last executing test programs: 15.840778997s ago: executing program 4 (id=2507): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = memfd_create(&(0x7f0000000a80)='\x00\x00\x1a\x00\x00\x00z\x9b\xb2\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x99\xe5\x8f\xe2\xb6\xdc\n\xf5kWnr\x92G\xbd\b\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xc3_M\xbe\x19\xea#\xffWj\xdc\xd4\xb1\xcc\\\xa8N\x8c)[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xbfF}\xbd\x1c\xff\xff\xff\xff\xff\xff\xb5v*R?\xa0Y$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xe8\xd6\xae1\xc3\x9e\xec`\xf2\xd1BM\x10\xc6\xb4F\n\x10q\xde\v\xec\xa2\x92x\xe9\xf5\x1f\xc9hj\xc0\xe5\xce\xd1v\bez\"\xb1\xd3 \xbc\x9b\xe8\x86u\x0e\v\x17\x85\xb8\xdb2\x92\x00\x00\x00\x00\x00\x00\x00\x00\x80\x9c99\n|\xc1,\xd3\xedI\x11\xf9\xa6wN\xa3\xc9M\xe6\x92\xaf\xb2I\x16}\xae\xe8\xa8\xd7\xad\\\x84\v\fB\xe2d\x90\xdd\x90\x1e\x8c\xe4\xc70\x93\xc7\x8b\xec/a8\x95a\x8c?)\xa2\xf6~\xa7\xc3\xfc\x19\xa8\x98\x1f\x8d\x13\x00e;g]\x1c\x1d\xb0\xa0\x96\xac\x9f3\xe8\xa7R\x92\xe6\n\xdda\x86\xa8\x13\xf1\xccQa\xef\x94u\xed\x0fvq=|\xb0\xc2I/\\}\xf4\xb7\xda\xdds\xf3\xf9\f\xff\xcc\xf3\xa8\x02\xa9/\xfd\xcfn\x00\x84wa[,\xd8\xda\xd4h\xdd\xc4\x80\xb9_\x7f\xa1\x90H\x824Y\x89E', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2}, 0x18) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x48d0}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4840}, 0x44041) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=@delchain={0x24, 0x2a, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}}}, 0x24}}, 0x40) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="10002abd7000fddbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30200008000b0008000000060011000400000008001300010000800500140001000000080001007063690011000200303030303a30303a31302e300000000008000b0004000000060011000200000008001300e37c000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001ffffff060011000500000008001300030000000500140000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write(r9, &(0x7f0000000000)="9b6862fa82e59a033b7656a13619040fa35872ff56db9371c404cc27d3797b9b89ab7da9", 0x24) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000002080)={'bond0\x00', @ifru_names='ip6gre0\x00'}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000a140100000000e4ffffffff070001"], 0x28}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000400000015ffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) io_uring_setup(0x2ac5, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0xb3}) 14.781357118s ago: executing program 4 (id=2522): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370426ffffff7f0000e8ffff0d00", @ANYRES32=r2, @ANYBLOB="8304050001000000240012800e00010069703667726574617000000010000280040012"], 0x44}}, 0xff00000000000000) 14.781028248s ago: executing program 4 (id=2523): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a400ff000000003e040000000000002d000000000000005504000001ed0a002500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000198efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a617c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6da1d92c5e9166d876e42f2429d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13352292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc0000000000d7c5af73cd83625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aaa0fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e0700d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3067fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76a02000afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518ef3a6030f88ec5a5cb760ac45e3a521ce6173acaff7471a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bf0cb260c87c73fca9c83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080dff26a2f33fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d2892354b9280979521173f322df418d9818b6cc400098abb869921911480a87608bb697401937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd5d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52af89da5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fe4f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6cc448e05d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e84359172618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44ce288b4b27a12174bc4c191e21015d0c431a71906d59c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae8157fc0000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29fe4363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d6800000000000000000000009f7393b85ee7ba2ccefdd798b1d2890a5260a51d9b0d05309159b14c64ad6a9473387f661aa4665270ded0fad79b7ed471d4e5d752f67e25d8a55fb2c944aef0cea0cbe7c3f3dd2612c140e827afe00ebc3bc675e31a783f27b0a8b4bb8e0efedc53bf503728338c466af30f1af2f34484b378eb778672475a5803bdc7c1be3dcc2a174a6a345475ec254442ce6e8c52e427cfdbed58cd1c24e1fab092054be4e5035e6acf06e607b49548308518784525bda8ea5054b5a67538af71cb7a884eaf5a490189eecfb41efbb2d2e213f62bdd009d210c59980de97dcd0b5ca94739a7a0b0173d37a152f0df72245fc2d8ce8cd418c2c09436b674070fba3ffcf8017555d8665bb7de067789ae12623df7602205a93d5cdba82a764bd0f9fa60726ce0a396facb0df152d4b7a49512a8b09edd6c12f306529eef93a390aa59bae22db21e57edc16931800de98a6019bb7ecb9473e293f7b3a58b7a073b9feb8bfc19af8df9bc0263792c92abb2359ec4807c24ff60420eedfbc85ace673c8d012fc5df40194250453b26f9267a503321b158df8f8d4d43e8eba74502fd3bf8cf2a5eb6aef2a24c01af10de4f1cb56ca009d6ced4f05884052acbdcbbbd3225d55b01e3f1f7eeffda612c8d8e3f73ffbcd60e3e26538fb8a7e735d5095059ee4b2db724dd454372890dab113509b3ce5d00"/3083], &(0x7f00000001c0)='GPL\x00'}, 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa81000000000d000000000000800057b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba6701008c7167b978fdde608c"], 0x0) 14.778998358s ago: executing program 4 (id=2524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x1, 0x3, 0x6, 0x208, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xe}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000020000085000000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@empty, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) rt_sigaction(0x40, &(0x7f0000000000)={&(0x7f00000000c0)="0020c01a1c2bdfd5c4a2f10027c6c43b660feb2841d3ca0f75bed5370b000080d20090800f", 0x0, 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000104000000000000000300000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e001600090003"], 0x40}}, 0x0) 14.642362169s ago: executing program 4 (id=2527): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x5) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r2) socket$inet_dccp(0x2, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r0, &(0x7f0000002800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000003c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.817608525s ago: executing program 1 (id=2759): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbc9280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be4200"/280, 0x118}, {&(0x7f0000000400)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab9", 0xc6}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da7", 0x45}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d", 0x36}, {&(0x7f0000001bc0)="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", 0x1e3}], 0x2}}], 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=@getchain={0x24, 0x66, 0xaa733c0199a015cd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1}}}, 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.763849209s ago: executing program 4 (id=2690): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x4, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2007085}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x11, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0xffffffff}}], 0x18}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/215, 0xd7}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/188, 0xbc}], 0x6, &(0x7f0000000740)=""/239, 0xef}, 0x10000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0xfdffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002e40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r6}, r8, 0x33, @unused=[0x7, 0xb55e, 0x72, 0x5], @devid=r9}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000840)={r9, 0xf, 0xf63e}) socket$phonet_pipe(0x23, 0x5, 0x2) r10 = dup2(r5, r4) close_range(r10, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) 1.763628059s ago: executing program 1 (id=2761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) getuid() syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@mblk_io_submit}, {@nodioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x81}}, {@init_itable}, {@noblock_validity}]}, 0x1, 0xb84, &(0x7f00000017c0)="$eJzs3E1vVNUbAPDn3r7Q0v6Z8o9RISY2MYjROBRKNGEFro2a6IIlYzslTYcXOzWxDYuCe3VhjAsSw0cwcS8uXJm4wIXiJyBGYohuwEXNnTca2mkrzHAEfr/kzD1nzjDP88wNc88hcwngiTVZPOQR+yLiVBZRaj2fR8RwozcSsdp83Z1bF2aKlsXa2rt/ZJFFxO1bF2ba75W1jmOtwUhEXHsji/9/vDFufXlloVKrVRdb40NLZ84fqi+vvDp/pnK6erp69uj060enX5ue7mGtN86//+VzP7314qUrn0y9/cWeH7I4HuOtufV19MpkTHY+k/UGI6LS62CJDLTqWV9nNpgwIQAAtpTHaGcN93SUYiDuLt5K8f3PSZMDAAAAemJtIGINAAAAeMxl9v8AAADwmGv/DuD2rQsz7Zb2FwkP180TETHRrL99f3NzZjBWG8eRGIqI3X9msf621qz5xx7YZBHpmx+rRYs+3Ye8ldWLEfHsZuc/a9Q/0biLe2P9eURM9SD+5D3jR6n+4z2In7p+AJ5MV080L2Qbr395Z/0Tm1z/Bje5dt2P1Ne/9vrvzob13936B7qs/97ZYYz9f798rdvc+vXfyU9/nS3iF8cHKupfuHkxYv/gZvVnnfqzLvWf2mGMsZkbl7vNFfUX9bbbw65/7UrEgdi8/rZsq/+f6NDcfK061XzsEuPAdycPdou//vwXrYjf3gs8DMX5392l/u3O//kdxph45vd93ea2rz//bTh7r9Ebbj3zUWVpafFwxHD25sbnj2ydS/s17fco6n/pha3//m9Wf/GdsNr6HIq9wMXWsRhfuifm2IEjX99//f1V1D97n+f/sx3G+Orbyx90m0tdPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPhjwixiPLy51+npfLEWMR8VTszmvn6kuvzJ378OxsMRcxEUP53HytOhURpeY4K8aHG/274yP3jKcjYm9EfF4abYzLM+dqs6mLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGMsIsYjy8sRkUfEX6U8L5dTZwUAAAD03ETqBAAAAIC+s/8HAACAx5/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH229/mr17OIWD022miF4dbcUNLMgH7LUycAJDOQOgEgmcHUCQDJ2OMD2TbzI11ndvU8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+uw7uu3o9i4jVY6ONVhhuzQ0lzQzot7x42JU6CyCFgdQJAMkMpk4ASMYeH8i2mR/pOuMfDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeJOONluXliMgb/TwvlyP+FxETMZTNzdeqUxGxJyJ+KQ3tKsaHUycNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAz9WXVxYqtVp1UUdHR6fTSf3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABACvXllYVKrVZdrKfOBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEitvryyUKnVqot97KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4JAAD//yNcBik=") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb01500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1406, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.457869675s ago: executing program 1 (id=2768): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) unlink(0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="74555b4e3dc26664001efbca870a000000001a00000000003f"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8000, '\x00', 0x0, r2, 0x2, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffffffff, 0xc4d2, 0x3ff, 0x2824, 0xffffffffffffffff, 0xfffffe00, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x800000000000004}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102030600fe08000e40000205875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}}, 0x0, 0x2e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.373917673s ago: executing program 1 (id=2771): syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711201000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004227ebcc3d8fbf73f3f541a90200507515c658a6e3f59eb31a4917674842355dc3e32e09dd774be201b5d7a0"], 0x20000) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000040000009510000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000004480e5ff00000000001ab92f04000000fdff1a00c600feff000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147}, 0x90) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), 0x2100) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000440), 0x4) mount$cgroup(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)={[{@clone_children}, {@subsystem='net_prio'}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@fowner_gt={'fowner>', r7}}, {@euid_eq={'euid', 0x3d, r7}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x12) 1.372126843s ago: executing program 2 (id=2773): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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"/280, 0x118}, {&(0x7f0000000400)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814edbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec9", 0xce}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbf", 0xc3}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7e", 0x31}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa374", 0x1f}, {&(0x7f0000001bc0)="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", 0x16d}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.296956909s ago: executing program 2 (id=2774): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x13, 0x10, 0x0, @multicast1}}}}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x482000, 0x80) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x3, 0x6000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x40, 0x6, 0x3, 0x1004, r1, 0x81b7, '\x00', 0x0, r2, 0x3, 0x3, 0x2, 0x9}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r5, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.031632182s ago: executing program 3 (id=2784): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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"/280, 0x118}, {&(0x7f0000000400)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814edbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec9", 0xce}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbf", 0xc3}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7e", 0x31}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa374", 0x1f}, {&(0x7f0000001bc0)="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", 0x16d}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.005516414s ago: executing program 3 (id=2785): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}, {@nombcache}, {@debug}]}, 0x3, 0x462, &(0x7f00000003c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf, 0x4000110, 0xffffffffffffffff, 0x10000000) r2 = fcntl$dupfd(r0, 0x0, r0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000100)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x0, 0x0, 0x1}) 866.085186ms ago: executing program 3 (id=2786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000f9ffffff00f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@md0, r2, &(0x7f0000000040)='./file0\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036746e6c00002400028014000300fc0000000000000000000000000000000400130008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x5c}}, 0x0) 864.380786ms ago: executing program 3 (id=2787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sendfile(r2, r0, &(0x7f0000000180)=0x9, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f000086fff4)) r9 = getpid() r10 = getpid() kcmp$KCMP_EPOLL_TFD(r9, r10, 0x7, r5, &(0x7f00000000c0)={r8, r7}) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0xfffd, @multicast, 'vcan0\x00'}}, 0x1e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x8d4bf221dcc44706]}}, 0x0, 0x36}, 0x20) write$binfmt_aout(r11, &(0x7f00000011c0)=ANY=[], 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}}, 0x0) 858.673577ms ago: executing program 3 (id=2788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe79}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe79}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x60, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141686089f034d2f8702890c6aab845013f2325f1a39018902038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa00734", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) socket(0x2a, 0x2, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000010c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000010c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000200000005000100060000001400078008000b40000004f608000840"], 0x60}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13, 0x0, 0x0, 0x10}, 0x90) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x50) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1000000000000080}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000300)=ANY=[], 0x118) unshare(0x24020400) r9 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) unshare(0x22020400) (async) unshare(0x22020400) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000280012800b00010067656e6576650000180002800400060008000b"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6_vti0\x00', r2, 0x2f, 0x8, 0x4, 0x101, 0x4, @mcast2, @mcast1, 0x7800, 0xc52df00e788f4f74, 0x3, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6_vti0\x00', r2, 0x2f, 0x8, 0x4, 0x101, 0x4, @mcast2, @mcast1, 0x7800, 0xc52df00e788f4f74, 0x3, 0x4}}) statx(r7, &(0x7f0000000280)='./file1\x00', 0x800, 0x100, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid={'resgid', 0x3d, r12}}, {@grpquota}, {@usrjquota}]}, 0x3, 0x45e, &(0x7f0000000380)="$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") 825.36873ms ago: executing program 3 (id=2789): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbc9280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be4200"/280, 0x118}, {&(0x7f0000000400)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab9", 0xc6}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da7", 0x45}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d", 0x36}, {&(0x7f0000001bc0)="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", 0x1e3}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b6e7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 651.890205ms ago: executing program 0 (id=2793): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd020000", 0x5}], 0x1, 0x0, 0x8000) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x3f1, 0x148, 0xd0, 0x5, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xffffe000, 0x70, 0xd0, 0x0, {0x0, 0x1c030000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0xf, 0x6, 0x2, 0x1, 0x2]}}}}, {{@ip={@local, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'lo\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x1fc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd020000", 0x5}], 0x1, 0x0, 0x8000) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x3f1, 0x148, 0xd0, 0x5, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xffffe000, 0x70, 0xd0, 0x0, {0x0, 0x1c030000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0xf, 0x6, 0x2, 0x1, 0x2]}}}}, {{@ip={@local, @private, 0x0, 0x0, 'bridge_slave_1\x00', 'lo\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x1fc}}, 0x0) (async) 345.034321ms ago: executing program 0 (id=2794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf9100000000006bb7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) 342.266731ms ago: executing program 0 (id=2795): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073"], 0x1e4}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a00000000020000000000001800098008"], 0x34}], 0x1}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000100000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010000000000000000000700", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c00"], 0x34}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r6], 0x30}}, 0x0) 341.680311ms ago: executing program 0 (id=2796): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000480)=r2, 0x4) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024094, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) read$eventfd(r5, &(0x7f0000001540), 0x8) (async) write$P9_RMKDIR(r5, 0x0, 0x0) (async) openat(r5, 0x0, 0x8a480, 0x103) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000b40)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x3f00}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x1, 0x0) 252.322329ms ago: executing program 2 (id=2797): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000340)="bfbd21e89908573d04d596f5cf9c8274b0fc804ac41575121026dc54bfa32a14ce3314d4fbc16cfc17a8f80913d08603a9e64a2fc25d3357e86679c90699231a7c7822c0cd7e8ed67ed0c780e4", 0x4d}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = dup(r2) connect$inet(r3, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000080)=0xfffff1a7, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x668}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480), 0x8) 219.408731ms ago: executing program 2 (id=2798): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x227b, 0x1000000000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/cpu_byteorder', 0x8000, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000180)="a3caddbf8903e18b57c0b93cc905929a918de96d8173e6928b96ac04d7acb19688ba15e5a26543f8884104fc5a6bf7640b5a227fed64b36b5bba583a4c9f994a113dc85a8a3e37c25772cf89a53c6d8dd48433ebceffa6f36ee8a1fb92fbc03c95ff649fcb71ae00c2e2c1ca7396856261e57a5e698d215408f799ffd353a5bc24a666e7158567c2886bca5321de0a48f3ac42ce3b4a289a04183e0f76", &(0x7f0000000240)=""/188, &(0x7f0000000d40)="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", &(0x7f0000000080)="e13f74502e9a7ff76f6029106fbf62dcb1d241c19b2ca14c64a27bb97c965e45b7c81a26a23988fd6e", 0x3, r2, 0x4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_EXTTS_REQUEST2(r0, 0x43403d0e, &(0x7f0000000040)={0x9}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r4 = inotify_init() close_range(r3, r4, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x0, 0x7}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x2) r7 = gettid() fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x2, r7}) fcntl$notify(r6, 0x402, 0x180000008) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0x70}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14}}, 0xc8}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r11, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1f, 0x0, @l2={'eth', 0x3a, 'wlan0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x8000}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 26.346608ms ago: executing program 1 (id=2799): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a2c0)=@newtaction={0x14, 0x1c, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42840102}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffd, 0x2f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48810}, 0x20008010) 24.379968ms ago: executing program 0 (id=2800): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x749f, &(0x7f0000000100)={0x0, 0x9680, 0x2000, 0x3, 0x8a}, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x6917, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x3d8, 0x0, r1}, &(0x7f00000008c0), &(0x7f0000000880)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000340)=[0x4bf, 0x4], 0x2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x0, 0x7d, 0x1f, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x0, 0x8000, 0x3}}) 23.243508ms ago: executing program 2 (id=2801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000006000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x90) 22.973198ms ago: executing program 2 (id=2802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) openat2(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x2040, 0xa5, 0x12}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000004060500000000eb070000000000000005000100070000", @ANYRESHEX=r0], 0x1c}}, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 525.65µs ago: executing program 0 (id=2803): r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0xffffffffffffffd5) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = io_uring_setup(0x26ca, &(0x7f0000000080)={0x0, 0xc85f, 0x4, 0x0, 0xfffffff6, 0x0, r0}) r3 = syz_io_uring_setup(0x80006908, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0x50, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000100)=0x0) (async) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000077ceb5d48500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) (async) ppoll(&(0x7f0000000900)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='hrtimer_init\x00', r6}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000580), 0x6100) 0s ago: executing program 1 (id=2804): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xa2, 0x9, 0xfffffffb, 0x2f, @private2, @remote, 0x40, 0x7800, 0x3, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x0, 0xeb3, {{0x9, 0x4, 0x1, 0x3b, 0x24, 0x68, 0x0, 0x3, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x70, 0x0, 0x2, [0x1, 0x5, 0x6]}]}}}}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x101, 0x400, {{0x35, 0x4, 0x0, 0x4, 0xd4, 0x66, 0x0, 0x40, 0x4, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0xc, 0xec, 0x0, 0x6, [0x1, 0x8]}, @rr={0x7, 0x13, 0xa7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x1, 0xa, "a6943c302c76a7c0"}, {0x1, 0x6, "dac9b2eb"}]}, @ssrr={0x89, 0x7, 0x91, [@dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0xc, 0x52, 0x0, 0x7, [0x7, 0xbc]}, @timestamp_addr={0x44, 0xc, 0x36, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @cipso={0x86, 0x67, 0x2, [{0x0, 0xf, "3376261059ff37624c360ac8b5"}, {0x7, 0x9, "3ad366d207d343"}, {0x7, 0x2}, {0x2, 0x9, "cbf2c6f29f00e4"}, {0x7, 0xb, "76d448dd183ee6f6fa"}, {0x4, 0x6, "0954da0c"}, {0x5, 0x7, "9fe5c01211"}, {0x0, 0x12, "3852e5bf95463eb6b1523ccf9a538241"}, {0x0, 0xe, "2e73c99e6cd30d97a4b46687"}, {0x2, 0x6, "f16eb1c2"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0xcfdf2f83e2b64499, 0x40, 0x2, 0x3, {{0xc, 0x4, 0x3, 0x39, 0x30, 0x66, 0x0, 0x5, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x3c, [@empty, @private=0xa010101, @multicast2]}, @ssrr={0x89, 0xb, 0x3c, [@remote, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0xc2, 0x5, 0xfff, 0x14, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x72f, 0xea5, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x0, 0xec7, 0x72, @mcast2, @local, 0x7800, 0x7800, 0x7, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x3ff, 0x3ff, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x65, 0x0, 0xb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x8, [{@broadcast, 0x401}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x29, 0xd, 0x9, 0x55a, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x80, 0x507ffd4025381754, 0x3, 0xfffffffa}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0x1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'team_slave_0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'gretap0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x10, 0x7, 0x8, 0x1ff, {{0xb, 0x4, 0x3, 0x6, 0x2c, 0x67, 0x0, 0x10, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xc9, 0x1, 0xe, [{@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x1}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x7, 0x5, {{0x2e, 0x4, 0x3, 0x3, 0xb8, 0x64, 0x0, 0xaa, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x24, 0xee, 0x3, 0x4, [{@broadcast, 0x6}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@loopback, 0x6}]}, @rr={0x7, 0x7, 0x7d, [@multicast2]}, @timestamp_addr={0x44, 0x54, 0x41, 0x1, 0xc, [{@multicast1, 0x9}, {@local, 0x7f}, {@empty, 0x7}, {@multicast2, 0x80000001}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x2}, {@broadcast, 0x80000000}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0xd}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x83, 0x1, 0x8, [{@multicast2, 0x7}, {@local, 0xffffffff}, {@initdev={0xac, 0x1e, 0xf8, 0x0}, 0x6}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x2, 0x7, 0x6, 0x6, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7, 0x10, 0x10000, 0x4}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0}, &(0x7f0000000d40)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001640)={&(0x7f0000000040), 0xc, &(0x7f0000001600)={&(0x7f0000000d80)={0x878, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfbd}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x261}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x215d}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff19a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x5b, 0xd, 0x3}, {0x0, 0x2, 0x6, 0x8}]}}}]}}, {{0x8, 0x1, r15}, {0x1ec, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x6, 0x6, 0x800}, {0x1, 0x9, 0xc, 0x5}, {0x4, 0x10, 0x2, 0x5}, {0xfff, 0x35, 0x2, 0x1000}, {0x8, 0x4, 0x40, 0x5}, {0x4, 0xf7, 0x4, 0x10001}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x100, 0x3, 0x60, 0x2}, {0xd, 0x6e, 0x75, 0x6}, {0x0, 0x8, 0x46, 0x4}, {0x101, 0x8, 0xe, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc26}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r22}}}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x8000}, 0x4008830) (async) r23 = socket$xdp(0x2c, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000016c0)=0x14) bind$xdp(r23, &(0x7f0000001700)={0x2c, 0x4, r24, 0x35, r0}, 0x10) (async) fcntl$getownex(r23, 0x10, &(0x7f0000001740)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r23, 0x8902, &(0x7f0000001780)=r25) (async) ioctl$sock_ifreq(r0, 0x8926, &(0x7f00000017c0)={'ipvlan0\x00', @ifru_addrs=@can={0x1d, r7}}) kernel console output (not intermixed with test programs): an_adv: batadv0: Interface activated: batadv_slave_0 [ 182.263941][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.274516][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.284527][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.295210][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.305145][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.315689][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.325521][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.336013][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.345902][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.356434][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.369378][T10310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.378290][T10310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.387559][T10310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.396544][T10310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.405456][T10310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.471922][T10317] veth0_macvtap: entered promiscuous mode [ 182.481179][T10317] veth1_macvtap: entered promiscuous mode [ 182.522616][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.533202][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.543167][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.553765][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.563648][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.574069][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.583898][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.594344][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.604219][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.614635][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.624708][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.635125][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.705085][T10317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.712711][T10533] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2044'. [ 182.754344][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.764949][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.774825][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.785559][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.795547][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.806078][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.815964][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.826562][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.836503][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.847065][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.856878][T10317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.867300][T10317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.881489][T10317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.893755][T10317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.902543][T10317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.911380][T10317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.920129][T10317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.940288][T10541] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2046'. [ 183.141017][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 183.251074][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 183.262002][T10586] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10586 comm=syz.0.2055 [ 183.284478][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 183.985996][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2060'. [ 184.028008][ T29] audit: type=1400 audit(1724590691.072:1271): avc: denied { remount } for pid=10713 comm="syz.1.2062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 184.033709][T10715] loop1: detected capacity change from 0 to 256 [ 184.059532][ T29] audit: type=1400 audit(1724590691.072:1272): avc: denied { ioctl } for pid=10713 comm="syz.1.2062" path="socket:[37968]" dev="sockfs" ino=37968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.209251][T10739] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2072'. [ 184.391933][T10768] kernel profiling enabled (shift: 6) [ 184.671903][T10798] loop2: detected capacity change from 0 to 512 [ 184.690905][T10798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.706952][T10798] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.722500][T10798] tipc: Started in network mode [ 184.727398][T10798] tipc: Node identity 1, cluster identity 7 [ 184.733449][T10798] tipc: Node number set to 1 [ 184.749268][T10317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.907584][T10825] tipc: Enabled bearer , priority 0 [ 184.914603][T10825] : renamed from syzkaller0 [ 184.920780][T10825] tipc: Disabling bearer [ 185.082058][T10834] macvlan2: entered promiscuous mode [ 185.087436][T10834] macvlan2: entered allmulticast mode [ 185.093470][T10834] batman_adv: batadv0: Adding interface: macvlan2 [ 185.100277][T10834] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.126130][T10834] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 185.300271][T10865] loop2: detected capacity change from 0 to 256 [ 185.357669][T10870] syz.1.2125[10870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.357730][T10870] syz.1.2125[10870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.371689][T10870] SELinux: Context syz: is not valid (left unmapped). [ 185.390530][ T29] audit: type=1400 audit(1724590692.442:1273): avc: denied { relabelto } for pid=10869 comm="syz.1.2125" name="file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="syz:" [ 185.394112][T10870] xt_hashlimit: size too large, truncated to 1048576 [ 185.414927][ T29] audit: type=1400 audit(1724590692.442:1274): avc: denied { associate } for pid=10869 comm="syz.1.2125" name="file0" dev="tmpfs" ino=86 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="syz:" [ 185.468700][ T29] audit: type=1400 audit(1724590692.512:1275): avc: denied { read } for pid=10877 comm="syz.2.2127" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.490945][ T29] audit: type=1400 audit(1724590692.512:1276): avc: denied { open } for pid=10877 comm="syz.2.2127" path="/42/file0" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.513895][ T29] audit: type=1400 audit(1724590692.512:1277): avc: denied { write } for pid=10877 comm="syz.2.2127" name="/" dev="configfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.744817][T10905] loop1: detected capacity change from 0 to 1024 [ 185.753393][T10905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.820769][T10912] loop3: detected capacity change from 0 to 512 [ 185.970034][T10310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.138632][T10936] loop1: detected capacity change from 0 to 128 [ 186.147176][T10936] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.159584][T10936] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.194132][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 186.194185][ T29] audit: type=1400 audit(1724590693.242:1282): avc: denied { mounton } for pid=10935 comm="syz.1.2149" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.219118][T10310] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 186.261050][T10310] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 186.275556][T10310] EXT4-fs error (device loop1): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 186.288865][T10310] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 186.303823][T10310] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 186.318707][T10310] EXT4-fs error (device loop1): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 186.332170][T10310] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 186.346528][T10310] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 186.360948][T10310] EXT4-fs error (device loop1): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 186.374222][T10310] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 186.448649][T10946] loop2: detected capacity change from 0 to 512 [ 186.456668][T10946] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.2153: invalid block [ 186.472451][T10946] EXT4-fs (loop2): Remounting filesystem read-only [ 186.479495][T10946] EXT4-fs (loop2): 1 truncate cleaned up [ 186.485660][T10946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.499160][T10946] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 186.506271][T10946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.558208][ T29] audit: type=1400 audit(1724590693.602:1283): avc: denied { unmount } for pid=10317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 186.812833][ T29] audit: type=1400 audit(1724590693.852:1284): avc: denied { create } for pid=11000 comm="syz.2.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 186.833429][ T29] audit: type=1400 audit(1724590693.862:1285): avc: denied { accept } for pid=11000 comm="syz.2.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 186.847397][T10995] tipc: Can't bind to reserved service type 0 [ 186.870773][T10995] bond_slave_0: entered promiscuous mode [ 186.876515][T10995] bond_slave_1: entered promiscuous mode [ 186.907056][ T29] audit: type=1400 audit(1724590693.952:1286): avc: denied { bind } for pid=11015 comm="syz.2.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 186.927700][T11016] loop2: detected capacity change from 0 to 256 [ 186.928423][ T29] audit: type=1400 audit(1724590693.952:1287): avc: denied { setopt } for pid=11015 comm="syz.2.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 186.956044][T10995] bond_slave_0: left promiscuous mode [ 186.961520][T10995] bond_slave_1: left promiscuous mode [ 187.043212][T11028] __nla_validate_parse: 7 callbacks suppressed [ 187.043226][T11028] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2183'. [ 187.052420][T11030] openvswitch: netlink: Message has 1 unknown bytes. [ 187.083557][T11032] loop2: detected capacity change from 0 to 512 [ 187.101514][T11032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.115672][T11032] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.133034][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 187.155772][T10317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.200877][T11057] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2188'. [ 187.356481][T11071] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2196'. [ 187.365594][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'. [ 187.406935][T11078] FAULT_INJECTION: forcing a failure. [ 187.406935][T11078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.420457][T11078] CPU: 1 UID: 0 PID: 11078 Comm: syz.4.2202 Not tainted 6.11.0-rc4-syzkaller-00274-g780bdc1ba776 #0 [ 187.431225][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 187.441284][T11078] Call Trace: [ 187.444710][T11078] [ 187.447638][T11078] dump_stack_lvl+0xf2/0x150 [ 187.452268][T11078] dump_stack+0x15/0x20 [ 187.456450][T11078] should_fail_ex+0x229/0x230 [ 187.461215][T11078] should_fail+0xb/0x10 [ 187.465417][T11078] should_fail_usercopy+0x1a/0x20 [ 187.470459][T11078] _copy_to_user+0x1e/0xa0 [ 187.474933][T11078] simple_read_from_buffer+0xa0/0x110 [ 187.480362][T11078] proc_fail_nth_read+0xff/0x140 [ 187.485315][T11078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.490988][T11078] vfs_read+0x1a2/0x6e0 [ 187.495289][T11078] ? __rcu_read_unlock+0x4e/0x70 [ 187.500271][T11078] ? __fget_files+0x1da/0x210 [ 187.505012][T11078] ksys_read+0xeb/0x1b0 [ 187.509211][T11078] __x64_sys_read+0x42/0x50 [ 187.513783][T11078] x64_sys_call+0x27d3/0x2d60 [ 187.518579][T11078] do_syscall_64+0xc9/0x1c0 [ 187.523201][T11078] ? clear_bhb_loop+0x55/0xb0 [ 187.527904][T11078] ? clear_bhb_loop+0x55/0xb0 [ 187.532579][T11078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.538480][T11078] RIP: 0033:0x7f8cee8888bc [ 187.542989][T11078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 187.562589][T11078] RSP: 002b:00007f8ced501030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.571162][T11078] RAX: ffffffffffffffda RBX: 00007f8ceea25f80 RCX: 00007f8cee8888bc [ 187.579120][T11078] RDX: 000000000000000f RSI: 00007f8ced5010a0 RDI: 0000000000000005 [ 187.587245][T11078] RBP: 00007f8ced501090 R08: 0000000000000000 R09: 0000000000000000 [ 187.595214][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.603277][T11078] R13: 0000000000000000 R14: 00007f8ceea25f80 R15: 00007ffe4d9c4788 [ 187.611397][T11078] [ 187.681249][T11082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11082 comm=syz.3.2204 [ 187.780417][T11100] netlink: 'syz.3.2212': attribute type 34 has an invalid length. [ 187.780746][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 187.805595][T11104] loop2: detected capacity change from 0 to 512 [ 187.821061][T11104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.834273][T11104] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.875694][T10317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.931207][T10310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.941903][T10698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.023008][T10698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.106478][T10698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.155651][T10698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.163216][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2227'. [ 188.178153][T11131] chnl_net:caif_netlink_parms(): no params data found [ 188.215511][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.222818][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.230084][T11131] bridge_slave_0: entered allmulticast mode [ 188.236551][T11131] bridge_slave_0: entered promiscuous mode [ 188.243529][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.250725][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.257925][T11131] bridge_slave_1: entered allmulticast mode [ 188.264417][T11131] bridge_slave_1: entered promiscuous mode [ 188.290122][T11131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.301592][T11131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.312227][T11162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2229'. [ 188.321908][T10698] bridge_slave_1: left allmulticast mode [ 188.327651][T10698] bridge_slave_1: left promiscuous mode [ 188.333290][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.341867][T10698] bridge_slave_0: left allmulticast mode [ 188.347531][T10698] bridge_slave_0: left promiscuous mode [ 188.353210][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.432181][T10698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.442934][T10698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.453120][T10698] bond0 (unregistering): Released all slaves [ 188.467939][T11131] team0: Port device team_slave_0 added [ 188.474786][T11131] team0: Port device team_slave_1 added [ 188.490718][T11131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.497695][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.523812][T11131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.535544][T11131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.542656][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.569035][T11131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.599438][T11131] hsr_slave_0: entered promiscuous mode [ 188.605506][T11131] hsr_slave_1: entered promiscuous mode [ 188.611605][T11172] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2233'. [ 188.631059][T10698] hsr_slave_0: left promiscuous mode [ 188.637521][T10698] hsr_slave_1: left promiscuous mode [ 188.645189][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.652668][T10698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.664040][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.671526][T10698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.685475][T10698] veth1_macvtap: left promiscuous mode [ 188.691077][T10698] veth0_macvtap: left promiscuous mode [ 188.696613][T10698] veth1_vlan: left promiscuous mode [ 188.701947][T10698] veth0_vlan: left promiscuous mode [ 188.797046][T10698] team0 (unregistering): Port device team_slave_1 removed [ 188.807916][T10698] team0 (unregistering): Port device team_slave_0 removed [ 189.047735][T11223] lo speed is unknown, defaulting to 1000 [ 189.056721][T11223] lo speed is unknown, defaulting to 1000 [ 189.070738][T11223] lo speed is unknown, defaulting to 1000 [ 189.077293][T11223] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.087349][T11223] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 189.098415][T11223] lo speed is unknown, defaulting to 1000 [ 189.105929][T11223] lo speed is unknown, defaulting to 1000 [ 189.114224][T11223] lo speed is unknown, defaulting to 1000 [ 189.121692][T11223] lo speed is unknown, defaulting to 1000 [ 189.127778][T11223] lo speed is unknown, defaulting to 1000 [ 189.133813][T11223] lo speed is unknown, defaulting to 1000 [ 189.144358][T11223] lo speed is unknown, defaulting to 1000 [ 189.332434][T11131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.342773][T11131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.352988][T11131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.354488][T11273] loop3: detected capacity change from 0 to 1024 [ 189.366784][T11273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.368267][T11131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.378028][T11273] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 189.400468][T11273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.417915][T11131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.435707][T11131] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.445412][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.452557][T10698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.463040][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.470198][T10698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.528906][T11131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.589833][T11131] veth0_vlan: entered promiscuous mode [ 189.597837][T11131] veth1_vlan: entered promiscuous mode [ 189.612807][T11131] veth0_macvtap: entered promiscuous mode [ 189.620067][T11131] veth1_macvtap: entered promiscuous mode [ 189.630095][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.640770][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.650598][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.661118][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.671015][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.681422][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.691250][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.701712][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.711594][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.722009][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.731804][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.742291][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.753043][T11131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.764401][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.774925][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.784910][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.795402][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.805362][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.816029][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.826050][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.836492][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.846413][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.856972][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.866894][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.877379][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.889368][T11131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.898084][T11131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.906919][T11131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.915713][T11131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.924479][T11131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.932712][ T29] audit: type=1400 audit(1724590696.982:1288): avc: denied { relabelfrom } for pid=11305 comm="syz.0.2270" name="" dev="pipefs" ino=39747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 189.962400][ T29] audit: type=1400 audit(1724590696.982:1289): avc: denied { create } for pid=11305 comm="syz.0.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.011655][T11312] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2222'. [ 190.028296][T11312] loop1: detected capacity change from 0 to 1024 [ 190.045475][T11312] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.056544][T11312] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 190.065857][T11312] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.073048][T11312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4436: comm syz.1.2222: Invalid inode table block 0 in block_group 0 [ 190.086264][T11312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Corrupt filesystem [ 190.096018][T11312] EXT4-fs error (device loop1): ext4_quota_write:7220: inode #3: comm syz.1.2222: mark_inode_dirty error [ 190.108523][T11312] Quota error (device loop1): write_blk: dquota write failed [ 190.116037][T11312] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 190.126017][T11312] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2222: Failed to acquire dquot type 0 [ 190.137529][T11312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4436: comm syz.1.2222: Invalid inode table block 0 in block_group 0 [ 190.150278][T11312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Corrupt filesystem [ 190.161288][T11312] EXT4-fs error (device loop1): ext4_ext_truncate:4432: inode #15: comm syz.1.2222: mark_inode_dirty error [ 190.173523][T11312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4436: comm syz.1.2222: Invalid inode table block 0 in block_group 0 [ 190.190791][T11312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Corrupt filesystem [ 190.200945][T11312] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 190.209864][T11312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4436: comm syz.1.2222: Invalid inode table block 0 in block_group 0 [ 190.223236][T11312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Corrupt filesystem [ 190.233213][T11312] EXT4-fs error (device loop1): ext4_truncate:4241: inode #15: comm syz.1.2222: mark_inode_dirty error [ 190.249412][T11312] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 190.259904][T11312] EXT4-fs (loop1): 1 truncate cleaned up [ 190.266000][T11312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.286417][T11131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.460828][T10322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.478935][T10698] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.525006][T10698] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.580012][T11365] loop1: detected capacity change from 0 to 128 [ 190.589523][T10698] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.623244][T11353] lo speed is unknown, defaulting to 1000 [ 190.643645][T10698] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.692018][T11353] chnl_net:caif_netlink_parms(): no params data found [ 190.748247][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.755394][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.764054][T11353] bridge_slave_0: entered allmulticast mode [ 190.771217][T11353] bridge_slave_0: entered promiscuous mode [ 190.778585][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.785793][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.794953][T11353] bridge_slave_1: entered allmulticast mode [ 190.801436][T11353] bridge_slave_1: entered promiscuous mode [ 190.807752][T10698] bridge_slave_1: left allmulticast mode [ 190.813557][T10698] bridge_slave_1: left promiscuous mode [ 190.819302][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.827107][T10698] bridge_slave_0: left allmulticast mode [ 190.832901][T10698] bridge_slave_0: left promiscuous mode [ 190.838626][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.942403][T10698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.952499][T10698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.963238][T10698] bond0 (unregistering): Released all slaves [ 190.995173][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.006782][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.051928][T11353] team0: Port device team_slave_0 added [ 191.058834][T11353] team0: Port device team_slave_1 added [ 191.076219][T10698] hsr_slave_0: left promiscuous mode [ 191.082533][T10698] hsr_slave_1: left promiscuous mode [ 191.088399][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.095876][T10698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.109737][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.117266][T10698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.136385][T10698] veth1_macvtap: left promiscuous mode [ 191.136448][T10698] veth0_macvtap: left promiscuous mode [ 191.147505][T10698] veth1_vlan: left promiscuous mode [ 191.147586][T10698] veth0_vlan: left promiscuous mode [ 191.245333][T10698] team0 (unregistering): Port device team_slave_1 removed [ 191.255902][T10698] team0 (unregistering): Port device team_slave_0 removed [ 191.311345][ T9] lo speed is unknown, defaulting to 1000 [ 191.318206][T11423] tap0: tun_chr_ioctl cmd 2147767507 [ 191.324349][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.331387][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.352408][T11425] loop2: detected capacity change from 0 to 512 [ 191.357812][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.370096][T11425] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2308: bg 0: block 393: padding at end of block bitmap is not set [ 191.378011][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.396411][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.404056][T11425] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 191.422521][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.443316][T11425] EXT4-fs (loop2): 2 truncates cleaned up [ 191.450171][T11425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.470731][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 191.470744][ T29] audit: type=1400 audit(1724590698.522:1292): avc: denied { create } for pid=11424 comm="syz.2.2308" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 191.501336][T10317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.512713][T11353] hsr_slave_0: entered promiscuous mode [ 191.519227][T11353] hsr_slave_1: entered promiscuous mode [ 191.525553][T11353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.533244][T11353] Cannot create hsr debugfs directory [ 191.871239][T11353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.879903][T11353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.889993][T11353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.898363][T11353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.931537][T11353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.946161][T11353] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.955227][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.962388][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.973590][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.980705][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.046740][T11353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.131981][T11353] veth0_vlan: entered promiscuous mode [ 192.141749][T11353] veth1_vlan: entered promiscuous mode [ 192.161213][T11353] veth0_macvtap: entered promiscuous mode [ 192.170773][T11353] veth1_macvtap: entered promiscuous mode [ 192.182224][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.192851][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.202814][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.213334][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.223271][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.234202][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.244400][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.254950][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.264845][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.275284][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.285094][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.295539][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.306905][T11353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.314531][T11467] __nla_validate_parse: 5 callbacks suppressed [ 192.314543][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 192.333379][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.343891][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.354065][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.364593][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.374714][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.385381][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.395569][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.396158][T11476] loop1: detected capacity change from 0 to 256 [ 192.406006][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.406020][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.406033][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.442525][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.453021][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.465384][T11353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.474390][T11353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.483389][T11353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.492133][T11353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.501177][T11353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.508831][ T29] audit: type=1400 audit(1724590699.562:1293): avc: denied { read } for pid=11481 comm="syz.2.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.518335][T11484] netlink: 'syz.0.2325': attribute type 4 has an invalid length. [ 192.537781][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.538838][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.544950][T11131] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 192.557887][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.561664][T11131] FAT-fs (loop1): Filesystem has been set read-only [ 192.576835][T11131] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 192.597966][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.607901][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.627904][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.667885][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.685854][ T29] audit: type=1326 audit(1724590699.732:1294): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.4.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee889e79 code=0x7ffc0000 [ 192.687905][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.693472][ T29] audit: type=1326 audit(1724590699.732:1295): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.4.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee889e79 code=0x7ffc0000 [ 192.748422][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.758012][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.768265][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.797926][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.817914][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.827908][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.837942][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.847882][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.857925][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.867886][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.877894][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.887894][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.897873][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.907879][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.925115][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.937880][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.947942][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.948074][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 192.967921][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.977880][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 192.997883][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.016238][T11510] loop3: detected capacity change from 0 to 512 [ 193.017901][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.025327][T11510] ext4: Unknown parameter 'obj_type' [ 193.057908][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.067900][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.077908][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.087901][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.097882][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.107885][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.117884][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.127888][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.137913][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.147907][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.157903][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.167900][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.177905][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.187947][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.207909][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.227907][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.239081][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.247910][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.257898][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.267900][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.277891][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.288362][T11482] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 193.609735][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.625995][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.654832][ T29] audit: type=1326 audit(1724590700.702:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11522 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee889e79 code=0x7ffc0000 [ 193.680789][ T29] audit: type=1326 audit(1724590700.702:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11522 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f8cee889e79 code=0x7ffc0000 [ 193.704570][ T29] audit: type=1326 audit(1724590700.702:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11522 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee889e79 code=0x7ffc0000 [ 193.728178][ T29] audit: type=1326 audit(1724590700.702:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11522 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee889e79 code=0x7ffc0000 [ 193.751672][ T29] audit: type=1326 audit(1724590700.702:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11522 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8cee889e79 code=0x7ffc0000 [ 193.775178][ T29] audit: type=1326 audit(1724590700.702:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11522 comm="syz.4.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cee889e79 code=0x7ffc0000 [ 194.038872][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2345'. [ 194.074284][T11548] loop3: detected capacity change from 0 to 512 [ 194.080894][T11548] devtmpfs: Unknown parameter 'errors' [ 194.118434][T11554] loop3: detected capacity change from 0 to 764 [ 194.307695][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 194.451066][T11584] loop3: detected capacity change from 0 to 2048 [ 194.499442][T11584] loop3: p1 < > p4 [ 194.503804][T11584] loop3: p4 size 8388608 extends beyond EOD, truncated [ 195.034138][T11604] netlink: 844 bytes leftover after parsing attributes in process `syz.4.2371'. [ 195.043686][T11604] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 195.060903][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'. [ 195.086507][T11607] loop3: detected capacity change from 0 to 1024 [ 195.094707][T11607] journal_path: Non-blockdev passed as '' [ 195.100519][T11607] EXT4-fs: error: could not find journal device path [ 195.104281][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2373'. [ 195.311679][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 195.492409][T11659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2389'. [ 195.717424][ T3343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.782112][ T3343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.833140][ T3343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.926335][ T3343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.948749][T11662] chnl_net:caif_netlink_parms(): no params data found [ 195.986598][T11679] tap0: tun_chr_ioctl cmd 1074025677 [ 195.992210][T11679] tap0: linktype set to 825 [ 195.998627][T11662] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.005845][T11662] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.013219][T11662] bridge_slave_0: entered allmulticast mode [ 196.019750][T11662] bridge_slave_0: entered promiscuous mode [ 196.029265][T11662] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.036378][T11662] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.043568][T11662] bridge_slave_1: entered allmulticast mode [ 196.050743][T11662] bridge_slave_1: entered promiscuous mode [ 196.083187][T11662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.096927][T11662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.133318][ T3343] bridge_slave_1: left allmulticast mode [ 196.139061][ T3343] bridge_slave_1: left promiscuous mode [ 196.144740][ T3343] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.163211][ T3343] bridge_slave_0: left allmulticast mode [ 196.168997][ T3343] bridge_slave_0: left promiscuous mode [ 196.174700][ T3343] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.285277][ T3343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.296867][ T3343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.307028][ T3343] bond0 (unregistering): Released all slaves [ 196.315042][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 196.339289][T11662] team0: Port device team_slave_0 added [ 196.399957][T11721] Process accounting resumed [ 196.461246][T11662] team0: Port device team_slave_1 added [ 196.474509][ T3343] hsr_slave_0: left promiscuous mode [ 196.480472][ T3343] hsr_slave_1: left promiscuous mode [ 196.486264][ T3343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.493766][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.501458][ T3343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.508879][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.518855][ T3343] veth1_macvtap: left promiscuous mode [ 196.524450][ T3343] veth0_macvtap: left promiscuous mode [ 196.529979][ T3343] veth1_vlan: left promiscuous mode [ 196.535297][ T3343] veth0_vlan: left promiscuous mode [ 196.621321][ T3343] team0 (unregistering): Port device team_slave_1 removed [ 196.631484][ T3343] team0 (unregistering): Port device team_slave_0 removed [ 196.669909][T11662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.676854][T11662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.703014][T11662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.714426][T11662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.721543][T11662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.747668][T11662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.781250][T11662] hsr_slave_0: entered promiscuous mode [ 196.787574][T11662] hsr_slave_1: entered promiscuous mode [ 196.796476][T11746] netlink: 'syz.4.2416': attribute type 3 has an invalid length. [ 197.260832][T11766] netlink: 'syz.3.2424': attribute type 2 has an invalid length. [ 197.304600][T11774] loop3: detected capacity change from 0 to 4096 [ 197.311637][T11774] EXT4-fs: Ignoring removed nobh option [ 197.317279][T11774] EXT4-fs: Ignoring removed i_version option [ 197.326001][T11774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.349377][T11353] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.414666][T11662] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.441549][T11662] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.455898][T11662] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.468630][T11662] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.502669][T11796] FAULT_INJECTION: forcing a failure. [ 197.502669][T11796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.502767][T11796] CPU: 0 UID: 0 PID: 11796 Comm: syz.0.2434 Not tainted 6.11.0-rc4-syzkaller-00274-g780bdc1ba776 #0 [ 197.502788][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 197.502800][T11796] Call Trace: [ 197.502807][T11796] [ 197.502815][T11796] dump_stack_lvl+0xf2/0x150 [ 197.502846][T11796] dump_stack+0x15/0x20 [ 197.543406][T11662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.547579][T11796] should_fail_ex+0x229/0x230 [ 197.557327][T11662] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.558296][T11796] should_fail+0xb/0x10 [ 197.573714][T11796] should_fail_usercopy+0x1a/0x20 [ 197.573750][T11796] _copy_from_user+0x1e/0xd0 [ 197.573777][T11796] sctp_setsockopt+0xbe/0xea0 [ 197.579466][T11662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.583403][T11796] sock_common_setsockopt+0x64/0x80 [ 197.588070][T11662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.598358][T11796] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 197.609465][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.613848][T11796] __sys_setsockopt+0x1d8/0x250 [ 197.619880][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.626814][T11796] __x64_sys_setsockopt+0x66/0x80 [ 197.633240][ T3343] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.638802][T11796] x64_sys_call+0x278d/0x2d60 [ 197.643886][ T3343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.663028][T11796] do_syscall_64+0xc9/0x1c0 [ 197.663103][T11796] ? clear_bhb_loop+0x55/0xb0 [ 197.663134][T11796] ? clear_bhb_loop+0x55/0xb0 [ 197.663161][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.663258][T11796] RIP: 0033:0x7fc997319e79 [ 197.663273][T11796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.663292][T11796] RSP: 002b:00007fc995f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.663311][T11796] RAX: ffffffffffffffda RBX: 00007fc9974b5f80 RCX: 00007fc997319e79 [ 197.663325][T11796] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 197.663338][T11796] RBP: 00007fc995f91090 R08: 0000000000000008 R09: 0000000000000000 [ 197.663350][T11796] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 197.663380][T11796] R13: 0000000000000000 R14: 00007fc9974b5f80 R15: 00007ffd91bcb1d8 [ 197.663393][T11796] [ 197.697759][T11662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.748115][T11805] pimreg: entered allmulticast mode [ 197.748752][T11805] pimreg: left allmulticast mode [ 197.794134][T11662] veth0_vlan: entered promiscuous mode [ 197.823808][T11662] veth1_vlan: entered promiscuous mode [ 197.840195][T11662] veth0_macvtap: entered promiscuous mode [ 197.847806][T11662] veth1_macvtap: entered promiscuous mode [ 197.860466][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.871019][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.880899][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.891385][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.901392][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.911871][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.921808][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.932305][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.942290][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.952907][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.962824][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.973274][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.985418][T11662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.993724][T11822] netlink: 'syz.4.2439': attribute type 12 has an invalid length. [ 198.083223][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.093761][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.103711][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.114150][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.124100][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.134676][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.144652][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.155078][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.164987][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.175404][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.185276][T11662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.195671][T11662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.206429][T11662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.216369][T11662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.225213][T11662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.234077][T11662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.242851][T11662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.370211][T11842] __nla_validate_parse: 1 callbacks suppressed [ 198.370228][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 198.440736][T11850] FAULT_INJECTION: forcing a failure. [ 198.440736][T11850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.453938][T11850] CPU: 1 UID: 0 PID: 11850 Comm: syz.3.2447 Not tainted 6.11.0-rc4-syzkaller-00274-g780bdc1ba776 #0 [ 198.464786][T11850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 198.474886][T11850] Call Trace: [ 198.478206][T11850] [ 198.481128][T11850] dump_stack_lvl+0xf2/0x150 [ 198.485905][T11850] dump_stack+0x15/0x20 [ 198.490117][T11850] should_fail_ex+0x229/0x230 [ 198.494836][T11850] should_fail+0xb/0x10 [ 198.499004][T11850] should_fail_usercopy+0x1a/0x20 [ 198.504237][T11850] _copy_to_user+0x1e/0xa0 [ 198.508703][T11850] simple_read_from_buffer+0xa0/0x110 [ 198.514070][T11850] proc_fail_nth_read+0xff/0x140 [ 198.519005][T11850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.524608][T11850] vfs_read+0x1a2/0x6e0 [ 198.528827][T11850] ? __rcu_read_unlock+0x4e/0x70 [ 198.533840][T11850] ? __fget_files+0x1da/0x210 [ 198.538527][T11850] ksys_read+0xeb/0x1b0 [ 198.542743][T11850] __x64_sys_read+0x42/0x50 [ 198.547254][T11850] x64_sys_call+0x27d3/0x2d60 [ 198.551998][T11850] do_syscall_64+0xc9/0x1c0 [ 198.556497][T11850] ? clear_bhb_loop+0x55/0xb0 [ 198.561178][T11850] ? clear_bhb_loop+0x55/0xb0 [ 198.565847][T11850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.571896][T11850] RIP: 0033:0x7f349f5e88bc [ 198.576296][T11850] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 198.595976][T11850] RSP: 002b:00007f349e267030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.604557][T11850] RAX: ffffffffffffffda RBX: 00007f349f785f80 RCX: 00007f349f5e88bc [ 198.612515][T11850] RDX: 000000000000000f RSI: 00007f349e2670a0 RDI: 0000000000000004 [ 198.620483][T11850] RBP: 00007f349e267090 R08: 0000000000000000 R09: 0000000000000000 [ 198.628470][T11850] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 198.636493][T11850] R13: 0000000000000000 R14: 00007f349f785f80 R15: 00007ffe3d89a308 [ 198.644456][T11850] [ 198.712166][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 199.232166][T11871] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2454'. [ 199.241272][T11871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2454'. [ 199.383104][T11886] loop1: detected capacity change from 0 to 256 [ 199.390800][T11886] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.414744][T11890] loop2: detected capacity change from 0 to 128 [ 199.423161][T11890] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.435582][T11890] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.471338][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 199.471351][ T29] audit: type=1400 audit(1724590706.522:1354): avc: denied { rename } for pid=11889 comm="syz.2.2461" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.526139][ T29] audit: type=1326 audit(1724590706.572:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.550414][ T29] audit: type=1326 audit(1724590706.572:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.574277][ T29] audit: type=1326 audit(1724590706.572:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.592308][T11890] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2461'. [ 199.597767][ T29] audit: type=1326 audit(1724590706.572:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.630320][ T29] audit: type=1326 audit(1724590706.572:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.653798][ T29] audit: type=1326 audit(1724590706.572:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.659750][T11894] tipc: Enabling not permitted [ 199.677298][ T29] audit: type=1326 audit(1724590706.572:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.682981][T11894] tipc: Enabling of bearer rejected, failed to enable media [ 199.706252][ T29] audit: type=1326 audit(1724590706.572:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.738008][ T29] audit: type=1326 audit(1724590706.572:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc380639e79 code=0x7ffc0000 [ 199.797450][T11902] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 199.836924][T10317] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 199.860618][T10317] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 199.875805][T10317] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 199.893535][T10317] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 199.918233][T10317] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 199.936332][T10317] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 199.936554][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 199.951137][T10317] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 199.975059][T10317] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 199.991078][T10317] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 200.004394][T10317] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 200.056091][T11930] loop3: detected capacity change from 0 to 1024 [ 200.065050][T11930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.077263][T11930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.097688][T11930] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 200.106754][T11930] System zones: 0-1, 3-36 [ 200.112785][T11930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.164073][T11930] netlink: 'syz.3.2474': attribute type 4 has an invalid length. [ 200.217702][T11353] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.360419][T10317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.370922][T10695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.423137][T10695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.474459][T10695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.535854][T10695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.590698][T10695] bridge_slave_1: left allmulticast mode [ 200.596382][T10695] bridge_slave_1: left promiscuous mode [ 200.602148][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.609994][T10695] bridge_slave_0: left allmulticast mode [ 200.615735][T10695] bridge_slave_0: left promiscuous mode [ 200.621468][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.684398][T10695] batman_adv: batadv0: Removing interface: macvlan2 [ 200.743202][T10695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.753550][T10695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.763761][T10695] bond0 (unregistering): Released all slaves [ 200.778240][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 200.807930][T11954] chnl_net:caif_netlink_parms(): no params data found [ 200.880156][T10695] tipc: Left network mode [ 200.899738][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.906841][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.914201][T11954] bridge_slave_0: entered allmulticast mode [ 200.920790][T11954] bridge_slave_0: entered promiscuous mode [ 200.927745][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.934957][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.942655][T11954] bridge_slave_1: entered allmulticast mode [ 200.949475][T11954] bridge_slave_1: entered promiscuous mode [ 200.972148][T10695] hsr_slave_0: left promiscuous mode [ 200.977896][T10695] hsr_slave_1: left promiscuous mode [ 200.984186][T10695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.991737][T10695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.999422][T10695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.006947][T10695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.015720][T10695] veth1_macvtap: left promiscuous mode [ 201.021312][T10695] veth0_macvtap: left promiscuous mode [ 201.026839][T10695] veth1_vlan: left promiscuous mode [ 201.026874][T10695] veth0_vlan: left promiscuous mode [ 201.135305][T10695] team0 (unregistering): Port device team_slave_1 removed [ 201.146011][T10695] team0 (unregistering): Port device team_slave_0 removed [ 201.147569][T12005] loop3: detected capacity change from 0 to 2048 [ 201.170150][T12005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.186113][T12005] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.220639][T11993] syzkaller0: entered promiscuous mode [ 201.226150][T11993] syzkaller0: entered allmulticast mode [ 201.235586][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2494'. [ 201.247370][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.302571][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.316143][T11353] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.343744][T11954] team0: Port device team_slave_0 added [ 201.354074][T12013] syzkaller0: entered allmulticast mode [ 201.361767][T11954] team0: Port device team_slave_1 added [ 201.373122][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'. [ 201.434746][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.434811][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.434837][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.510295][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.517343][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.543506][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.691362][T11954] hsr_slave_0: entered promiscuous mode [ 201.703112][T11954] hsr_slave_1: entered promiscuous mode [ 201.716201][T11954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.720008][T12026] infiniband syz1: set down [ 201.728308][T12026] infiniband syz1: added ipvlan1 [ 201.731479][T11954] Cannot create hsr debugfs directory [ 201.759552][T12026] RDS/IB: syz1: added [ 201.767917][T12026] smc: adding ib device syz1 with port count 1 [ 201.777846][T12026] smc: ib device syz1 port 1 has pnetid [ 202.023039][T12044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2507'. [ 202.141517][T11954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.149927][T11954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.158267][T11954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.166849][T11954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.199433][T11954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.213542][T11954] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.225295][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.232443][T10698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.243253][T10695] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.250338][T10695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.323462][T11954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.456148][T11954] veth0_vlan: entered promiscuous mode [ 202.467262][T11954] veth1_vlan: entered promiscuous mode [ 202.502305][T11954] veth0_macvtap: entered promiscuous mode [ 202.517978][T11954] veth1_macvtap: entered promiscuous mode [ 202.532890][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.543405][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.553236][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.563702][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.573706][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.584275][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.594409][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.605036][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.614885][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.625400][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.635277][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.645775][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.657212][T11954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.667249][T12079] dummy0: entered promiscuous mode [ 202.672705][T12079] vlan2: entered promiscuous mode [ 202.677784][T12079] vlan2: entered allmulticast mode [ 202.682944][T12079] dummy0: entered allmulticast mode [ 202.689670][T12079] dummy0: left allmulticast mode [ 202.694706][T12079] dummy0: left promiscuous mode [ 202.706598][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.717070][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.726905][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.737441][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.747285][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.757749][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.767551][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.777972][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.787828][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.798256][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.808198][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.818664][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.829569][T11954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.839229][T11954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.847981][T11954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.856772][T11954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.865795][T11954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.005114][T12099] loop2: detected capacity change from 0 to 2048 [ 203.155315][T12112] xt_CT: No such helper "syz0" [ 203.256565][T12119] loop2: detected capacity change from 0 to 2048 [ 203.299186][T12119] loop2: p1 < > p2 < > p3 p4 < > [ 203.304237][T12119] loop2: partition table partially beyond EOD, truncated [ 203.311342][T12119] loop2: p1 start 2305 is beyond EOD, truncated [ 203.317610][T12119] loop2: p2 start 4294902784 is beyond EOD, truncated [ 203.324510][T12119] loop2: p3 start 4278191616 is beyond EOD, truncated [ 203.940193][T12154] loop3: detected capacity change from 0 to 512 [ 203.968602][T12154] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.2540: invalid block [ 203.981081][T12154] EXT4-fs (loop3): Remounting filesystem read-only [ 203.988908][T12154] EXT4-fs (loop3): 1 truncate cleaned up [ 203.995167][T12154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.007509][T12154] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 204.015764][T12154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.126661][T12175] can0: slcan on pts1. [ 204.169039][T12175] can0 (unregistered): slcan off pts1. [ 204.421087][T12196] loop2: detected capacity change from 0 to 1024 [ 204.428218][T12196] EXT4-fs: Ignoring removed orlov option [ 204.434030][T12196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.450717][T12196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.472021][T11954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.746849][T12213] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.753836][T12213] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.935698][T12228] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 205.039359][T12242] netlink: 'syz.1.2574': attribute type 32 has an invalid length. [ 205.088781][T12251] __nla_validate_parse: 5 callbacks suppressed [ 205.088795][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 205.104384][T12251] netlink: 'syz.0.2573': attribute type 14 has an invalid length. [ 205.112227][T12251] netlink: 'syz.0.2573': attribute type 11 has an invalid length. [ 205.114978][T12251] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.128832][T12251] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.128911][T12251] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.128982][T12251] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.129038][T12251] vxlan0: entered promiscuous mode [ 205.247468][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 205.247482][ T29] audit: type=1326 audit(1724590712.292:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.0.2580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc997319e79 code=0x0 [ 205.323625][ T29] audit: type=1400 audit(1724590712.372:1402): avc: denied { getopt } for pid=12268 comm="syz.3.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.354825][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'. [ 205.415634][T12275] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 205.627915][T12288] netlink: set zone limit has 8 unknown bytes [ 205.826604][T12301] netlink: 'syz.3.2598': attribute type 3 has an invalid length. [ 205.902271][T12307] loop3: detected capacity change from 0 to 128 [ 205.909699][T12307] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 205.920792][T12307] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 205.935362][T12307] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.2601: No space for directory leaf checksum. Please run e2fsck -D. [ 205.950840][T12307] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.2601: checksumming directory block 0 [ 205.952701][T12308] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.2601: No space for directory leaf checksum. Please run e2fsck -D. [ 205.978243][T12308] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.2601: checksumming directory block 0 [ 206.007604][T11353] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.040850][T12315] loop3: detected capacity change from 0 to 1024 [ 206.047682][T12315] ext3: Bad value for 'max_dir_size_kb' [ 206.061383][T12315] loop3: detected capacity change from 0 to 1024 [ 206.077469][T12315] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 206.087787][T12315] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 206.102691][T12315] jbd2_journal_init_inode: Cannot locate journal superblock [ 206.110129][T12315] EXT4-fs (loop3): Could not load journal inode [ 206.123506][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2605'. [ 206.125220][T12319] loop2: detected capacity change from 0 to 1024 [ 206.151452][T12319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.167268][T12319] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 206.182468][T12319] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 17 with error 28 [ 206.195283][T12319] EXT4-fs (loop2): This should not happen!! Data will be lost [ 206.195283][T12319] [ 206.204947][T12319] EXT4-fs (loop2): Total free blocks count 0 [ 206.211033][T12319] EXT4-fs (loop2): Free/Dirty block details [ 206.217095][T12319] EXT4-fs (loop2): free_blocks=68451041280 [ 206.222999][T12319] EXT4-fs (loop2): dirty_blocks=32 [ 206.228309][T12319] EXT4-fs (loop2): Block reservation details [ 206.228656][T12326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.234313][T12319] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 206.248938][T12326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.275020][T12328] loop3: detected capacity change from 0 to 256 [ 206.278267][T12330] loop1: detected capacity change from 0 to 512 [ 206.281627][T12328] vfat: Unknown parameter ' ^x1ǾFqw&P%2nSX~srQSJs\(y? [ 206.281627][T12328] ZK5f@O}\!;8'D9ڡ }lp)x7X ( m W' [ 206.289233][T12330] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 206.315111][T12330] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2610: invalid indirect mapped block 8 (level 2) [ 206.338543][T12330] EXT4-fs (loop1): Remounting filesystem read-only [ 206.369008][T12330] EXT4-fs (loop1): 1 truncate cleaned up [ 206.375583][T12330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.393741][T12330] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 206.400715][T12330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.421335][T12330] loop1: detected capacity change from 0 to 512 [ 206.428283][T12330] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 206.428601][T12330] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2610: invalid indirect mapped block 8 (level 2) [ 206.453530][T12330] EXT4-fs (loop1): Remounting filesystem read-only [ 206.475153][T12330] EXT4-fs (loop1): 1 truncate cleaned up [ 206.483103][T12330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.506229][ T29] audit: type=1326 audit(1724590713.552:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.0.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc997319e79 code=0x7ffc0000 [ 206.529958][ T29] audit: type=1326 audit(1724590713.552:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.0.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc997319e79 code=0x7ffc0000 [ 206.553470][ T29] audit: type=1326 audit(1724590713.552:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.0.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc997319e79 code=0x7ffc0000 [ 206.576985][ T29] audit: type=1326 audit(1724590713.552:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.0.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fc997319e79 code=0x7ffc0000 [ 206.600435][ T29] audit: type=1326 audit(1724590713.552:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.0.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc997319e79 code=0x7ffc0000 [ 206.620762][T12330] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 206.623966][ T29] audit: type=1326 audit(1724590713.552:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.0.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc997319e79 code=0x7ffc0000 [ 206.647150][T12330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.653735][ T29] audit: type=1326 audit(1724590713.552:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.0.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc997319e79 code=0x7ffc0000 [ 206.686195][ T29] audit: type=1326 audit(1724590713.552:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.0.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc997319e79 code=0x7ffc0000 [ 206.777167][T12346] FAULT_INJECTION: forcing a failure. [ 206.777167][T12346] name failslab, interval 1, probability 0, space 0, times 0 [ 206.790041][T12346] CPU: 0 UID: 0 PID: 12346 Comm: syz.1.2615 Not tainted 6.11.0-rc4-syzkaller-00274-g780bdc1ba776 #0 [ 206.800875][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.810932][T12346] Call Trace: [ 206.814357][T12346] [ 206.817283][T12346] dump_stack_lvl+0xf2/0x150 [ 206.821970][T12346] dump_stack+0x15/0x20 [ 206.826144][T12346] should_fail_ex+0x229/0x230 [ 206.830870][T12346] ? __alloc_skb+0x10b/0x310 [ 206.835613][T12346] should_failslab+0x8f/0xb0 [ 206.840214][T12346] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 206.846065][T12346] __alloc_skb+0x10b/0x310 [ 206.850575][T12346] tcp_stream_alloc_skb+0x2f/0x1e0 [ 206.855692][T12346] tcp_sendmsg_locked+0x977/0x2640 [ 206.860810][T12346] ? mntput+0x49/0x70 [ 206.864799][T12346] ? avc_has_perm_noaudit+0x1cc/0x210 [ 206.870183][T12346] ? __pfx_tcp_sendmsg+0x10/0x10 [ 206.875157][T12346] tcp_sendmsg+0x30/0x50 [ 206.879487][T12346] inet_sendmsg+0x77/0xd0 [ 206.883985][T12346] __sock_sendmsg+0x102/0x180 [ 206.888796][T12346] __sys_sendto+0x1e5/0x260 [ 206.893338][T12346] __x64_sys_sendto+0x78/0x90 [ 206.898106][T12346] x64_sys_call+0x2959/0x2d60 [ 206.902859][T12346] do_syscall_64+0xc9/0x1c0 [ 206.907438][T12346] ? clear_bhb_loop+0x55/0xb0 [ 206.912204][T12346] ? clear_bhb_loop+0x55/0xb0 [ 206.917386][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.923314][T12346] RIP: 0033:0x7f224f679e79 [ 206.927731][T12346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.947351][T12346] RSP: 002b:00007f224e2f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 206.955797][T12346] RAX: ffffffffffffffda RBX: 00007f224f815f80 RCX: 00007f224f679e79 [ 206.963817][T12346] RDX: 00000000000020c8 RSI: 00000000200012c0 RDI: 0000000000000003 [ 206.971803][T12346] RBP: 00007f224e2f1090 R08: 0000000000000000 R09: 0000000000000027 [ 206.979784][T12346] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 206.987762][T12346] R13: 0000000000000000 R14: 00007f224f815f80 R15: 00007ffe646adf38 [ 206.995739][T12346] [ 207.261776][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2617'. [ 207.270961][T12351] netlink: 'syz.3.2617': attribute type 25 has an invalid length. [ 207.287905][T12352] loop3: detected capacity change from 0 to 1764 [ 207.297052][T12351] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.305929][T12351] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.314854][T12351] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.323584][T12351] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.383174][T12319] EXT4-fs (loop2): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 9 with error 28 [ 207.631390][T12358] loop1: detected capacity change from 0 to 512 [ 207.639936][T12358] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2620: bg 0: block 5: invalid block bitmap [ 207.652653][T12358] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 207.661852][T12358] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2620: invalid indirect mapped block 3 (level 2) [ 207.675422][T12358] EXT4-fs (loop1): 1 orphan inode deleted [ 207.681202][T12358] EXT4-fs (loop1): 1 truncate cleaned up [ 207.687163][T12358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.708627][T11662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.760794][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2618'. [ 207.807181][T12371] vlan2: entered promiscuous mode [ 207.812433][T12371] vlan2: entered allmulticast mode [ 207.818012][T12371] hsr_slave_1: entered allmulticast mode [ 208.713459][T12393] netlink: 'syz.3.2632': attribute type 2 has an invalid length. [ 208.814914][T12403] loop2: detected capacity change from 0 to 512 [ 208.831719][T12403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 208.844500][T12403] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.940176][T12410] syzkaller0: entered promiscuous mode [ 208.945675][T12410] syzkaller0: entered allmulticast mode [ 209.145369][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2637'. [ 209.172430][T12414] netlink: 57 bytes leftover after parsing attributes in process `syz.3.2638'. [ 209.320749][T12419] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2640'. [ 209.352602][T12419] infiniband syz: set down [ 209.357230][T12419] infiniband syz: added ipvlan0 [ 209.366673][T12419] RDS/IB: syz: added [ 209.370716][T12419] smc: adding ib device syz with port count 1 [ 209.377038][T12419] smc: ib device syz port 1 has pnetid [ 209.576362][T12426] loop1: detected capacity change from 0 to 8192 [ 209.726812][T11954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 209.821220][T12446] loop3: detected capacity change from 0 to 2048 [ 209.827785][T12446] EXT4-fs: test_dummy_encryption option not supported [ 209.884366][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 209.895272][T12456] loop3: detected capacity change from 0 to 512 [ 209.904480][T12456] EXT4-fs: Ignoring removed oldalloc option [ 209.911994][T12456] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.2653: Parent and EA inode have the same ino 15 [ 209.924560][T12456] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.2653: Parent and EA inode have the same ino 15 [ 209.937144][T12456] EXT4-fs (loop3): 1 orphan inode deleted [ 209.943293][T12456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.390257][T12462] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 210.626479][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 210.710184][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 210.710204][ T29] audit: type=1326 audit(1724590717.762:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.1.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224f679e79 code=0x7ffc0000 [ 210.739971][ T29] audit: type=1326 audit(1724590717.762:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.1.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224f679e79 code=0x7ffc0000 [ 210.787191][ T29] audit: type=1326 audit(1724590717.832:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.1.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f224f679e79 code=0x7ffc0000 [ 210.810869][ T29] audit: type=1326 audit(1724590717.832:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.1.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224f679e79 code=0x7ffc0000 [ 210.834470][ T29] audit: type=1326 audit(1724590717.832:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.1.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224f679e79 code=0x7ffc0000 [ 210.887614][T12494] loop1: detected capacity change from 0 to 2048 [ 211.069996][T11353] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.588885][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2661'. [ 211.598103][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2661'. [ 211.611165][ T3375] tipc: Subscription rejected, illegal request [ 211.633350][T12497] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 211.642574][T12497] dummy0: entered promiscuous mode [ 211.653054][T12511] netlink: 'syz.3.2669': attribute type 8 has an invalid length. [ 211.856957][T12528] loop2: detected capacity change from 0 to 256 [ 211.899030][ T29] audit: type=1400 audit(1724590718.942:1462): avc: denied { listen } for pid=12523 comm="syz.1.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 211.935016][T12527] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 211.973637][T12529] loop1: detected capacity change from 0 to 4096 [ 212.008167][T12529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.034388][T12531] loop2: detected capacity change from 0 to 2048 [ 212.062752][T12529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.110249][T12524] ipt_rpfilter: unknown options [ 212.116871][T12524] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.2672: corrupted inode contents [ 212.122201][ T29] audit: type=1400 audit(1724590719.178:1463): avc: denied { write } for pid=12523 comm="syz.1.2672" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.130614][T12524] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #15: comm syz.1.2672: mark_inode_dirty error [ 212.151183][ T29] audit: type=1400 audit(1724590719.178:1464): avc: denied { open } for pid=12523 comm="syz.1.2672" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.186975][T12524] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.2672: corrupted inode contents [ 212.190248][T12536] loop3: detected capacity change from 0 to 128 [ 212.199820][T12531] Alternate GPT is invalid, using primary GPT. [ 212.207802][T12524] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.2672: mark_inode_dirty error [ 212.211673][T12531] loop2: p1 p2 p3 [ 212.226685][T12524] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.2672: corrupted inode contents [ 212.226798][T12524] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.2672: mark_inode_dirty error [ 212.226893][T12524] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.2672: corrupted inode contents [ 212.280745][T12524] EXT4-fs error (device loop1): ext4_truncate:4241: inode #15: comm syz.1.2672: mark_inode_dirty error [ 212.293266][T12524] EXT4-fs error (device loop1) in ext4_setattr:5553: Corrupt filesystem [ 212.306710][ T29] audit: type=1400 audit(1724590719.345:1465): avc: denied { read } for pid=12546 comm="syz.2.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.351521][T11662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.391926][T12553] loop2: detected capacity change from 0 to 512 [ 212.399094][T12554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39589 sclass=netlink_route_socket pid=12554 comm=syz.0.2679 [ 212.413653][T12553] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2678: Invalid inode bitmap blk 4 in block_group 0 [ 212.428187][T12553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.497352][T12553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2678'. [ 212.505020][T12566] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 212.512728][T12566] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 212.565942][ T29] audit: type=1326 audit(1724590719.585:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.2685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f224f679e79 code=0x0 [ 212.679066][T12573] loop1: detected capacity change from 0 to 1024 [ 212.686358][T12573] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 212.696430][T12573] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 212.706070][T12573] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 212.716674][T12573] EXT4-fs error (device loop1): ext4_get_journal_inode:5740: inode #5: comm syz.1.2685: unexpected bad inode w/o EXT4_IGET_BAD [ 212.729938][T12573] EXT4-fs (loop1): no journal found [ 212.735139][T12573] EXT4-fs (loop1): can't get journal size [ 212.741420][T12573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.234066][T11954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.357772][T12593] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 213.364338][T12593] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 213.372589][T12593] hsr_slave_0: left promiscuous mode [ 213.385668][T12593] hsr_slave_1: left promiscuous mode [ 213.402337][T12598] loop2: detected capacity change from 0 to 512 [ 213.424913][T12598] loop2: detected capacity change from 0 to 512 [ 213.436342][T12598] loop7: detected capacity change from 0 to 16384 [ 213.439286][T12595] loop3: detected capacity change from 0 to 512 [ 213.450605][T12595] EXT4-fs (loop3): bad geometry: first data block 1 is beyond end of filesystem (0) [ 213.521414][T12598] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 213.532270][T12598] I/O error, dev loop7, sector 4864 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 213.542127][T12598] Buffer I/O error on dev loop7, logical block 608, lost async page write [ 213.550794][T12598] Buffer I/O error on dev loop7, logical block 609, lost async page write [ 213.559478][T12598] Buffer I/O error on dev loop7, logical block 610, lost async page write [ 213.568073][T12598] Buffer I/O error on dev loop7, logical block 611, lost async page write [ 213.576863][T12598] Buffer I/O error on dev loop7, logical block 612, lost async page write [ 213.585485][T12598] Buffer I/O error on dev loop7, logical block 613, lost async page write [ 213.594012][T12598] Buffer I/O error on dev loop7, logical block 614, lost async page write [ 213.602628][T12598] Buffer I/O error on dev loop7, logical block 615, lost async page write [ 213.611245][T12598] Buffer I/O error on dev loop7, logical block 616, lost async page write [ 213.619841][T12598] Buffer I/O error on dev loop7, logical block 617, lost async page write [ 213.628951][T11662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.642445][T12590] chnl_net:caif_netlink_parms(): no params data found [ 213.694496][T12622] loop1: detected capacity change from 0 to 512 [ 213.761265][T12590] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.768423][T12590] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.777106][T12590] bridge_slave_0: entered allmulticast mode [ 213.783829][T12590] bridge_slave_0: entered promiscuous mode [ 213.791973][T12620] netlink: 'syz.0.2699': attribute type 9 has an invalid length. [ 213.819378][T12630] loop3: detected capacity change from 0 to 512 [ 213.826198][T12630] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 213.836108][T12630] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 213.844839][T12630] EXT4-fs (loop3): 1 truncate cleaned up [ 213.850932][T12630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.867398][T12630] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.2703: Logical block already allocated [ 213.879381][T12630] EXT4-fs (loop3): Remounting filesystem read-only [ 213.887361][T12590] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.894529][T12590] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.902267][T12590] bridge_slave_1: entered allmulticast mode [ 213.909056][T12590] bridge_slave_1: entered promiscuous mode [ 213.932445][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.954939][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.983170][T12590] team0: Port device team_slave_0 added [ 213.993029][T12590] team0: Port device team_slave_1 added [ 214.021087][T11353] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.052479][T12653] bridge_slave_0: left allmulticast mode [ 214.058167][T12653] bridge_slave_0: left promiscuous mode [ 214.064117][T12653] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.083736][T12653] bridge_slave_1: left allmulticast mode [ 214.089416][T12653] bridge_slave_1: left promiscuous mode [ 214.095115][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.108812][T12653] bond0: (slave bond_slave_0): Releasing backup interface [ 214.125169][T12653] bond0: (slave bond_slave_1): Releasing backup interface [ 214.142015][T12653] team0: Port device team_slave_0 removed [ 214.153620][T12653] team0: Port device team_slave_1 removed [ 214.160719][T12653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.168257][T12653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.176661][T12653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.184223][T12653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.204334][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.211351][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.237564][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.249300][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.256285][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.282291][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.336372][T12669] netlink: 'syz.2.2716': attribute type 2 has an invalid length. [ 214.369449][T12590] hsr_slave_0: entered promiscuous mode [ 214.375680][T12590] hsr_slave_1: entered promiscuous mode [ 214.382161][T12590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.389776][T12590] Cannot create hsr debugfs directory [ 214.441181][T12679] netlink: 'syz.2.2719': attribute type 33 has an invalid length. [ 214.449115][T12679] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2719'. [ 214.511444][T12695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=12695 comm=syz.3.2723 [ 214.525688][T12590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.560089][T12697] netlink: get zone limit has 8 unknown bytes [ 214.577270][T12701] loop3: detected capacity change from 0 to 1024 [ 214.585815][T12701] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 214.596847][T12701] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 214.607842][T12701] EXT4-fs (loop3): invalid journal inode [ 214.615577][T12701] EXT4-fs (loop3): can't get journal size [ 214.633916][T12590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.647183][T12701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.675717][T12590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.752444][T11353] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.777309][T12590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.779833][T12722] loop2: detected capacity change from 0 to 1024 [ 214.858693][T12590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.872881][T12738] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 214.889787][T12590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.906335][T12590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.928296][T12590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.959014][T12748] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 214.968778][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2744'. [ 215.050086][T12590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.111986][T12590] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.134061][T10698] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 215.145852][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.152956][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.171177][T12775] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12775 comm=syz.1.2746 [ 215.195922][T12590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.206385][T12590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.231869][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.239076][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.334727][T12590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.374360][T12780] loop3: detected capacity change from 0 to 8192 [ 215.515334][T12804] loop1: detected capacity change from 0 to 512 [ 215.523050][T12804] EXT4-fs: Ignoring removed i_version option [ 215.529081][T12804] EXT4-fs: Ignoring removed nobh option [ 215.534601][T12780] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 215.536768][T12804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 215.542324][T12780] FAT-fs (loop3): Filesystem has been set read-only [ 215.545129][T12590] veth0_vlan: entered promiscuous mode [ 215.557171][T12796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 215.565161][T12804] EXT4-fs (loop1): 1 truncate cleaned up [ 215.574531][T12590] veth1_vlan: entered promiscuous mode [ 215.578434][T12806] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 215.591793][T12590] veth0_macvtap: entered promiscuous mode [ 215.600244][T12590] veth1_macvtap: entered promiscuous mode [ 215.608335][T12804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.616480][T12780] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 215.624728][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.639701][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.648770][T12780] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 215.649774][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.668586][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.671660][T12780] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 215.678535][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.697612][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.707522][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.718018][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.727875][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.738786][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.748778][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.759311][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.770640][T11662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.771229][T12590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.790731][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.801239][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.811196][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.821724][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.831792][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.842231][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.852060][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.862575][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.872818][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.883348][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.893385][T12590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.903862][T12590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.914755][T12590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.937914][T12590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.946829][T12590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.956261][T12590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.965307][T12590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.025276][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 216.025290][ T29] audit: type=1400 audit(1724590722.778:1614): avc: denied { name_bind } for pid=12821 comm="syz.4.2690" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 216.048254][T12825] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2761'. [ 216.062025][T12825] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2761'. [ 216.095943][T12825] loop1: detected capacity change from 0 to 4096 [ 216.102727][T12825] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.110102][T12825] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 589826)! [ 216.120893][T12825] EXT4-fs (loop1): group descriptors corrupted! [ 216.138366][T12825] loop1: detected capacity change from 0 to 256 [ 216.156065][ T29] audit: type=1400 audit(1724590722.898:1615): avc: denied { prog_load } for pid=12833 comm="syz.2.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.175285][ T29] audit: type=1400 audit(1724590722.898:1616): avc: denied { bpf } for pid=12833 comm="syz.2.2764" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.195920][ T29] audit: type=1400 audit(1724590722.898:1617): avc: denied { write } for pid=12824 comm="syz.1.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 216.218094][ T29] audit: type=1400 audit(1724590722.898:1618): avc: denied { write } for pid=12835 comm="syz.0.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.237704][ T29] audit: type=1400 audit(1724590722.898:1619): avc: denied { create } for pid=12835 comm="syz.0.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.257260][ T29] audit: type=1400 audit(1724590722.963:1620): avc: denied { map_create } for pid=12833 comm="syz.2.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.278295][ T29] audit: type=1400 audit(1724590722.963:1621): avc: denied { perfmon } for pid=12833 comm="syz.2.2764" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.285937][T12846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1 sclass=netlink_audit_socket pid=12846 comm=syz.0.2767 [ 216.299270][ T29] audit: type=1400 audit(1724590722.990:1622): avc: denied { prog_run } for pid=12833 comm="syz.2.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.331011][ T29] audit: type=1400 audit(1724590723.000:1623): avc: denied { create } for pid=12843 comm="syz.0.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.429097][T12859] loop3: detected capacity change from 0 to 1024 [ 216.437543][T12859] EXT4-fs: Ignoring removed oldalloc option [ 216.457103][T12859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.552000][T12867] cgroup: Unknown subsys name 'fowner>00000000000000016895' [ 216.589786][T11353] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.707574][T12881] netlink: 35732 bytes leftover after parsing attributes in process `syz.0.2778'. [ 216.717400][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'. [ 216.759154][T12902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2782'. [ 216.829558][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2782'. [ 216.831127][T12909] loop3: detected capacity change from 0 to 512 [ 216.848569][T12909] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.860676][T12909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c019, mo2=0002] [ 216.869541][T12909] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 65530: comm syz.3.2785: invalid block [ 216.881865][T12909] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2785: couldn't read orphan inode 11 (err -117) [ 216.894309][T12909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.919684][T11353] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.979587][T12917] loop3: detected capacity change from 0 to 1024 [ 216.986506][T12917] ext4: Bad value for 'debug_want_extra_isize' [ 217.182494][T12935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.192372][T12935] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2793'. [ 217.271122][T12949] syz.0.2796: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 217.286003][T12949] CPU: 0 UID: 0 PID: 12949 Comm: syz.0.2796 Not tainted 6.11.0-rc4-syzkaller-00274-g780bdc1ba776 #0 [ 217.296768][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.306814][T12949] Call Trace: [ 217.310078][T12949] [ 217.313002][T12949] dump_stack_lvl+0xf2/0x150 [ 217.317585][T12949] dump_stack+0x15/0x20 [ 217.321729][T12949] warn_alloc+0x145/0x1b0 [ 217.326105][T12949] ? __vmalloc_node_range_noprof+0x88/0xec0 [ 217.332081][T12949] ? audit_log_end+0x1d0/0x1e0 [ 217.336874][T12949] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 217.343262][T12949] __vmalloc_node_range_noprof+0xaa/0xec0 [ 217.349051][T12949] ? avc_denied+0xf1/0x110 [ 217.353479][T12949] ? slow_avc_audit+0xf9/0x140 [ 217.358417][T12949] vmalloc_user_noprof+0x59/0x70 [ 217.363355][T12949] ? xskq_create+0x79/0xd0 [ 217.367787][T12949] xskq_create+0x79/0xd0 [ 217.372032][T12949] xsk_init_queue+0x82/0xd0 [ 217.376656][T12949] xsk_setsockopt+0x409/0x520 [ 217.381341][T12949] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.386609][T12949] __sys_setsockopt+0x1d8/0x250 [ 217.391507][T12949] __x64_sys_setsockopt+0x66/0x80 [ 217.396537][T12949] x64_sys_call+0x278d/0x2d60 [ 217.401253][T12949] do_syscall_64+0xc9/0x1c0 [ 217.405757][T12949] ? clear_bhb_loop+0x55/0xb0 [ 217.410461][T12949] ? clear_bhb_loop+0x55/0xb0 [ 217.415131][T12949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.421105][T12949] RIP: 0033:0x7fc997319e79 [ 217.425595][T12949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.445282][T12949] RSP: 002b:00007fc995f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.453731][T12949] RAX: ffffffffffffffda RBX: 00007fc9974b5f80 RCX: 00007fc997319e79 [ 217.461844][T12949] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 217.469819][T12949] RBP: 00007fc99738793e R08: 0000000000000004 R09: 0000000000000000 [ 217.477809][T12949] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000000 [ 217.485772][T12949] R13: 0000000000000000 R14: 00007fc9974b5f80 R15: 00007ffd91bcb1d8 [ 217.493831][T12949] [ 217.497133][T12949] Mem-Info: [ 217.500250][T12949] active_anon:4900 inactive_anon:481 isolated_anon:0 [ 217.500250][T12949] active_file:8189 inactive_file:17428 isolated_file:0 [ 217.500250][T12949] unevictable:135 dirty:100 writeback:0 [ 217.500250][T12949] slab_reclaimable:2952 slab_unreclaimable:21660 [ 217.500250][T12949] mapped:31951 shmem:2058 pagetables:732 [ 217.500250][T12949] sec_pagetables:0 bounce:0 [ 217.500250][T12949] kernel_misc_reclaimable:0 [ 217.500250][T12949] free:1834045 free_pcp:2004 free_cma:0 [ 217.546271][T12949] Node 0 active_anon:19600kB inactive_anon:1924kB active_file:32756kB inactive_file:69712kB unevictable:540kB isolated(anon):0kB isolated(file):0kB mapped:127804kB dirty:400kB writeback:0kB shmem:8232kB writeback_tmp:0kB kernel_stack:3280kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no [ 217.575233][T12949] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.602325][T12949] lowmem_reserve[]: 0 2866 7844 0 [ 217.607797][T12949] Node 0 DMA32 free:2950316kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953948kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 217.636431][T12949] lowmem_reserve[]: 0 0 4978 0 [ 217.641404][T12949] Node 0 Normal free:4371288kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:19624kB inactive_anon:1924kB active_file:32756kB inactive_file:69700kB unevictable:540kB writepending:428kB present:5242880kB managed:5098208kB mlocked:540kB bounce:0kB free_pcp:3504kB local_pcp:2880kB free_cma:0kB [ 217.672165][T12949] lowmem_reserve[]: 0 0 0 0 [ 217.676743][T12949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.689513][T12949] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950316kB [ 217.705654][T12949] Node 0 Normal: 440*4kB (ME) 855*8kB (UME) 506*16kB (UME) 452*32kB (UME) 269*64kB (UME) 132*128kB (UME) 102*256kB (UME) 63*512kB (UME) 38*1024kB (UME) 19*2048kB (UME) 1018*4096kB (UM) = 4371192kB [ 217.725054][T12949] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 217.734388][T12949] 28286 total pagecache pages [ 217.739134][T12949] 481 pages in swap cache [ 217.743572][T12949] Free swap = 122328kB [ 217.747710][T12949] Total swap = 124996kB [ 217.751866][T12949] 2097051 pages RAM [ 217.755697][T12949] 0 pages HighMem/MovableOnly [ 217.760365][T12949] 80172 pages reserved [ 217.784152][T12962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12962 comm=syz.1.2799 [ 217.828214][T12977] ================================================================== [ 217.828236][T12977] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 217.828259][T12977] [ 217.828264][T12977] write to 0xffff888112176700 of 8 bytes by task 12973 on cpu 0: [ 217.828279][T12977] mas_wmb_replace+0x20f/0x14f0 [ 217.828302][T12977] mas_wr_modify+0x183d/0x3c90 [ 217.828323][T12977] mas_wr_store_entry+0x250/0x390 [ 217.828341][T12977] mas_store_prealloc+0x151/0x2b0 [ 217.828358][T12977] vma_complete+0x3a7/0x760 [ 217.828376][T12977] __split_vma+0x623/0x690 [ 217.828400][T12977] vma_modify+0x198/0x1f0 [ 217.828421][T12977] mprotect_fixup+0x335/0x610 [ 217.828446][T12977] do_mprotect_pkey+0x673/0x9a0 [ 217.828461][T12977] __x64_sys_mprotect+0x48/0x60 [ 217.828486][T12977] x64_sys_call+0x26cf/0x2d60 [ 217.828510][T12977] do_syscall_64+0xc9/0x1c0 [ 217.828537][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.828560][T12977] [ 217.828565][T12977] read to 0xffff888112176700 of 8 bytes by task 12977 on cpu 1: [ 217.828581][T12977] mas_walk+0x123/0x320 [ 217.828597][T12977] lock_vma_under_rcu+0x84/0x260 [ 217.828618][T12977] exc_page_fault+0x150/0x650 [ 217.828638][T12977] asm_exc_page_fault+0x26/0x30 [ 217.828658][T12977] [ 217.828661][T12977] value changed: 0xffff888104648ac1 -> 0xffff888112176700 [ 217.828670][T12977] [ 217.828673][T12977] Reported by Kernel Concurrency Sanitizer on: [ 217.828681][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.1.2804 Not tainted 6.11.0-rc4-syzkaller-00274-g780bdc1ba776 #0 [ 217.828706][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.828718][T12977] ================================================================== [ 217.842954][T12981] SET target dimension over the limit!