bridge_slave_1: entered allmulticast mode [ 71.550053][ T5044] bridge_slave_1: entered promiscuous mode [ 71.562464][ T5095] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 71.572795][ T5095] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 71.606088][ T5044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.638990][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.692740][ T5044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.716236][ T5105] netlink: 'syz.3.407': attribute type 4 has an invalid length. [ 71.756461][ T29] audit: type=1400 audit(1723256882.205:329): avc: denied { bind } for pid=5102 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.798092][ T5044] team0: Port device team_slave_0 added [ 71.815959][ T5044] team0: Port device team_slave_1 added [ 71.850288][ T29] audit: type=1326 audit(1723256882.285:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.3.407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5473a179f9 code=0x0 [ 71.885858][ T5044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.894480][ T5044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.930905][ T5044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.973049][ T5044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.983363][ T5044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.027605][ T5044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.048051][ T5121] mmap: syz.2.410 (5121) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.102161][ T29] audit: type=1400 audit(1723256882.545:331): avc: denied { setopt } for pid=5125 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.139149][ T29] audit: type=1400 audit(1723256882.545:332): avc: denied { connect } for pid=5125 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.166848][ T5044] hsr_slave_0: entered promiscuous mode [ 72.175684][ T5044] hsr_slave_1: entered promiscuous mode [ 72.199394][ T5044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.208879][ T5044] Cannot create hsr debugfs directory [ 72.332914][ T5139] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 72.343421][ T5139] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 72.484918][ T5152] loop2: detected capacity change from 0 to 1024 [ 72.499444][ T5152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.573100][ T5152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.665488][ T5044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.692725][ T5044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.725028][ T5044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.744755][ T5044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.841908][ T5044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.873552][ T5044] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.942124][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.952564][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.070599][ T5044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.083311][ T5044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.127078][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.137405][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.234363][ T5044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.350791][ T5044] veth0_vlan: entered promiscuous mode [ 73.360506][ T4377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.370494][ T5195] loop0: detected capacity change from 0 to 256 [ 73.390571][ T5044] veth1_vlan: entered promiscuous mode [ 73.438980][ T29] audit: type=1400 audit(1723256883.885:333): avc: denied { mounton } for pid=5194 comm="syz.0.420" path="/15/file0/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 73.476898][ T29] audit: type=1400 audit(1723256883.895:334): avc: denied { ioctl } for pid=5194 comm="syz.0.420" path="socket:[9691]" dev="sockfs" ino=9691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.514650][ T29] audit: type=1400 audit(1723256883.895:335): avc: denied { bind } for pid=5194 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.552860][ T5044] veth0_macvtap: entered promiscuous mode [ 73.588566][ T5044] veth1_macvtap: entered promiscuous mode [ 73.655834][ T5212] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 73.665670][ T5212] netlink: 67 bytes leftover after parsing attributes in process `syz.2.423'. [ 73.690199][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.703939][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.716073][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.728919][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.746674][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.762538][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.782739][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.798850][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.815325][ T5044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.838368][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.854631][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.867954][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.881816][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.897305][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.915914][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.929545][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.941832][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.992169][ T5044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.010063][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.075252][ T5044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.091100][ T5044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.106151][ T5044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.120497][ T5044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141764][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.255526][ T5253] loop2: detected capacity change from 0 to 512 [ 74.266061][ T5252] loop1: detected capacity change from 0 to 128 [ 74.277253][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.318073][ T5252] loop1: detected capacity change from 0 to 256 [ 74.347490][ T5253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.365436][ T5253] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.387317][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.401568][ T4377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.419618][ T5131] loop3: detected capacity change from 0 to 512 [ 74.429489][ T5131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.451996][ T5131] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.459163][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 74.476272][ T5131] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.413: bg 0: block 248: padding at end of block bitmap is not set [ 74.550047][ T5131] Quota error (device loop3): write_blk: dquota write failed [ 74.564787][ T5131] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.413: Failed to acquire dquot type 1 [ 74.579731][ T5131] EXT4-fs (loop3): 1 truncate cleaned up [ 74.589632][ T5131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.621846][ T50] bridge_slave_1: left allmulticast mode [ 74.634830][ T50] bridge_slave_1: left promiscuous mode [ 74.644339][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.746255][ T50] bridge_slave_0: left allmulticast mode [ 74.755454][ T50] bridge_slave_0: left promiscuous mode [ 74.765314][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.942075][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.068912][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.087558][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.206740][ T5300] FAULT_INJECTION: forcing a failure. [ 75.206740][ T5300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.223045][ T5300] CPU: 1 UID: 0 PID: 5300 Comm: syz.1.436 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 75.240185][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 75.252199][ T5300] Call Trace: [ 75.257346][ T5300] [ 75.262555][ T5300] dump_stack_lvl+0xf2/0x150 [ 75.270020][ T5300] dump_stack+0x15/0x20 [ 75.276639][ T5300] should_fail_ex+0x229/0x230 [ 75.281965][ T5300] should_fail+0xb/0x10 [ 75.288380][ T5300] should_fail_usercopy+0x1a/0x20 [ 75.294562][ T5300] _copy_from_user+0x1e/0xd0 [ 75.300362][ T5300] move_addr_to_kernel+0x82/0x120 [ 75.305929][ T5300] __sys_connect+0x74/0x1c0 [ 75.310793][ T5300] __x64_sys_connect+0x41/0x50 [ 75.316521][ T5300] x64_sys_call+0x2220/0x2d60 [ 75.323603][ T5300] do_syscall_64+0xc9/0x1c0 [ 75.328322][ T5300] ? clear_bhb_loop+0x55/0xb0 [ 75.336710][ T5300] ? clear_bhb_loop+0x55/0xb0 [ 75.342097][ T5300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.351602][ T5300] RIP: 0033:0x7f7372f479f9 [ 75.360070][ T5300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.391373][ T5300] RSP: 002b:00007f7371ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 75.402448][ T5300] RAX: ffffffffffffffda RBX: 00007f73730d6058 RCX: 00007f7372f479f9 [ 75.411558][ T5300] RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004 [ 75.423184][ T5300] RBP: 00007f7371ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 75.434008][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.447301][ T5300] R13: 0000000000000000 R14: 00007f73730d6058 R15: 00007fff5e741bc8 [ 75.461981][ T5300] [ 75.483298][ T50] bond0 (unregistering): Released all slaves [ 75.525725][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.539106][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.555651][ T5227] bridge_slave_0: entered allmulticast mode [ 75.568326][ T5227] bridge_slave_0: entered promiscuous mode [ 75.592684][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.602925][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.620831][ T5227] bridge_slave_1: entered allmulticast mode [ 75.631719][ T5227] bridge_slave_1: entered promiscuous mode [ 75.649898][ T50] hsr_slave_0: left promiscuous mode [ 75.657409][ T50] hsr_slave_1: left promiscuous mode [ 75.668903][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.674380][ T5306] loop1: detected capacity change from 0 to 8192 [ 75.680304][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.698294][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.707559][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.716694][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 75.716706][ T29] audit: type=1400 audit(1723256886.145:337): avc: denied { unlink } for pid=2942 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.752532][ T29] audit: type=1326 audit(1723256886.155:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 75.782684][ T29] audit: type=1326 audit(1723256886.155:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 75.791630][ T5306] loop1: detected capacity change from 0 to 8192 [ 75.812369][ T29] audit: type=1326 audit(1723256886.155:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 75.851251][ T29] audit: type=1326 audit(1723256886.155:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 75.884372][ T29] audit: type=1326 audit(1723256886.155:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 75.912975][ T29] audit: type=1326 audit(1723256886.155:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 75.942640][ T29] audit: type=1326 audit(1723256886.155:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 75.977498][ T29] audit: type=1326 audit(1723256886.155:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 76.012076][ T29] audit: type=1326 audit(1723256886.155:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372f479f9 code=0x7ffc0000 [ 76.048012][ T50] veth1_macvtap: left promiscuous mode [ 76.060392][ T50] veth0_macvtap: left promiscuous mode [ 76.067042][ T50] veth1_vlan: left promiscuous mode [ 76.075442][ T50] veth0_vlan: left promiscuous mode [ 76.123253][ T5306] loop1: p1 < > p2 < p5 > p4 [ 76.140737][ T5306] loop1: p4 size 16776960 extends beyond EOD, truncated [ 76.153869][ T5306] loop1: p5 size 16776960 extends beyond EOD, truncated [ 76.239157][ T3229] udevd[3229]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 76.239247][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 76.254302][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 76.270282][ T3334] udevd[3334]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 76.304179][ T5316] loop3: detected capacity change from 0 to 764 [ 76.326648][ T5316] rock: directory entry would overflow storage [ 76.337082][ T5316] rock: sig=0x4654, size=5, remaining=4 [ 76.365472][ T5314] process 'syz.1.441' launched '/dev/fd/4' with NULL argv: empty string added [ 76.400072][ T50] team0 (unregistering): Port device team_slave_1 removed [ 76.434753][ T50] team0 (unregistering): Port device team_slave_0 removed [ 76.530375][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.561209][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.564957][ T5328] loop3: detected capacity change from 0 to 128 [ 76.612427][ T5227] team0: Port device team_slave_0 added [ 76.631025][ T5328] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.660828][ T5227] team0: Port device team_slave_1 added [ 76.676989][ T5328] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.734710][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.742881][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.783849][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.918549][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.929828][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.971086][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.999721][ T3263] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.416520][ T5227] hsr_slave_0: entered promiscuous mode [ 77.426784][ T5227] hsr_slave_1: entered promiscuous mode [ 77.728690][ T5401] netlink: 264 bytes leftover after parsing attributes in process `syz.2.457'. [ 77.745625][ T5403] loop1: detected capacity change from 0 to 128 [ 77.781763][ T5403] loop1: detected capacity change from 0 to 256 [ 77.793564][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.883851][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.969833][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.982400][ T5425] loop2: detected capacity change from 0 to 1024 [ 77.993126][ T5425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.012080][ T5425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.062037][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.092141][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.108601][ T5375] chnl_net:caif_netlink_parms(): no params data found [ 78.125493][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.144304][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.165797][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.256889][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.275660][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.361550][ T1594] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.370518][ T1594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.411148][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.426024][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.538936][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.546794][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.555205][ T5375] bridge_slave_0: entered allmulticast mode [ 78.564850][ T5375] bridge_slave_0: entered promiscuous mode [ 78.572311][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.582215][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.593062][ T5375] bridge_slave_1: entered allmulticast mode [ 78.601327][ T5375] bridge_slave_1: entered promiscuous mode [ 78.607032][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.647149][ T36] bridge_slave_1: left allmulticast mode [ 78.655410][ T36] bridge_slave_1: left promiscuous mode [ 78.664888][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.677726][ T36] bridge_slave_0: left allmulticast mode [ 78.686044][ T36] bridge_slave_0: left promiscuous mode [ 78.694181][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.834565][ T4377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.916688][ T5462] loop2: detected capacity change from 0 to 512 [ 78.930143][ T5462] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 78.942822][ T5462] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.950722][ T5462] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.977133][ T5462] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 78.988607][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.988844][ T5462] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.465: bg 0: block 40: padding at end of block bitmap is not set [ 79.021797][ T5462] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 79.034046][ T5462] EXT4-fs (loop2): 1 truncate cleaned up [ 79.034397][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.041706][ T5462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.070276][ T36] bond0 (unregistering): Released all slaves [ 79.091399][ T5375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.122359][ T5375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.135658][ T4377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.154542][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.189683][ T36] hsr_slave_0: left promiscuous mode [ 79.201977][ T36] hsr_slave_1: left promiscuous mode [ 79.214890][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.225452][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.247886][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.257766][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.337756][ T36] veth1_macvtap: left promiscuous mode [ 79.344182][ T36] veth0_macvtap: left promiscuous mode [ 79.354627][ T36] veth1_vlan: left promiscuous mode [ 79.456092][ T36] team0 (unregistering): Port device team_slave_1 removed [ 79.477698][ T36] team0 (unregistering): Port device team_slave_0 removed [ 79.642843][ T5375] team0: Port device team_slave_0 added [ 79.699498][ T5375] team0: Port device team_slave_1 added [ 79.789233][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.798235][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.828769][ T5375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.850256][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.858507][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.891828][ T5375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.921865][ T5227] veth0_vlan: entered promiscuous mode [ 79.931171][ T5227] veth1_vlan: entered promiscuous mode [ 79.973016][ T5227] veth0_macvtap: entered promiscuous mode [ 79.985375][ T5521] infiniband syz2: set active [ 79.992312][ T5227] veth1_macvtap: entered promiscuous mode [ 79.992532][ T5521] infiniband syz2: added team_slave_1 [ 80.015187][ T5375] hsr_slave_0: entered promiscuous mode [ 80.028022][ T5375] hsr_slave_1: entered promiscuous mode [ 80.040196][ T5521] RDS/IB: syz2: added [ 80.043880][ T5375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.045383][ T5521] smc: adding ib device syz2 with port count 1 [ 80.057709][ T5375] Cannot create hsr debugfs directory [ 80.075903][ T5521] smc: ib device syz2 port 1 has pnetid [ 80.093316][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.107650][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.120147][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.133207][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.144754][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.160919][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.176233][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.212837][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.229164][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.244221][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.258615][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.269825][ T5542] loop2: detected capacity change from 0 to 128 [ 80.272803][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.296425][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.313697][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.320857][ T5542] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.357118][ T5542] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.380001][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.391303][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.403081][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.415358][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.483876][ T4377] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.488349][ T5547] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 80.508107][ T5547] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 80.590005][ T5557] sit1: entered promiscuous mode [ 80.637599][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 80.687548][ T5570] loop2: detected capacity change from 0 to 1024 [ 80.705431][ T5375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.724648][ T5570] EXT4-fs: Ignoring removed nobh option [ 80.731253][ T5570] EXT4-fs: Ignoring removed orlov option [ 80.740657][ T5576] loop1: detected capacity change from 0 to 128 [ 80.764259][ T5375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.779877][ T5570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.821669][ T5375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.835552][ T5583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 80.849201][ T5375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.874535][ T5576] loop1: detected capacity change from 0 to 256 [ 80.895148][ T5583] loop3: detected capacity change from 0 to 256 [ 80.911687][ T5375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.945324][ T5375] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.970429][ T1594] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.980326][ T1594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.995564][ T1594] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.007222][ T1594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.037356][ T5589] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 81.046930][ T5591] netlink: 'syz.1.482': attribute type 7 has an invalid length. [ 81.048159][ T5589] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 81.154447][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 81.154480][ T29] audit: type=1400 audit(1723256891.595:380): avc: denied { setopt } for pid=5596 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.205119][ T29] audit: type=1400 audit(1723256891.645:381): avc: denied { setopt } for pid=5598 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.237738][ T5591] loop1: detected capacity change from 0 to 8192 [ 81.251590][ T5607] loop3: detected capacity change from 0 to 128 [ 81.263400][ T5607] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 81.282742][ T5375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.293639][ T29] audit: type=1400 audit(1723256891.745:382): avc: denied { remount } for pid=5590 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.340320][ T3357] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 81.371695][ T3357] kworker/u8:7: attempt to access beyond end of device [ 81.371695][ T3357] loop3: rw=1, sector=144, nr_sectors = 1 limit=128 [ 81.390375][ T3357] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 81.415117][ T5623] syz.3.484: attempt to access beyond end of device [ 81.415117][ T5623] loop3: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 81.433428][ T5623] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 81.462848][ T5623] syz.3.484: attempt to access beyond end of device [ 81.462848][ T5623] loop3: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 81.497279][ T1594] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 81.538930][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 81.602261][ T5375] veth0_vlan: entered promiscuous mode [ 81.605947][ T5639] loop1: detected capacity change from 0 to 2048 [ 81.614741][ T5375] veth1_vlan: entered promiscuous mode [ 81.638794][ T5639] loop1: detected capacity change from 0 to 512 [ 81.647714][ T5375] veth0_macvtap: entered promiscuous mode [ 81.666872][ T5375] veth1_macvtap: entered promiscuous mode [ 81.684243][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.697964][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.710547][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.724673][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.735886][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.751606][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.754898][ T4377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.765874][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.790788][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.809858][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.821541][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.839881][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.855850][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.871621][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.887129][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.906782][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.920934][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.937753][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.957573][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.976753][ T5312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.029268][ T5657] loop1: detected capacity change from 0 to 512 [ 82.041611][ T5312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.061316][ T5657] 9pnet_fd: Insufficient options for proto=fd [ 82.078098][ T5375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.092702][ T29] audit: type=1400 audit(1723256892.535:383): avc: denied { mount } for pid=5662 comm="syz.3.498" name="/" dev="ramfs" ino=11652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.094029][ T5375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.140524][ T29] audit: type=1400 audit(1723256892.585:384): avc: denied { mounton } for pid=5662 comm="syz.3.498" path="/115/file0" dev="ramfs" ino=11652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 82.141409][ T5375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.184995][ T5375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.209564][ T29] audit: type=1400 audit(1723256892.635:385): avc: denied { write } for pid=5662 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.240038][ T29] audit: type=1400 audit(1723256892.665:386): avc: denied { unmount } for pid=3263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.287834][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 82.303786][ T5312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.367340][ T5675] syzkaller0: entered promiscuous mode [ 82.369781][ T5678] loop1: detected capacity change from 0 to 128 [ 82.382530][ T5675] syzkaller0: entered allmulticast mode [ 82.425269][ T5312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.474298][ T5678] loop1: detected capacity change from 0 to 256 [ 82.569233][ T5312] bridge_slave_1: left allmulticast mode [ 82.576940][ T5312] bridge_slave_1: left promiscuous mode [ 82.584803][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.611970][ T5312] bridge_slave_0: left allmulticast mode [ 82.618821][ T5312] bridge_slave_0: left promiscuous mode [ 82.625679][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.721845][ T5708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5708 comm=syz.1.505 [ 82.853162][ T5713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5713 comm=syz.1.505 [ 82.908934][ T5312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.923625][ T5312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.938143][ T5312] bond0 (unregistering): Released all slaves [ 82.960399][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 83.034101][ T5721] loop1: detected capacity change from 0 to 512 [ 83.121024][ T5650] chnl_net:caif_netlink_parms(): no params data found [ 83.136191][ T29] audit: type=1400 audit(1723256893.575:387): avc: denied { map } for pid=5715 comm="syz.1.508" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.179997][ T5312] hsr_slave_0: left promiscuous mode [ 83.188767][ T5312] hsr_slave_1: left promiscuous mode [ 83.206104][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.220914][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.230532][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.240442][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.250809][ T5312] veth1_macvtap: left promiscuous mode [ 83.261902][ T5312] veth0_macvtap: left promiscuous mode [ 83.270879][ T5312] veth1_vlan: left promiscuous mode [ 83.279608][ T5312] veth0_vlan: left promiscuous mode [ 83.288647][ T5742] loop3: detected capacity change from 0 to 128 [ 83.315938][ T5742] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.332887][ T5742] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.411776][ T5312] team0 (unregistering): Port device team_slave_1 removed [ 83.432168][ T5312] team0 (unregistering): Port device team_slave_0 removed [ 83.484031][ T5735] bond0: entered promiscuous mode [ 83.490219][ T5735] bond_slave_0: entered promiscuous mode [ 83.498249][ T5735] bond_slave_1: entered promiscuous mode [ 83.531648][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.548825][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.560974][ T3263] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.560997][ T5650] bridge_slave_0: entered allmulticast mode [ 83.562853][ T5650] bridge_slave_0: entered promiscuous mode [ 83.599093][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.607652][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.618624][ T5650] bridge_slave_1: entered allmulticast mode [ 83.627571][ T5650] bridge_slave_1: entered promiscuous mode [ 83.657771][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.675222][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.714945][ T5650] team0: Port device team_slave_0 added [ 83.737964][ T5650] team0: Port device team_slave_1 added [ 83.780237][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.791852][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.838214][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.885006][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.902273][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.941057][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.987963][ T5772] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 84.000046][ T5772] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 84.021727][ T5650] hsr_slave_0: entered promiscuous mode [ 84.039583][ T5650] hsr_slave_1: entered promiscuous mode [ 84.050423][ T5650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.066529][ T5650] Cannot create hsr debugfs directory [ 84.146264][ T5734] bond0: left promiscuous mode [ 84.152049][ T5734] bond_slave_0: left promiscuous mode [ 84.158663][ T5734] bond_slave_1: left promiscuous mode [ 84.361008][ T5791] FAULT_INJECTION: forcing a failure. [ 84.361008][ T5791] name failslab, interval 1, probability 0, space 0, times 0 [ 84.380762][ T5791] CPU: 1 UID: 0 PID: 5791 Comm: syz.4.517 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 84.393181][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 84.409777][ T5791] Call Trace: [ 84.416624][ T5791] [ 84.419745][ T5791] dump_stack_lvl+0xf2/0x150 [ 84.425327][ T5791] dump_stack+0x15/0x20 [ 84.430402][ T5791] should_fail_ex+0x229/0x230 [ 84.435662][ T5791] ? __alloc_skb+0x10b/0x310 [ 84.443685][ T5791] should_failslab+0x8f/0xb0 [ 84.448748][ T5791] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 84.456603][ T5791] __alloc_skb+0x10b/0x310 [ 84.464522][ T5791] audit_log_start+0x368/0x6b0 [ 84.469669][ T5791] ? __bpf_prog_run32+0x74/0xa0 [ 84.477886][ T5791] audit_seccomp+0x4b/0x130 [ 84.484185][ T5791] __seccomp_filter+0x6fa/0x1180 [ 84.490263][ T5791] ? __perf_event_task_sched_out+0x111/0xfe0 [ 84.504053][ T5791] __secure_computing+0x9f/0x1c0 [ 84.510118][ T5791] syscall_trace_enter+0xd1/0x1f0 [ 84.517580][ T5791] do_syscall_64+0xaa/0x1c0 [ 84.524069][ T5791] ? clear_bhb_loop+0x55/0xb0 [ 84.530313][ T5791] ? clear_bhb_loop+0x55/0xb0 [ 84.536715][ T5791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.554317][ T5791] RIP: 0033:0x7f3959ef643c [ 84.561192][ T5791] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 84.581173][ T29] audit: type=1326 audit(1723256894.805:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3959ef79f9 code=0x7ffc0000 [ 84.591866][ T5791] RSP: 002b:00007f3958b77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.591896][ T5791] RAX: ffffffffffffffda RBX: 00007f395a085f80 RCX: 00007f3959ef643c [ 84.591909][ T5791] RDX: 000000000000000f RSI: 00007f3958b770a0 RDI: 0000000000000003 [ 84.636216][ T29] audit: type=1326 audit(1723256894.805:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3959ef79f9 code=0x7ffc0000 [ 84.646419][ T5791] RBP: 00007f3958b77090 R08: 0000000000000000 R09: 0000000000000000 [ 84.646475][ T5791] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 84.733668][ T5791] R13: 0000000000000000 R14: 00007f395a085f80 R15: 00007ffff5de4248 [ 84.747976][ T5791] [ 85.008865][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 85.036085][ T5806] loop1: detected capacity change from 0 to 4096 [ 85.054057][ T5806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.069626][ T5806] netlink: 'syz.1.520': attribute type 7 has an invalid length. [ 85.083374][ T5806] netlink: 'syz.1.520': attribute type 39 has an invalid length. [ 85.095647][ T5815] loop4: detected capacity change from 0 to 128 [ 85.119027][ T5806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5806 comm=syz.1.520 [ 85.157964][ T5815] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.160090][ T5806] bridge1: port 1(gretap1) entered blocking state [ 85.180042][ T5806] bridge1: port 1(gretap1) entered disabled state [ 85.189425][ T5815] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.207688][ T5806] gretap1: entered allmulticast mode [ 85.215103][ T5806] gretap1: entered promiscuous mode [ 85.243031][ T5806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5806 comm=syz.1.520 [ 85.257666][ T5650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.272196][ T5650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.283791][ T5806] netlink: 'syz.1.520': attribute type 7 has an invalid length. [ 85.292479][ T5806] netlink: 'syz.1.520': attribute type 39 has an invalid length. [ 85.307281][ T5650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.320303][ T5650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.341627][ T5375] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.373782][ T5806] loop1: detected capacity change from 0 to 512 [ 85.401000][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.431560][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.484964][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.494421][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.557606][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.566897][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.626496][ T5846] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 85.641656][ T5846] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 85.826801][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.920151][ T5755] loop3: detected capacity change from 0 to 512 [ 85.957797][ T5755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.033013][ T5755] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.063168][ T5755] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.514: bg 0: block 248: padding at end of block bitmap is not set [ 86.087576][ T5755] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.514: Failed to acquire dquot type 1 [ 86.109561][ T5650] veth0_vlan: entered promiscuous mode [ 86.125770][ T5755] EXT4-fs (loop3): 1 truncate cleaned up [ 86.137054][ T5755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.181549][ T5650] veth1_vlan: entered promiscuous mode [ 86.221415][ T5650] veth0_macvtap: entered promiscuous mode [ 86.265805][ T5650] veth1_macvtap: entered promiscuous mode [ 86.475665][ T5906] loop0: detected capacity change from 0 to 128 [ 86.502939][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.519460][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.537102][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.551272][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.563932][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.577802][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.592449][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.607191][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.669997][ T5906] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.694734][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.701383][ T5906] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.732095][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.744939][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.757245][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.771478][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.787815][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.800675][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.813173][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.826019][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.837046][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.846851][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.868406][ T5650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.880526][ T5650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.892728][ T5650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.905799][ T5650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.934388][ T5227] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.106204][ T5943] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 87.117519][ T5943] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 87.219559][ T5949] loop3: detected capacity change from 0 to 1024 [ 87.257055][ T5930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.267724][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 87.267816][ T29] audit: type=1400 audit(1723256897.705:402): avc: denied { ioctl } for pid=5929 comm="syz.1.535" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.310054][ T5930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.334548][ T5949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.914492][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.357148][ T29] audit: type=1400 audit(1723256898.765:403): avc: denied { create } for pid=5996 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.505445][ T5999] loop1: detected capacity change from 0 to 128 [ 88.577229][ T6001] loop1: detected capacity change from 0 to 2048 [ 88.606592][ T6001] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.619222][ T6001] EXT4-fs: quotafile must be on filesystem root [ 88.671963][ T29] audit: type=1326 audit(1723256899.115:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3959ef79f9 code=0x0 [ 89.252848][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.331841][ T6020] FAULT_INJECTION: forcing a failure. [ 89.331841][ T6020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.349863][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: syz.1.555 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 89.363965][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 89.375730][ T6020] Call Trace: [ 89.381165][ T6020] [ 89.385157][ T6020] dump_stack_lvl+0xf2/0x150 [ 89.393719][ T6020] dump_stack+0x15/0x20 [ 89.399377][ T6020] should_fail_ex+0x229/0x230 [ 89.405417][ T6020] should_fail+0xb/0x10 [ 89.410570][ T6020] should_fail_usercopy+0x1a/0x20 [ 89.416976][ T6020] _copy_from_iter+0xd3/0xb00 [ 89.422073][ T6020] ? __virt_addr_valid+0x1ed/0x250 [ 89.428224][ T6020] ? __check_object_size+0x35b/0x510 [ 89.439236][ T6020] mptcp_sendmsg+0x80f/0xe60 [ 89.444661][ T6020] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 89.453735][ T6020] inet_sendmsg+0xc5/0xd0 [ 89.458773][ T6020] __sock_sendmsg+0x102/0x180 [ 89.464702][ T6020] __sys_sendto+0x1e5/0x260 [ 89.470687][ T6020] __x64_sys_sendto+0x78/0x90 [ 89.479447][ T6020] x64_sys_call+0x2959/0x2d60 [ 89.485137][ T6020] do_syscall_64+0xc9/0x1c0 [ 89.490631][ T6020] ? clear_bhb_loop+0x55/0xb0 [ 89.499133][ T6020] ? clear_bhb_loop+0x55/0xb0 [ 89.507479][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.516044][ T6020] RIP: 0033:0x7f7372f479f9 [ 89.523155][ T6020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.553684][ T6020] RSP: 002b:00007f7371ba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.566166][ T6020] RAX: ffffffffffffffda RBX: 00007f73730d6058 RCX: 00007f7372f479f9 [ 89.577040][ T6020] RDX: 00000000000088d5 RSI: 00000000200000c0 RDI: 0000000000000005 [ 89.588425][ T6020] RBP: 00007f7371ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 89.599421][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.610366][ T6020] R13: 0000000000000001 R14: 00007f73730d6058 R15: 00007fff5e741bc8 [ 89.621027][ T6020] [ 89.645817][ T5969] loop0: detected capacity change from 0 to 512 [ 89.675639][ T5969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.697544][ T5969] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.708297][ T5969] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.543: bg 0: block 248: padding at end of block bitmap is not set [ 89.728003][ T5969] Quota error (device loop0): write_blk: dquota write failed [ 89.739288][ T5969] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 89.749292][ T6023] ieee802154 phy0 wpan0: encryption failed: -90 [ 89.750978][ T5969] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.543: Failed to acquire dquot type 1 [ 89.766194][ T29] audit: type=1400 audit(1723256900.185:405): avc: denied { write } for pid=6022 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.815592][ T5969] EXT4-fs (loop0): 1 truncate cleaned up [ 89.831610][ T5969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.871660][ T6025] Process accounting resumed [ 89.885985][ T6023] loop4: detected capacity change from 0 to 8192 [ 89.921771][ T6023] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.265030][ T6023] netlink: 68 bytes leftover after parsing attributes in process `syz.4.556'. [ 90.281849][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.347150][ T29] audit: type=1326 audit(1723256900.765:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d9bb79f9 code=0x7ffc0000 [ 90.379756][ T29] audit: type=1326 audit(1723256900.765:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d9bb79f9 code=0x7ffc0000 [ 90.414464][ T29] audit: type=1326 audit(1723256900.765:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff1d9bb79f9 code=0x7ffc0000 [ 90.443286][ T29] audit: type=1326 audit(1723256900.765:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1d9bb79f9 code=0x7ffc0000 [ 90.551317][ T6058] loop1: detected capacity change from 0 to 128 [ 90.564202][ T6058] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 90.758385][ T6081] FAULT_INJECTION: forcing a failure. [ 90.758385][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 90.775246][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.1.578 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 90.787476][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 90.798843][ T6081] Call Trace: [ 90.802815][ T6081] [ 90.807976][ T6081] dump_stack_lvl+0xf2/0x150 [ 90.813866][ T6081] dump_stack+0x15/0x20 [ 90.819073][ T6081] should_fail_ex+0x229/0x230 [ 90.824784][ T6081] ? __nf_conntrack_alloc+0xcd/0x280 [ 90.832625][ T6081] should_failslab+0x8f/0xb0 [ 90.840039][ T6081] kmem_cache_alloc_noprof+0x4c/0x290 [ 90.846473][ T6081] __nf_conntrack_alloc+0xcd/0x280 [ 90.853196][ T6081] init_conntrack+0x191/0x970 [ 90.860160][ T6081] nf_conntrack_in+0x899/0xf20 [ 90.867109][ T6081] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 90.875593][ T6081] ipv4_conntrack_in+0x1d/0x30 [ 90.884967][ T6081] nf_hook_slow+0x86/0x1b0 [ 90.891344][ T6081] ? __pfx_ip_rcv+0x10/0x10 [ 90.898344][ T6081] ip_rcv+0x103/0x140 [ 90.903126][ T6081] ? __pfx_ip_rcv_finish+0x10/0x10 [ 90.911458][ T6081] ? __pfx_ip_rcv+0x10/0x10 [ 90.917291][ T6081] __netif_receive_skb+0x10a/0x280 [ 90.925111][ T6081] netif_receive_skb+0x4a/0x320 [ 90.932594][ T6081] ? virtio_net_hdr_to_skb+0x6c4/0xb50 [ 90.939292][ T6081] ? tun_rx_batched+0xba/0x410 [ 90.944634][ T6081] tun_rx_batched+0xf0/0x410 [ 90.950197][ T6081] tun_get_user+0x1e77/0x24b0 [ 90.957451][ T6081] ? kstrtoull+0x110/0x140 [ 90.962842][ T6081] ? ref_tracker_alloc+0x1f5/0x2f0 [ 90.969211][ T6081] tun_chr_write_iter+0x18e/0x240 [ 90.977700][ T6081] vfs_write+0x78f/0x900 [ 90.982782][ T6081] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 90.991374][ T6081] ksys_write+0xeb/0x1b0 [ 90.996671][ T6081] __x64_sys_write+0x42/0x50 [ 91.002551][ T6081] x64_sys_call+0x27dd/0x2d60 [ 91.008360][ T6081] do_syscall_64+0xc9/0x1c0 [ 91.014209][ T6081] ? clear_bhb_loop+0x55/0xb0 [ 91.019779][ T6081] ? clear_bhb_loop+0x55/0xb0 [ 91.027244][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.035724][ T6081] RIP: 0033:0x7f7372f464df [ 91.040922][ T6081] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 91.067915][ T6081] RSP: 002b:00007f7371bc7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 91.080521][ T6081] RAX: ffffffffffffffda RBX: 00007f73730d5f80 RCX: 00007f7372f464df [ 91.090772][ T6081] RDX: 000000000000003e RSI: 0000000020000140 RDI: 00000000000000c8 [ 91.104417][ T6081] RBP: 00007f7371bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.115523][ T6081] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 91.126531][ T6081] R13: 0000000000000001 R14: 00007f73730d5f80 R15: 00007fff5e741bc8 [ 91.139880][ T6081] [ 91.244715][ T6096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'. [ 91.417803][ T6103] veth0_vlan: entered allmulticast mode [ 91.437655][ T6103] vlan1: entered allmulticast mode [ 91.577369][ T6109] syzkaller0: entered allmulticast mode [ 91.603555][ T6113] netlink: 'syz.4.591': attribute type 4 has an invalid length. [ 91.628281][ T6113] netlink: 'syz.4.591': attribute type 4 has an invalid length. [ 91.662134][ T6115] loop4: detected capacity change from 0 to 2048 [ 91.678050][ T6115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.889092][ T6121] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.909333][ T6121] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 91.926278][ T6121] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.926278][ T6121] [ 91.941123][ T6121] EXT4-fs (loop4): Total free blocks count 0 [ 91.949927][ T6121] EXT4-fs (loop4): Free/Dirty block details [ 91.956906][ T6121] EXT4-fs (loop4): free_blocks=2415919104 [ 91.964308][ T6121] EXT4-fs (loop4): dirty_blocks=16 [ 91.973231][ T6121] EXT4-fs (loop4): Block reservation details [ 91.980733][ T6121] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 91.993053][ T6124] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 92.210514][ T6132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.594'. [ 92.357395][ T6149] loop2: detected capacity change from 0 to 1024 [ 92.371065][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 92.371080][ T29] audit: type=1326 audit(1723256902.815:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5473a179f9 code=0x7ffc0000 [ 92.371104][ T29] audit: type=1326 audit(1723256902.815:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5473a179f9 code=0x7ffc0000 [ 92.371183][ T29] audit: type=1326 audit(1723256902.815:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5473a179f9 code=0x7ffc0000 [ 92.371206][ T29] audit: type=1326 audit(1723256902.815:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5473a179f9 code=0x7ffc0000 [ 92.371229][ T29] audit: type=1326 audit(1723256902.815:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5473a179f9 code=0x7ffc0000 [ 92.371274][ T29] audit: type=1326 audit(1723256902.815:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5473a16390 code=0x7ffc0000 [ 92.464369][ T6149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.567948][ T29] audit: type=1326 audit(1723256902.975:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5473a179f9 code=0x7ffc0000 [ 92.639223][ T29] audit: type=1326 audit(1723256902.975:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6129 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5473a179f9 code=0x7ffc0000 [ 92.671307][ T29] audit: type=1400 audit(1723256903.095:562): avc: denied { name_bind } for pid=6148 comm="syz.2.600" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 92.769503][ T5650] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.785511][ T6155] netlink: 14 bytes leftover after parsing attributes in process `syz.1.602'. [ 92.820385][ T29] audit: type=1400 audit(1723256903.265:563): avc: denied { connect } for pid=6154 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.859050][ T6161] loop4: detected capacity change from 0 to 1024 [ 92.866667][ T6161] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 92.888220][ T6159] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 92.954414][ T6166] atomic_op ffff888108120d28 conn xmit_atomic 0000000000000000 [ 93.026488][ T6173] loop4: detected capacity change from 0 to 164 [ 93.077145][ T6170] rock: directory entry would overflow storage [ 93.084264][ T6170] rock: sig=0x4f50, size=4, remaining=3 [ 93.090447][ T6179] capability: warning: `syz.3.610' uses deprecated v2 capabilities in a way that may be insecure [ 93.119289][ T6170] isofs: Unable to find the ".." directory for NFS. [ 93.129120][ T6179] loop3: detected capacity change from 0 to 2048 [ 93.192037][ T6189] FAULT_INJECTION: forcing a failure. [ 93.192037][ T6189] name failslab, interval 1, probability 0, space 0, times 0 [ 93.209518][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.4.612 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 93.223517][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 93.236734][ T6189] Call Trace: [ 93.240175][ T6189] [ 93.243302][ T6189] dump_stack_lvl+0xf2/0x150 [ 93.249354][ T6189] dump_stack+0x15/0x20 [ 93.255038][ T6189] should_fail_ex+0x229/0x230 [ 93.259839][ T6189] ? copy_signal+0x54/0x370 [ 93.265148][ T6189] should_failslab+0x8f/0xb0 [ 93.270390][ T6189] kmem_cache_alloc_noprof+0x4c/0x290 [ 93.279083][ T6189] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 93.287030][ T6189] copy_signal+0x54/0x370 [ 93.293702][ T6189] copy_process+0xeba/0x1f90 [ 93.300729][ T6189] kernel_clone+0x167/0x5e0 [ 93.306343][ T6189] ? vfs_write+0x5a5/0x900 [ 93.311569][ T6189] __x64_sys_clone+0xe8/0x120 [ 93.317151][ T6189] x64_sys_call+0x2d23/0x2d60 [ 93.323993][ T6189] do_syscall_64+0xc9/0x1c0 [ 93.330686][ T6189] ? clear_bhb_loop+0x55/0xb0 [ 93.337732][ T6189] ? clear_bhb_loop+0x55/0xb0 [ 93.344479][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.353106][ T6189] RIP: 0033:0x7f3959ef79f9 [ 93.359019][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.385787][ T6189] RSP: 002b:00007f3958b76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 93.399417][ T6189] RAX: ffffffffffffffda RBX: 00007f395a085f80 RCX: 00007f3959ef79f9 [ 93.410703][ T6189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.421964][ T6189] RBP: 00007f3958b77090 R08: 0000000000000000 R09: 0000000000000000 [ 93.432653][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.443357][ T6189] R13: 0000000000000000 R14: 00007f395a085f80 R15: 00007ffff5de4248 [ 93.453168][ T6189] [ 93.784347][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 93.958004][ T6213] FAULT_INJECTION: forcing a failure. [ 93.958004][ T6213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.974748][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.2.619 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 93.991960][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 94.003456][ T6213] Call Trace: [ 94.007739][ T6213] [ 94.010955][ T6213] dump_stack_lvl+0xf2/0x150 [ 94.017467][ T6213] dump_stack+0x15/0x20 [ 94.022563][ T6213] should_fail_ex+0x229/0x230 [ 94.029014][ T6213] should_fail+0xb/0x10 [ 94.034408][ T6213] should_fail_usercopy+0x1a/0x20 [ 94.040838][ T6213] _copy_to_user+0x1e/0xa0 [ 94.047840][ T6213] simple_read_from_buffer+0xa0/0x110 [ 94.054640][ T6213] proc_fail_nth_read+0xfc/0x140 [ 94.060582][ T6213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.067097][ T6213] vfs_read+0x1a2/0x6e0 [ 94.072974][ T6213] ? __rcu_read_unlock+0x4e/0x70 [ 94.080126][ T6213] ? __fget_files+0x1da/0x210 [ 94.085791][ T6213] ksys_read+0xeb/0x1b0 [ 94.093119][ T6213] __x64_sys_read+0x42/0x50 [ 94.099850][ T6213] x64_sys_call+0x27d3/0x2d60 [ 94.106420][ T6213] do_syscall_64+0xc9/0x1c0 [ 94.114260][ T6213] ? clear_bhb_loop+0x55/0xb0 [ 94.119947][ T6213] ? clear_bhb_loop+0x55/0xb0 [ 94.124990][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.134223][ T6213] RIP: 0033:0x7ff1d9bb643c [ 94.139432][ T6213] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 94.165592][ T6213] RSP: 002b:00007ff1d8837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.175921][ T6213] RAX: ffffffffffffffda RBX: 00007ff1d9d45f80 RCX: 00007ff1d9bb643c [ 94.186246][ T6213] RDX: 000000000000000f RSI: 00007ff1d88370a0 RDI: 0000000000000004 [ 94.198075][ T6213] RBP: 00007ff1d8837090 R08: 0000000000000000 R09: 0000000000000000 [ 94.209088][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.220925][ T6213] R13: 0000000000000000 R14: 00007ff1d9d45f80 R15: 00007ffc2be02f08 [ 94.230016][ T6213] [ 94.341021][ T6222] sch_tbf: burst 0 is lower than device veth1_macvtap mtu (1514) ! [ 94.369219][ T6216] serio: Serial port pts0 [ 94.417308][ T6229] dvmrp0: entered allmulticast mode [ 94.531249][ T6238] loop2: detected capacity change from 0 to 512 [ 94.546788][ T6238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.590974][ T5650] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.595343][ T6231] dvmrp0: left allmulticast mode [ 94.671482][ T6242] loop2: detected capacity change from 0 to 1024 [ 94.691576][ T6242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.739537][ T6246] loop0: detected capacity change from 0 to 1024 [ 94.741950][ T6242] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 94.757387][ T6246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.778301][ T6246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.812645][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.813066][ T5650] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.842224][ T6250] loop1: detected capacity change from 0 to 512 [ 94.878473][ T6250] loop1: detected capacity change from 0 to 2048 [ 94.878527][ T3335] IPVS: starting estimator thread 0... [ 94.918312][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.968059][ T6258] loop2: detected capacity change from 0 to 128 [ 94.986255][ T6255] IPVS: using max 3168 ests per chain, 158400 per kthread [ 95.021175][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.081097][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.130468][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.161862][ T6278] dvmrp0: entered allmulticast mode [ 95.227031][ T36] bridge_slave_1: left allmulticast mode [ 95.234947][ T36] bridge_slave_1: left promiscuous mode [ 95.242718][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.271231][ T36] bridge_slave_0: left allmulticast mode [ 95.278325][ T36] bridge_slave_0: left promiscuous mode [ 95.285248][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.298737][ T6285] loop1: detected capacity change from 0 to 1024 [ 95.385971][ T6287] loop1: detected capacity change from 0 to 2048 [ 95.468459][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.483481][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.502653][ T36] bond0 (unregistering): Released all slaves [ 95.521507][ T6291] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 95.540719][ T6291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.551830][ T6291] IPv6: NLM_F_CREATE should be set when creating new route [ 95.564303][ T6291] IPv6: NLM_F_CREATE should be set when creating new route [ 95.612348][ T6291] loop0: detected capacity change from 0 to 1024 [ 95.627551][ T6291] EXT4-fs: dax option not supported [ 95.715959][ T36] hsr_slave_0: left promiscuous mode [ 95.729014][ T6315] loop1: detected capacity change from 0 to 164 [ 95.738535][ T36] hsr_slave_1: left promiscuous mode [ 95.751083][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.761762][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.763090][ T6315] Unable to read rock-ridge attributes [ 95.776390][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.779642][ T6315] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.786540][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.811472][ T36] veth1_macvtap: left promiscuous mode [ 95.821159][ T36] veth0_macvtap: left promiscuous mode [ 95.829097][ T36] veth1_vlan: left promiscuous mode [ 95.836159][ T36] veth0_vlan: left promiscuous mode [ 95.875440][ T6322] loop2: detected capacity change from 0 to 128 [ 95.900567][ T6322] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.922096][ T6322] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.972215][ T36] team0 (unregistering): Port device team_slave_1 removed [ 95.985595][ T36] team0 (unregistering): Port device team_slave_0 removed [ 96.038417][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 96.085914][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.096223][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.107756][ T6263] bridge_slave_0: entered allmulticast mode [ 96.115732][ T6263] bridge_slave_0: entered promiscuous mode [ 96.124201][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.137107][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.148088][ T6263] bridge_slave_1: entered allmulticast mode [ 96.155614][ T6263] bridge_slave_1: entered promiscuous mode [ 96.179659][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.193930][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.233061][ T6348] FAULT_INJECTION: forcing a failure. [ 96.233061][ T6348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.249389][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: syz.1.653 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 96.266491][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 96.279202][ T6348] Call Trace: [ 96.282499][ T6348] [ 96.287902][ T6348] dump_stack_lvl+0xf2/0x150 [ 96.297406][ T6348] dump_stack+0x15/0x20 [ 96.303113][ T6348] should_fail_ex+0x229/0x230 [ 96.308543][ T6348] should_fail+0xb/0x10 [ 96.314603][ T6348] should_fail_usercopy+0x1a/0x20 [ 96.321576][ T6348] _copy_from_user+0x1e/0xd0 [ 96.329079][ T6348] copy_msghdr_from_user+0x54/0x2a0 [ 96.337268][ T6348] __sys_sendmsg+0x17d/0x280 [ 96.344868][ T6348] __x64_sys_sendmsg+0x46/0x50 [ 96.352441][ T6348] x64_sys_call+0x2689/0x2d60 [ 96.360643][ T6348] do_syscall_64+0xc9/0x1c0 [ 96.365971][ T6348] ? clear_bhb_loop+0x55/0xb0 [ 96.376417][ T6348] ? clear_bhb_loop+0x55/0xb0 [ 96.382655][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.391683][ T6348] RIP: 0033:0x7f7372f479f9 [ 96.398811][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.426432][ T6348] RSP: 002b:00007f7371bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.439666][ T6348] RAX: ffffffffffffffda RBX: 00007f73730d5f80 RCX: 00007f7372f479f9 [ 96.450240][ T6348] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 96.460827][ T6348] RBP: 00007f7371bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.473833][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.485029][ T6348] R13: 0000000000000000 R14: 00007f73730d5f80 R15: 00007fff5e741bc8 [ 96.496400][ T6348] [ 96.514371][ T6263] team0: Port device team_slave_0 added [ 96.526460][ T6263] team0: Port device team_slave_1 added [ 96.548890][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.558786][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.593595][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.608768][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.618620][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.659875][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.714744][ T6263] hsr_slave_0: entered promiscuous mode [ 96.725395][ T6359] loop1: detected capacity change from 0 to 512 [ 96.735432][ T6263] hsr_slave_1: entered promiscuous mode [ 96.748265][ T6263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.761014][ T6263] Cannot create hsr debugfs directory [ 96.763696][ T6359] ext4: Unknown parameter './control' [ 96.779731][ T5650] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.839344][ T6373] loop2: detected capacity change from 0 to 1024 [ 96.856637][ T6377] loop0: detected capacity change from 0 to 512 [ 96.869642][ T6373] EXT4-fs: Ignoring removed orlov option [ 96.891851][ T6377] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 96.921521][ T6373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.925579][ T6377] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 96.953219][ T6377] EXT4-fs (loop0): 1 truncate cleaned up [ 96.963245][ T6377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.992564][ T5650] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.005153][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.658'. [ 97.031693][ T6377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31262 sclass=netlink_route_socket pid=6377 comm=syz.0.658 [ 97.067579][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.154021][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 97.232738][ T6417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6417 comm=syz.0.664 [ 97.301371][ T6263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.316699][ T6263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.337677][ T6263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.354867][ T6426] FAULT_INJECTION: forcing a failure. [ 97.354867][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 97.370136][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.3.665 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 97.382558][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.396368][ T6426] Call Trace: [ 97.400790][ T6426] [ 97.404021][ T6426] dump_stack_lvl+0xf2/0x150 [ 97.410131][ T6426] dump_stack+0x15/0x20 [ 97.415302][ T6426] should_fail_ex+0x229/0x230 [ 97.421900][ T6426] ? unix_bind+0x171/0x870 [ 97.427113][ T6426] should_failslab+0x8f/0xb0 [ 97.435006][ T6426] __kmalloc_noprof+0xa5/0x370 [ 97.445163][ T6426] unix_bind+0x171/0x870 [ 97.454134][ T6426] __sys_bind+0x15b/0x1d0 [ 97.461107][ T6426] __x64_sys_bind+0x41/0x50 [ 97.467552][ T6426] x64_sys_call+0x201c/0x2d60 [ 97.472783][ T6426] do_syscall_64+0xc9/0x1c0 [ 97.477956][ T6426] ? clear_bhb_loop+0x55/0xb0 [ 97.483892][ T6426] ? clear_bhb_loop+0x55/0xb0 [ 97.489292][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.496431][ T6426] RIP: 0033:0x7f5473a179f9 [ 97.503049][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.528594][ T6426] RSP: 002b:00007f5472697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 97.538748][ T6426] RAX: ffffffffffffffda RBX: 00007f5473ba5f80 RCX: 00007f5473a179f9 [ 97.548998][ T6426] RDX: 0000000000000056 RSI: 00000000200001c0 RDI: 0000000000000005 [ 97.563175][ T6426] RBP: 00007f5472697090 R08: 0000000000000000 R09: 0000000000000000 [ 97.574041][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.582688][ T6426] R13: 0000000000000000 R14: 00007f5473ba5f80 R15: 00007ffea7de2548 [ 97.594734][ T6426] [ 97.601433][ T6263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.673852][ T6438] loop3: detected capacity change from 0 to 128 [ 97.695646][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.711731][ T6438] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.726912][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.734533][ T6438] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.750983][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.760570][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.775868][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.785412][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.985703][ T6410] delete_channel: no stack [ 98.000972][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.061095][ T6474] loop0: detected capacity change from 0 to 1024 [ 98.087542][ T6471] netlink: 52 bytes leftover after parsing attributes in process `syz.1.669'. [ 98.128297][ T6474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.284854][ T6474] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.313471][ T6263] veth0_vlan: entered promiscuous mode [ 98.345695][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.350417][ T6263] veth1_vlan: entered promiscuous mode [ 98.422158][ T6263] veth0_macvtap: entered promiscuous mode [ 98.445316][ T6263] veth1_macvtap: entered promiscuous mode [ 98.474617][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.488022][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.504243][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.516548][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.529103][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.546853][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.559620][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.578813][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.594217][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.614650][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.632846][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.646691][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.659957][ T6397] loop2: detected capacity change from 0 to 512 [ 98.665462][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.675112][ T6397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.689105][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.714086][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.727156][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.742085][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.747259][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 98.747277][ T29] audit: type=1400 audit(1723256909.175:581): avc: denied { setopt } for pid=6509 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.764854][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.803543][ T6397] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.825048][ T6397] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.662: bg 0: block 248: padding at end of block bitmap is not set [ 98.846729][ T3263] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.862073][ T6397] Quota error (device loop2): write_blk: dquota write failed [ 98.870792][ T6397] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.885713][ T6397] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.662: Failed to acquire dquot type 1 [ 98.904884][ T6535] loop3: detected capacity change from 0 to 512 [ 98.922462][ T6397] EXT4-fs (loop2): 1 truncate cleaned up [ 98.923229][ T6263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.941813][ T6263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.952061][ T6263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.964702][ T6263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.983087][ T6535] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.993662][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.046686][ T6535] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.673: bg 0: block 248: padding at end of block bitmap is not set [ 99.086429][ T6535] Quota error (device loop3): write_blk: dquota write failed [ 99.099194][ T6535] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.112579][ T6535] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.673: Failed to acquire dquot type 1 [ 99.133441][ T6535] EXT4-fs (loop3): 1 truncate cleaned up [ 99.141333][ T6535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.170196][ T6552] loop0: detected capacity change from 0 to 512 [ 99.190579][ T6552] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 99.201107][ T6552] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 99.213540][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.226498][ T6552] EXT4-fs (loop0): 1 truncate cleaned up [ 99.244627][ T6552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.257863][ T5650] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.267172][ T6562] loop3: detected capacity change from 0 to 128 [ 99.280341][ T6552] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 99.298392][ T6562] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.321155][ T6552] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.332184][ T6562] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.382952][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'. [ 99.603743][ T6577] loop2: detected capacity change from 0 to 512 [ 99.613608][ T6577] EXT4-fs: Ignoring removed oldalloc option [ 99.627118][ T6577] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.686: Parent and EA inode have the same ino 15 [ 99.643444][ T6577] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.686: Parent and EA inode have the same ino 15 [ 99.663169][ T6577] EXT4-fs (loop2): 1 orphan inode deleted [ 99.670778][ T6577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.888371][ T29] audit: type=1400 audit(1723256910.335:582): avc: denied { write } for pid=6579 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 100.178738][ T3263] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.567755][ T5650] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.693523][ T6606] loop0: detected capacity change from 0 to 1024 [ 100.722479][ T6609] loop2: detected capacity change from 0 to 2048 [ 100.739401][ T6606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.780869][ T6609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.917242][ T6615] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 100.926476][ T6615] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 100.972792][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.042169][ T6622] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.063855][ T6622] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 101.080530][ T6622] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.080530][ T6622] [ 101.095299][ T6622] EXT4-fs (loop2): Total free blocks count 0 [ 101.102906][ T6622] EXT4-fs (loop2): Free/Dirty block details [ 101.112548][ T6622] EXT4-fs (loop2): free_blocks=2415919104 [ 101.118348][ T6622] EXT4-fs (loop2): dirty_blocks=16 [ 101.125352][ T6622] EXT4-fs (loop2): Block reservation details [ 101.138703][ T6622] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 101.151382][ T6623] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 101.230764][ T6620] loop0: detected capacity change from 0 to 512 [ 101.358410][ T6620] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 101.372966][ T6620] EXT4-fs (loop0): 1 truncate cleaned up [ 101.385911][ T6620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.409839][ T6620] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.697: Logical block already allocated [ 101.425404][ T6620] EXT4-fs (loop0): Remounting filesystem read-only [ 101.444912][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.478664][ T6632] ieee802154 phy0 wpan0: encryption failed: -90 [ 101.525281][ T6632] loop0: detected capacity change from 0 to 8192 [ 101.535156][ T6632] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.715334][ T6647] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 101.724726][ T6647] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 101.812194][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 101.847511][ T29] audit: type=1400 audit(1723256912.295:583): avc: denied { shutdown } for pid=6650 comm="syz.2.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.930590][ T6632] netlink: 68 bytes leftover after parsing attributes in process `syz.0.701'. [ 101.972147][ T6655] loop1: detected capacity change from 0 to 256 [ 102.099371][ T6597] loop3: detected capacity change from 0 to 512 [ 102.117201][ T6597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.129090][ T6597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.139045][ T6597] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.692: bg 0: block 248: padding at end of block bitmap is not set [ 102.160606][ T6670] loop0: detected capacity change from 0 to 512 [ 102.167966][ T6597] Quota error (device loop3): write_blk: dquota write failed [ 102.177655][ T6597] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 102.190566][ T6597] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.692: Failed to acquire dquot type 1 [ 102.208161][ T6670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.252235][ T6597] EXT4-fs (loop3): 1 truncate cleaned up [ 102.358389][ T6670] EXT4-fs (loop0): 1 truncate cleaned up [ 102.367611][ T6670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.526422][ T6597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.545577][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.549685][ T6683] netlink: 276 bytes leftover after parsing attributes in process `syz.4.714'. [ 102.636987][ T6689] loop0: detected capacity change from 0 to 1764 [ 102.775392][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.874574][ T6714] loop3: detected capacity change from 0 to 2048 [ 102.888286][ T29] audit: type=1400 audit(1723256913.335:584): avc: denied { bind } for pid=6713 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.895680][ T6718] loop2: detected capacity change from 0 to 128 [ 102.927355][ T6715] netlink: 'syz.0.721': attribute type 12 has an invalid length. [ 103.042809][ T6718] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.096601][ T6718] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.701758][ T5650] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.723225][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 103.742978][ T6736] loop3: detected capacity change from 0 to 1024 [ 103.771267][ T6736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.777939][ T6741] loop2: detected capacity change from 0 to 512 [ 103.798302][ T6737] loop4: detected capacity change from 0 to 256 [ 103.812011][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 103.813050][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 103.813102][ T29] audit: type=1400 audit(1723256914.235:586): avc: denied { create } for pid=6735 comm="syz.4.729" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.836761][ T6741] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.730: invalid indirect mapped block 4294967295 (level 1) [ 103.884595][ T6737] msdos: Unknown parameter 'ÿÿÿÿ' [ 103.885417][ T29] audit: type=1400 audit(1723256914.335:587): avc: denied { mounton } for pid=6735 comm="syz.4.729" path="/10/file0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.896598][ T6741] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.730: invalid indirect mapped block 4294967295 (level 1) [ 103.955826][ T29] audit: type=1400 audit(1723256914.395:588): avc: denied { read } for pid=6735 comm="syz.4.729" name="file0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.967522][ T6737] loop4: detected capacity change from 0 to 128 [ 103.986214][ T6736] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0003] [ 103.994226][ T6748] loop0: detected capacity change from 0 to 1024 [ 104.013002][ T6741] EXT4-fs (loop2): 2 truncates cleaned up [ 104.020334][ T6736] System zones: 0-1, 3-12 [ 104.029923][ T6748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.030851][ T6741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.039020][ T6748] EXT4-fs: Ignoring removed bh option [ 104.066577][ T6736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.083605][ T29] audit: type=1400 audit(1723256914.395:589): avc: denied { open } for pid=6735 comm="syz.4.729" path="/10/file0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.096304][ T6737] vfat: Unknown parameter ' [ 104.096304][ T6737] ' [ 104.147609][ T29] audit: type=1400 audit(1723256914.585:590): avc: denied { listen } for pid=6735 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.159059][ T6748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.195000][ T3263] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.257585][ T29] audit: type=1400 audit(1723256914.695:591): avc: denied { read } for pid=6755 comm="syz.3.733" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.289064][ T29] audit: type=1400 audit(1723256914.695:592): avc: denied { open } for pid=6755 comm="syz.3.733" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.321986][ T6757] loop3: detected capacity change from 0 to 256 [ 104.332561][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.353588][ T5650] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.480461][ T29] audit: type=1400 audit(1723256914.925:593): avc: denied { execute } for pid=6769 comm="syz.2.736" path="/47/cpuacct.usage_percpu_user" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.564488][ T2960] ================================================================== [ 104.575312][ T2960] BUG: KCSAN: data-race in __d_instantiate / step_into [ 104.585824][ T2960] [ 104.588590][ T2960] write to 0xffff88810645ce70 of 8 bytes by task 3334 on cpu 1: [ 104.597542][ T2960] __d_instantiate+0x1fe/0x3c0 [ 104.602718][ T2960] d_instantiate+0x59/0x80 [ 104.608132][ T2960] shmem_symlink+0x36a/0x3a0 [ 104.614589][ T2960] vfs_symlink+0xca/0x1d0 [ 104.621296][ T2960] do_symlinkat+0xe3/0x350 [ 104.626275][ T2960] __x64_sys_symlink+0x50/0x60 [ 104.631397][ T2960] x64_sys_call+0x2819/0x2d60 [ 104.637351][ T2960] do_syscall_64+0xc9/0x1c0 [ 104.643618][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.651420][ T2960] [ 104.654456][ T2960] read to 0xffff88810645ce70 of 8 bytes by task 2960 on cpu 0: [ 104.665240][ T2960] step_into+0x123/0x810 [ 104.671481][ T2960] walk_component+0x169/0x230 [ 104.677022][ T2960] path_lookupat+0x10a/0x2b0 [ 104.683032][ T2960] filename_lookup+0x127/0x300 [ 104.688514][ T2960] do_readlinkat+0x89/0x210 [ 104.696066][ T2960] __x64_sys_readlink+0x47/0x60 [ 104.702817][ T2960] x64_sys_call+0x13c3/0x2d60 [ 104.708884][ T2960] do_syscall_64+0xc9/0x1c0 [ 104.713737][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.720281][ T2960] [ 104.722891][ T2960] value changed: 0x0000000000000000 -> 0xffff8881261ee360 [ 104.731671][ T2960] [ 104.735389][ T2960] Reported by Kernel Concurrency Sanitizer on: [ 104.742053][ T2960] CPU: 0 UID: 0 PID: 2960 Comm: udevd Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 104.753780][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 104.764909][ T2960] ================================================================== [ 104.769833][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'.