last executing test programs: 7.30611432s ago: executing program 3 (id=331): socket$netlink(0x10, 0x3, 0x0) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_setup(0x10000, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x3c, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_LABELS_MASK={0x8, 0x17, [0x3]}, @CTA_TUPLE_MASTER={0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@cb_func, @map_val={0x18, 0x0, 0x2, 0x0, r6}, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 6.876822825s ago: executing program 3 (id=336): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11e, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0xc, &(0x7f00000000c0)=ANY=[], 0x1, 0x282, &(0x7f00000007c0)="$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") r4 = open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x14957e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x100000a, 0x4002011, r5, 0x0) fallocate(r4, 0x0, 0x0, 0x1f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x141842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000440)={'#! ', '', [{0x20, '/proc/asound/seq/timer\x00'}, {0x20, '/proc/asound/seq/timer\x00'}, {0x20, '#! '}, {0x20, 'cpuacct.usage_user\x00'}, {}, {0x20, '\x00'}], 0xa, "2e47d0db2803f90c58f8ff1550c172efacb1a019c458c3875ef0abb1071466f0aaf1853eb99a975af4004be468a3c298f7bd98afd9f484e2356ff2c00410a1cf432f25375028894e806f1784f25051c351420ca1873a04f506e878d51fc396fad68d48eb92a13da2608364978ebdf12c9ed6922b46220b519fa51f9652844731fe6ecbf4023342d183c6ffe6762f7dda87e1d1b8ed25dc3f38893e5865"}, 0xec) write$nbd(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="6444669801000000040052bb1e7e2183e45b3b8fca9da1c383278ae9897f6a54d73f95a97674361d7e721f0702e33dfbb585b9760000000000000000000072"], 0x46) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008000100ac141400080005000a01010208000b0060"], 0x34}}, 0x0) copy_file_range(r7, &(0x7f00000001c0), r6, 0x0, 0xffffffffa003e45c, 0x10000000000000) writev(r0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100737d7a30000000000900030073797a3200000000140000001100017aff7179e1fda9881235daf5dc7e92d737d533cf0aaffe21a585a4645bc73b09671fe072820b54748b46020cf14fd885ad21c5d24a8133d1b5d8ecd3129e2cdb455bdf9af4c96190b022a305c38cea6883e047e5e77c54c9a87fb6a7e7340618a2e57637d3c5df33b72e2bd74b0a2ebc4117c49ec9b0f30b98b4105c2c0b4b"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.052355863s ago: executing program 3 (id=345): ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300), 0xd}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) splice(r1, 0x0, r2, 0x0, 0xfdef, 0x2) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bind$inet(r2, 0x0, 0x0) recvmsg$qrtr(r4, 0x0, 0x0, 0x40012103) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$eJzs3U9oHNUfAPDvzGZ//ZefqaCg0kNRoULpJukfrZ7aq1go9CB4qctmG0I22ZDdaBNySO9F7EFUeqk3PXhUPHgQLx69elE8C6JBoelBVvZf2iabuK1JtnY+H5jd9+Zt9vvezH7f7gwzJIDMOtp8SCOejYiLScTIPW1D0Wk82n7d2upy6c7qcimJRuPSb0kkEXF7dbnUfX3SeT4UESsR8UxEfJuPOJ5ujltbXJouVirl+U59tD4zN1pbXDoxNVOcLE+WZ0+98uqZs6fPjJ8c37GxXv/pxnvXv3/91o3PPj+yUvqgmMS5GO603TuOndTeJvk4t2H96d0INkDJoDvAQ8l18jwfEU/HSOQ6WQ88/hr7IhpARiXyHzKq+zugefzbXfby98ev59sHIM24a52l3TLUPjcR+1vHJgf/SO47Mmkebx7ey47yWFq5FhFjQ0ObP/9J5/P38MZ2ooPsqm/Ot3fU5v2frs8/0WP+Ge6eO/2XuvPf2qb572783Bbz38U+Y/z11s8fbxn/WsRzPeMn6/GTHvHTiHi7z/g33/zq7FZtjU8ijkXv+F3J9ueHR69MVcpj7ceeMb4+duS17cZ/cIv47XO2+1tfM722/1yf4//yuy+eX9km/ksvbL//e23/AxHxfp/xn7z96RtbtTXjT2wx/u3iN9fd6jP+y+eO/tjnSwEAAAAAAAAAgAeQtq5lS9LCejlNC4X2PbxPxcG0Uq3Vj1+pLsxOtK95Oxz5tHul1Ui7njTr453rcbv1kxvqp3KdgLkDrXqhVK1MDHjsAAAAAAAAAAAAAAAAAAAA8Kg4tOH+/z9z7fv/gYzwL78hu+Q/ZNf9+Z8MrB/A3vP9D5nVkP+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/AAAAAAAAAAAAAAAAAAAAAAAAAADsiosXLjSXxp3V5VKzPjG0uDBdfefERLk2XZhZKBVK1fm5wmS1OlkpF0rVmX96v0q1OjcWswtXR+vlWn20trh0eaa6MFu/PDVTnCxfLuf3ZFQAAAAAAAAAAAAAAAAAAADw3zLcWpK0EBFpq5ymhULE/yPicOSTK1OV8lhEPBERP+Ty+5r18UF3GgAAAAAAAAAAAAAAAAAAAB4ztcWl6WKlUp5X2FyIiJWdfefmOz7wX+U7++pR2SwKWSgMeGICAAAAAAAAAAAAAAAAAIAMunvT76B7AgAAAAAAAAAAAAAAAAAAAFmW/pJERHM5NvLi8MbW/yVrudZzRLx789KHV4v1+vx4c/3v6+vrH3XWnxxE/4F+dfO0m8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXbXFpelipVKe38XCoMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DD+DgAA//+H69Sv") sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x200488d7}, 0x4000040) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@resgid}, {@grpquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) ftruncate(r7, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000, 0x0, "ef359f417bb93852f7d6d1ce4d29c3d15e5ca9000f7c41099dc2aac63a4b78c660e67700", "036c47c6780820d1cbe78969e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) fsync(0xffffffffffffffff) 5.189117813s ago: executing program 2 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xa, @empty=0x1000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xa000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 5.11906694s ago: executing program 3 (id=356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x30, 0x8004}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x56}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 5.11809885s ago: executing program 2 (id=358): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) set_robust_list(&(0x7f0000000340)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x2, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) 4.954059083s ago: executing program 2 (id=359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket(0x15, 0x5, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000009000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000080000000000000800"/113], 0x78) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40055) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0), 0x7e, 0x531, &(0x7f00000008c0)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000001340)=0x10000000000001) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) r5 = io_uring_setup(0x8fd, &(0x7f0000000380)={0x0, 0x94a5, 0x10, 0x1, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000004800)=@newtaction={0x8a0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x924, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x0, 0xddc5, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0x7, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9d, 0x0, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0xf2b, 0x0, 0x0, 0xa6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x201ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0xd, 0x0, 0x0, 0x80, 0x0, 0x2}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') pread64(r6, 0x0, 0x0, 0x1000000359) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000500), 0xf0000000) 4.818394354s ago: executing program 3 (id=360): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2a0002, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB, @ANYRES16=r1, @ANYRES32=r5], 0x44}}, 0x0) 4.510702749s ago: executing program 2 (id=365): ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300), 0xd}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) splice(r1, 0x0, r2, 0x0, 0xfdef, 0x2) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bind$inet(r2, 0x0, 0x0) recvmsg$qrtr(r4, 0x0, 0x0, 0x40012103) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x200488d7}, 0x4000040) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@resgid}, {@grpquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000, 0x0, "ef359f417bb93852f7d6d1ce4d29c3d15e5ca9000f7c41099dc2aac63a4b78c660e67700", "036c47c6780820d1cbe78969e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) fsync(r7) 3.826825876s ago: executing program 4 (id=376): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d162718e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a47c721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f664222000000000000000d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d808f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bff000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6197155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000f841b35af2e300000000000000000000000000002bd4b643dc57db1f6c1e8c5eb6b10d180521100b56003a45fc56fde2608305b03e5ef6218e28dad07c4b5b68ba788ff40a64c9c0dc2cfb3dbd94e80aaa6dd2616eed0f4d04a9a7d3259d4148686d356e085b4075e182f1ebda216013"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x10}, 0x10}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000600)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x15f, 0x11, 0x45, 0x0, 0x9523, 0x10200, r8}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f000000a800)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x7, 0xfffb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 3.708584605s ago: executing program 2 (id=378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x1b0], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 3.362137024s ago: executing program 2 (id=383): socket$inet6(0xa, 0x3, 0x3a) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000780)=0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0xa00}}, 0x1c}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f0000000600)=[{&(0x7f00000010c0)="aa", 0x1}], 0x1, 0x0, 0x0) 1.185661593s ago: executing program 1 (id=348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000483090ff00000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x90) 1.080016361s ago: executing program 1 (id=391): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000012c0)={0x7, {"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", 0x1050}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) 993.696279ms ago: executing program 4 (id=392): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) set_robust_list(&(0x7f0000000340)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x2, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) 934.067623ms ago: executing program 0 (id=393): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) (async, rerun: 32) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 893.100207ms ago: executing program 1 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x1000000, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 892.579877ms ago: executing program 4 (id=395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a00ff00000000bfa100000000000007010000e8ffffffb702000008000000b7030000fdffffff85000000b20000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = socket$inet6(0xa, 0x200000000003, 0x87) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000a00)=[@in={0x2, 0x4e20, @private=0xa010101}], 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x3f, 0x101, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@private=0xa010102, 0xf61}, {@remote, 0x7}]}, @timestamp={0x44, 0x8, 0xee, 0x0, 0xe, [0x8]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00'}) connect$rxrpc(r3, &(0x7f0000000800)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x4ef8, @remote, 0x7}}, 0x24) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x10, 0x7, 0xe1b9, 0x1, {{0xc, 0x4, 0x2, 0xb, 0x30, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @remote, {[@lsrr={0x83, 0xf, 0xdd, [@local, @loopback, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0xcd, [@broadcast, @loopback]}]}}}}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000009c0)={'netdevsim0\x00'}) 834.206122ms ago: executing program 4 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000340)="c9", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private, 0x0, 0x1}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='|', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x44}}], 0x20, 0x8804}, 0x0) 782.854726ms ago: executing program 1 (id=397): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2a0002, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r1, @ANYRES32=r5], 0x44}}, 0x0) 775.020577ms ago: executing program 4 (id=398): prctl$PR_SET_FPEMU(0xa, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}) msgget(0x1, 0x22) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5d4, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x7}, @in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x3}], 0x54) lseek(r1, 0x401, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001000)=""/4085, 0xffffffffffffff24) 714.572961ms ago: executing program 1 (id=399): syz_open_procfs(0x0, &(0x7f0000001380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x4, 0x20000000, 0x4) unshare(0x68060200) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000ffe000000000000a00000000000000000000000c00090008000000", @ANYRES32=r3, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) 713.634721ms ago: executing program 0 (id=407): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2a0002, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r1, @ANYRES32=r5], 0x44}}, 0x0) 608.57216ms ago: executing program 0 (id=400): faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1101, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1c846, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@discard}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@grpjquota}, {@i_version}, {@inlinecrypt}, {@dioread_lock}, {@nojournal_checksum}]}, 0x5, 0x51c, &(0x7f0000000780)="$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") fspick(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000cc0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000040)=0x41) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080), 0x8) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1, 0x0, 0x0, 0x20, 0x101}}) 169.609916ms ago: executing program 0 (id=401): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x30, 0x48, 0x403, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x30}, 0x1, 0x6558}, 0x0) 152.322048ms ago: executing program 0 (id=402): mlockall(0x7) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x200000000000000, 0x0, 0x0, 0x2) 94.319913ms ago: executing program 4 (id=403): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) set_robust_list(&(0x7f0000000340)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x2, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) 53.814736ms ago: executing program 3 (id=361): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4103082c1116480401020200c52cf7c25975e005b02f8847eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 19.966349ms ago: executing program 0 (id=404): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x140, 0x11, 0x148, 0x140, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'sane-20000\x00'}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x9, 0x2, 0x3], 0x0, 0x2}, {0xffffffffffffffff, [0x11, 0x3, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) creat(0x0, 0x25) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a32000000000c00078005001400820000000500050002000000050001000600000011000300686173683a69702c706f727400"], 0x58}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x100000000, 0x800, 0x3, 0x8000000000000000, 0xfff, 0x3, 0x5}, &(0x7f0000000040)={0xfffffffffffffff6, 0x7, 0x2, 0x83, 0x409, 0x5, 0x1, 0x9}, &(0x7f0000000080)={0xe31, 0x5, 0x8e66, 0x5, 0x5, 0x8000000000000, 0x7fffffffffffffff, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x9]}, 0x8}) getsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000200)=0x10) syslog(0x2, &(0x7f0000001100)=""/4086, 0xff6) 0s ago: executing program 1 (id=405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a00ff00000000bfa100000000000007010000e8ffffffb702000008000000b7030000fdffffff85000000b20000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = socket$inet6(0xa, 0x200000000003, 0x87) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000a00)=[@in={0x2, 0x4e20, @private=0xa010101}], 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x3f, 0x101, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@private=0xa010102, 0xf61}, {@remote, 0x7}]}, @timestamp={0x44, 0x8, 0xee, 0x0, 0xe, [0x8]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00'}) connect$rxrpc(r3, &(0x7f0000000800)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x4ef8, @remote, 0x7}}, 0x24) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x10, 0x7, 0xe1b9, 0x1, {{0xc, 0x4, 0x2, 0xb, 0x30, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @remote, {[@lsrr={0x83, 0xf, 0xdd, [@local, @loopback, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0xcd, [@broadcast, @loopback]}]}}}}}) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): oop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.306950][ T3459] pimreg: entered allmulticast mode [ 29.319442][ T3459] pimreg: left allmulticast mode [ 29.335612][ T3461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 29.359804][ T3464] loop0: detected capacity change from 0 to 1024 [ 29.370828][ T3464] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.515059][ T3469] loop3: detected capacity change from 0 to 8192 [ 29.543850][ T3469] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.564655][ T3469] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 29.573474][ T3469] FAT-fs (loop3): Filesystem has been set read-only [ 29.594127][ T3480] loop4: detected capacity change from 0 to 512 [ 29.600992][ T3480] EXT4-fs (loop4): fragment/cluster size (524288) != block size (2048) [ 29.646105][ T3490] loop1: detected capacity change from 0 to 1024 [ 29.657950][ T3490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.738505][ T3495] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 29.818445][ T3498] wg2: entered promiscuous mode [ 29.823486][ T3498] wg2: entered allmulticast mode [ 29.986487][ T3452] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 30.038142][ T3494] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 30.074156][ T3504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 30.134821][ T3509] RDS: rds_bind could not find a transport for ::8000:0:100:0, load rds_tcp or rds_rdma? [ 30.186547][ T3516] loop3: detected capacity change from 0 to 128 [ 30.193420][ T3516] EXT4-fs: Ignoring removed nobh option [ 30.201653][ T3516] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.214924][ T3516] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.267024][ T3516] syz.3.36 (3516) used greatest stack depth: 10560 bytes left [ 30.292228][ T3258] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.319342][ T3522] loop3: detected capacity change from 0 to 256 [ 30.320839][ T3490] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 30.338179][ T3490] EXT4-fs (loop1): This should not happen!! Data will be lost [ 30.338179][ T3490] [ 30.348044][ T3490] EXT4-fs (loop1): Total free blocks count 0 [ 30.354038][ T3490] EXT4-fs (loop1): Free/Dirty block details [ 30.360101][ T3490] EXT4-fs (loop1): free_blocks=68451041280 [ 30.366164][ T3490] EXT4-fs (loop1): dirty_blocks=16 [ 30.371417][ T3490] EXT4-fs (loop1): Block reservation details [ 30.377698][ T3490] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 30.384106][ T3527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.41'. [ 30.403871][ T3527] netlink: 'syz.4.41': attribute type 3 has an invalid length. [ 30.429431][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.430556][ T3533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 30.470146][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 30.479280][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 30.640678][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 30.681726][ T3579] x_tables: duplicate underflow at hook 3 [ 30.739767][ T3581] loop0: detected capacity change from 0 to 128 [ 30.746558][ T3581] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.758754][ T3581] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.771508][ T3581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 30.780636][ T3581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 30.791857][ T3581] bond0: entered promiscuous mode [ 30.796973][ T3581] bond_slave_0: entered promiscuous mode [ 30.802896][ T3581] bond_slave_1: entered promiscuous mode [ 30.810103][ T3581] batadv_slave_1: entered promiscuous mode [ 30.845555][ T3585] loop0: detected capacity change from 0 to 128 [ 30.853887][ T3585] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.866387][ T3585] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.932946][ T3268] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.977780][ T3592] loop0: detected capacity change from 0 to 1024 [ 30.984461][ T3592] EXT4-fs: Ignoring removed orlov option [ 30.990148][ T3592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.004453][ T3592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.046893][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.090592][ T3600] loop0: detected capacity change from 0 to 1024 [ 31.164161][ T3615] sctp: [Deprecated]: syz.0.73 (pid 3615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 31.164161][ T3615] Use struct sctp_sack_info instead [ 31.194198][ T3617] loop0: detected capacity change from 0 to 512 [ 31.200809][ T3617] EXT4-fs: Ignoring removed oldalloc option [ 31.207148][ T3617] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.220255][ T3617] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.233600][ T3617] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 31.246877][ T3617] EXT4-fs (loop0): 1 truncate cleaned up [ 31.252902][ T3617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.281728][ T3622] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 31.293390][ T3617] wireguard0: entered promiscuous mode [ 31.299065][ T3617] wireguard0: entered allmulticast mode [ 31.314514][ T3625] loop4: detected capacity change from 0 to 128 [ 31.321158][ T3625] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.333183][ T3625] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.367389][ T3628] loop3: detected capacity change from 0 to 256 [ 31.376586][ T3628] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.420679][ T3634] loop1: detected capacity change from 0 to 1024 [ 31.435490][ T3636] netlink: 'syz.4.81': attribute type 9 has an invalid length. [ 31.460938][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.496090][ T3644] loop1: detected capacity change from 0 to 128 [ 31.502615][ T3644] msdos: Unknown parameter './file0' [ 31.888950][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.053374][ T3672] loop0: detected capacity change from 0 to 256 [ 32.062905][ T3672] netlink: 'syz.0.91': attribute type 2 has an invalid length. [ 32.070567][ T3672] netlink: 'syz.0.91': attribute type 2 has an invalid length. [ 32.078118][ T3672] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 32.086028][ T3657] chnl_net:caif_netlink_parms(): no params data found [ 32.125643][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.132835][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.140180][ T3657] bridge_slave_0: entered allmulticast mode [ 32.146814][ T3657] bridge_slave_0: entered promiscuous mode [ 32.155134][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.156823][ T3681] x_tables: duplicate underflow at hook 3 [ 32.162255][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.175507][ T3657] bridge_slave_1: entered allmulticast mode [ 32.182066][ T3657] bridge_slave_1: entered promiscuous mode [ 32.217116][ T3657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.230316][ T3657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.253681][ T3657] team0: Port device team_slave_0 added [ 32.260777][ T3657] team0: Port device team_slave_1 added [ 32.277150][ T3657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.284212][ T3657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.310191][ T3657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.321912][ T3657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.329032][ T3657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.355087][ T3657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.412893][ T3657] hsr_slave_0: entered promiscuous mode [ 32.423696][ T3692] loop0: detected capacity change from 0 to 2048 [ 32.433160][ T3657] hsr_slave_1: entered promiscuous mode [ 32.439227][ T3657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.447366][ T3657] Cannot create hsr debugfs directory [ 32.462917][ T3692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.479605][ T3692] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.523622][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.612073][ T3699] loop4: detected capacity change from 0 to 1024 [ 32.642485][ T3701] loop0: detected capacity change from 0 to 2048 [ 32.662199][ T3701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.676785][ T3703] loop4: detected capacity change from 0 to 512 [ 32.684956][ T3703] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.100: inline data xattr refers to an external xattr inode [ 32.717956][ T3703] EXT4-fs (loop4): Remounting filesystem read-only [ 32.730832][ T3703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.755828][ T3703] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 32.762649][ T3703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.769740][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 32.769752][ T29] audit: type=1400 audit(1724699289.260:275): avc: denied { write } for pid=3700 comm="syz.0.99" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 32.816631][ T3707] program syz.0.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.842601][ C1] hrtimer: interrupt took 29276 ns [ 32.942767][ T29] audit: type=1400 audit(1724699289.449:276): avc: denied { name_connect } for pid=3702 comm="syz.4.100" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 32.966446][ T3703] netlink: 'syz.4.100': attribute type 3 has an invalid length. [ 33.016965][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.091993][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.141886][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.151725][ T3701] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.99: bg 0: block 234: padding at end of block bitmap is not set [ 33.175835][ T3701] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 33.188517][ T3701] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.188517][ T3701] [ 33.245409][ T3701] syz.0.99 (3701) used greatest stack depth: 9848 bytes left [ 33.284738][ T1977] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 33.297802][ T1977] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.297802][ T1977] [ 33.307615][ T1977] EXT4-fs (loop0): Total free blocks count 0 [ 33.313650][ T1977] EXT4-fs (loop0): Free/Dirty block details [ 33.319587][ T1977] EXT4-fs (loop0): free_blocks=0 [ 33.324579][ T1977] EXT4-fs (loop0): dirty_blocks=6144 [ 33.329914][ T1977] EXT4-fs (loop0): Block reservation details [ 33.341454][ T3711] chnl_net:caif_netlink_parms(): no params data found [ 33.353467][ T40] bridge_slave_1: left allmulticast mode [ 33.360805][ T40] bridge_slave_1: left promiscuous mode [ 33.367003][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.377050][ T29] audit: type=1400 audit(1724699289.911:277): avc: denied { ioctl } for pid=3722 comm="syz.1.104" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.403696][ T40] bridge_slave_0: left allmulticast mode [ 33.409687][ T40] bridge_slave_0: left promiscuous mode [ 33.415994][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.416226][ T3725] loop0: detected capacity change from 0 to 256 [ 33.430664][ T3725] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.448976][ T29] audit: type=1400 audit(1724699289.985:278): avc: denied { accept } for pid=3726 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 33.541646][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.552904][ T29] audit: type=1326 audit(1724699290.090:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef4ab9e79 code=0x7ffc0000 [ 33.576227][ T29] audit: type=1326 audit(1724699290.090:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef4ab9e79 code=0x7ffc0000 [ 33.600899][ T29] audit: type=1326 audit(1724699290.090:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efef4ab9e79 code=0x7ffc0000 [ 33.605995][ T3739] loop1: detected capacity change from 0 to 1024 [ 33.624175][ T29] audit: type=1326 audit(1724699290.090:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef4ab9e79 code=0x7ffc0000 [ 33.653978][ T29] audit: type=1326 audit(1724699290.090:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef4ab9e79 code=0x7ffc0000 [ 33.677425][ T29] audit: type=1326 audit(1724699290.100:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7efef4ab9e79 code=0x7ffc0000 [ 33.702767][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.721000][ T40] bond0 (unregistering): Released all slaves [ 33.731258][ T3741] block device autoloading is deprecated and will be removed. [ 33.756012][ T3741] __nla_validate_parse: 6 callbacks suppressed [ 33.756086][ T3741] netlink: 64 bytes leftover after parsing attributes in process `syz.4.111'. [ 33.791053][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.798266][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.807814][ T3711] bridge_slave_0: entered allmulticast mode [ 33.815395][ T3711] bridge_slave_0: entered promiscuous mode [ 33.836573][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.843883][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.851319][ T3711] bridge_slave_1: entered allmulticast mode [ 33.857721][ T3711] bridge_slave_1: entered promiscuous mode [ 33.879778][ T3711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.892157][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 33.904266][ T40] hsr_slave_0: left promiscuous mode [ 33.910099][ T40] hsr_slave_1: left promiscuous mode [ 33.915782][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.923523][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.931097][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.938747][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.948023][ T40] veth1_macvtap: left promiscuous mode [ 33.953523][ T40] veth0_macvtap: left promiscuous mode [ 33.959159][ T40] veth1_vlan: left promiscuous mode [ 33.965176][ T40] veth0_vlan: left promiscuous mode [ 34.038897][ T40] team0 (unregistering): Port device team_slave_1 removed [ 34.049056][ T40] team0 (unregistering): Port device team_slave_0 removed [ 34.086025][ T3749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.093330][ T3749] IPv6: NLM_F_CREATE should be set when creating new route [ 34.102378][ T3711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.136341][ T3711] team0: Port device team_slave_0 added [ 34.146113][ T3711] team0: Port device team_slave_1 added [ 34.153367][ T3758] loop4: detected capacity change from 0 to 4096 [ 34.177247][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.184308][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.210936][ T3711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.248732][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.255922][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.282946][ T3711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.294930][ T3657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.306719][ T3657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.311170][ T3767] loop4: detected capacity change from 0 to 1024 [ 34.339998][ T3657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.358702][ T3711] hsr_slave_0: entered promiscuous mode [ 34.371829][ T3711] hsr_slave_1: entered promiscuous mode [ 34.378921][ T3711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.387532][ T3711] Cannot create hsr debugfs directory [ 34.396167][ T3657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.424855][ T3781] loop4: detected capacity change from 0 to 512 [ 34.437413][ T3781] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.123: inline data xattr refers to an external xattr inode [ 34.453543][ T3781] EXT4-fs (loop4): Remounting filesystem read-only [ 34.460921][ T3781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.473098][ T3781] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 34.480071][ T3781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.609856][ T3711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.613889][ T3802] loop4: detected capacity change from 0 to 256 [ 34.628970][ T3802] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.631132][ T3657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.661370][ T3657] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.679799][ T3711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.692690][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.699792][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.718071][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.725206][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.730616][ T3809] loop1: detected capacity change from 0 to 1024 [ 34.755967][ T3814] FAULT_INJECTION: forcing a failure. [ 34.755967][ T3814] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.762093][ T3657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.769142][ T3814] CPU: 1 UID: 0 PID: 3814 Comm: syz.1.132 Not tainted 6.11.0-rc5-syzkaller #0 [ 34.769234][ T3814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 34.779494][ T3657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.788287][ T3814] Call Trace: [ 34.788300][ T3814] [ 34.788306][ T3814] dump_stack_lvl+0xf2/0x150 [ 34.819615][ T3814] dump_stack+0x15/0x20 [ 34.823823][ T3814] should_fail_ex+0x229/0x230 [ 34.828511][ T3814] should_fail+0xb/0x10 [ 34.832689][ T3814] should_fail_usercopy+0x1a/0x20 [ 34.837703][ T3814] strncpy_from_user+0x25/0x270 [ 34.842584][ T3814] strncpy_from_bpfptr+0x38/0x60 [ 34.847588][ T3814] bpf_prog_load+0x868/0x1060 [ 34.852294][ T3814] __sys_bpf+0x463/0x7a0 [ 34.856522][ T3814] __x64_sys_bpf+0x43/0x50 [ 34.860968][ T3814] x64_sys_call+0x2625/0x2d60 [ 34.865691][ T3814] do_syscall_64+0xc9/0x1c0 [ 34.870197][ T3814] ? clear_bhb_loop+0x55/0xb0 [ 34.874910][ T3814] ? clear_bhb_loop+0x55/0xb0 [ 34.879575][ T3814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.885488][ T3814] RIP: 0033:0x7ffb1a8e9e79 [ 34.889885][ T3814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.909612][ T3814] RSP: 002b:00007ffb19561038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 34.918023][ T3814] RAX: ffffffffffffffda RBX: 00007ffb1aa85f80 RCX: 00007ffb1a8e9e79 [ 34.926046][ T3814] RDX: 0000000000000090 RSI: 0000000020000800 RDI: 0000000000000005 [ 34.934022][ T3814] RBP: 00007ffb19561090 R08: 0000000000000000 R09: 0000000000000000 [ 34.942040][ T3814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.950017][ T3814] R13: 0000000000000001 R14: 00007ffb1aa85f80 R15: 00007ffe52cadef8 [ 34.957973][ T3814] [ 34.970683][ T3711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.000265][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.016373][ T3711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.042006][ T3657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.063929][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.121859][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.133551][ T3837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 35.157139][ T3657] veth0_vlan: entered promiscuous mode [ 35.166930][ T3711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.182709][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.198039][ T3711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.213760][ T3711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.227852][ T3657] veth1_vlan: entered promiscuous mode [ 35.238374][ T3711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.254020][ T3810] chnl_net:caif_netlink_parms(): no params data found [ 35.304019][ T3657] veth0_macvtap: entered promiscuous mode [ 35.332562][ T3657] veth1_macvtap: entered promiscuous mode [ 35.350778][ T40] bridge_slave_1: left allmulticast mode [ 35.357081][ T40] bridge_slave_1: left promiscuous mode [ 35.359399][ T3850] loop1: detected capacity change from 0 to 1024 [ 35.363051][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.377948][ T40] bridge_slave_0: left allmulticast mode [ 35.383940][ T40] bridge_slave_0: left promiscuous mode [ 35.389706][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.399722][ T40] bridge_slave_1: left allmulticast mode [ 35.405611][ T40] bridge_slave_1: left promiscuous mode [ 35.411484][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.419987][ T40] bridge_slave_0: left allmulticast mode [ 35.425920][ T40] bridge_slave_0: left promiscuous mode [ 35.432219][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.670998][ T40] bond0 (unregistering): left promiscuous mode [ 35.677216][ T40] bond_slave_0: left promiscuous mode [ 35.682751][ T40] bond_slave_1: left promiscuous mode [ 35.689097][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.699455][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.709829][ T40] bond0 (unregistering): Released all slaves [ 35.719310][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.730422][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.740244][ T40] bond0 (unregistering): Released all slaves [ 35.756232][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.763379][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.770882][ T3810] bridge_slave_0: entered allmulticast mode [ 35.777815][ T3810] bridge_slave_0: entered promiscuous mode [ 35.805988][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.816514][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.826497][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.837008][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.846812][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.857415][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.867363][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.878293][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.890873][ T3657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.897773][ T3858] loop1: detected capacity change from 0 to 1024 [ 35.905565][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.912838][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.915486][ T3858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.932829][ T3810] bridge_slave_1: entered allmulticast mode [ 35.939751][ T3810] bridge_slave_1: entered promiscuous mode [ 35.947123][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.964109][ T3711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.978874][ T3810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.989100][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.999733][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.009618][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.020247][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.030389][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.040999][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.050937][ T3657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.061500][ T3657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.072920][ T3657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.084454][ T3810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.097459][ T3657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.106378][ T3657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.115121][ T3657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.124084][ T3657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.152008][ T3868] loop1: detected capacity change from 0 to 512 [ 36.161167][ T3810] team0: Port device team_slave_0 added [ 36.167966][ T3810] team0: Port device team_slave_1 added [ 36.179482][ T3711] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.187056][ T40] batadv_slave_1: left promiscuous mode [ 36.194627][ T3868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.207888][ T40] hsr_slave_0: left promiscuous mode [ 36.208485][ T3868] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.223986][ T40] hsr_slave_1: left promiscuous mode [ 36.229736][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.230510][ T3868] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.148: bg 0: block 18: invalid block bitmap [ 36.237741][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.258465][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.265915][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.274796][ T40] hsr_slave_0: left promiscuous mode [ 36.280722][ T40] hsr_slave_1: left promiscuous mode [ 36.286545][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.294109][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.302229][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.309777][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.320268][ T40] veth1_macvtap: left promiscuous mode [ 36.325848][ T40] veth0_macvtap: left promiscuous mode [ 36.331730][ T40] veth1_vlan: left promiscuous mode [ 36.337439][ T40] veth0_vlan: left promiscuous mode [ 36.343403][ T40] veth1_macvtap: left promiscuous mode [ 36.349029][ T40] veth0_macvtap: left promiscuous mode [ 36.354892][ T40] veth1_vlan: left promiscuous mode [ 36.360296][ T40] veth0_vlan: left promiscuous mode [ 36.472734][ T40] team0 (unregistering): Port device team_slave_1 removed [ 36.483199][ T40] team0 (unregistering): Port device team_slave_0 removed [ 36.543929][ T40] team0 (unregistering): Port device team_slave_1 removed [ 36.555294][ T40] team0 (unregistering): Port device team_slave_0 removed [ 36.618838][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.626271][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.635409][ T3810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.642547][ T3810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.668537][ T3810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.679762][ T3810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.686880][ T3810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.713044][ T3810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.726443][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.734365][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.742669][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.771959][ T3711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.782752][ T3711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.816208][ T3885] loop1: detected capacity change from 0 to 256 [ 36.824137][ T3885] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.856752][ T3810] hsr_slave_0: entered promiscuous mode [ 36.863517][ T3810] hsr_slave_1: entered promiscuous mode [ 36.869502][ T3810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.877325][ T3810] Cannot create hsr debugfs directory [ 36.905638][ T3894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 36.950483][ T3711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.037737][ T3869] chnl_net:caif_netlink_parms(): no params data found [ 37.037774][ T3905] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 37.090560][ T3916] SET target dimension over the limit! [ 37.105308][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.112545][ T3869] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.119789][ T3869] bridge_slave_0: entered allmulticast mode [ 37.126348][ T3869] bridge_slave_0: entered promiscuous mode [ 37.133174][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.140396][ T3869] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.147982][ T3869] bridge_slave_1: entered allmulticast mode [ 37.154379][ T3869] bridge_slave_1: entered promiscuous mode [ 37.175741][ T3711] veth0_vlan: entered promiscuous mode [ 37.185404][ T3869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.197111][ T3869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.219205][ T3711] veth1_vlan: entered promiscuous mode [ 37.226733][ T3922] ebtables: ebtables: counters copy to user failed while replacing table [ 37.237822][ T3869] team0: Port device team_slave_0 added [ 37.248725][ T3869] team0: Port device team_slave_1 added [ 37.278272][ T3711] veth0_macvtap: entered promiscuous mode [ 37.284712][ T3926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 37.297368][ T3869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.304404][ T3869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.330421][ T3869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.348176][ T3711] veth1_macvtap: entered promiscuous mode [ 37.357079][ T3869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.364043][ T3869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.388716][ T3929] loop2: detected capacity change from 0 to 1024 [ 37.390239][ T3869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.398800][ T3929] EXT4-fs: Ignoring removed orlov option [ 37.416352][ T3929] EXT4-fs: Ignoring removed bh option [ 37.430753][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.441338][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.451156][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.461873][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.471704][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.482253][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.493078][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.495552][ T3929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.517012][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.530629][ T3869] hsr_slave_0: entered promiscuous mode [ 37.537221][ T3869] hsr_slave_1: entered promiscuous mode [ 37.543529][ T3869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.551987][ T3869] Cannot create hsr debugfs directory [ 37.571250][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.583615][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.594830][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.604806][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.615352][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.625545][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.636056][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.649612][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.686425][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 37.686439][ T29] audit: type=1400 audit(1724699294.436:337): avc: denied { read } for pid=3928 comm="syz.2.159" path="socket:[6302]" dev="sockfs" ino=6302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.717672][ T29] audit: type=1400 audit(1724699294.447:338): avc: denied { create } for pid=3928 comm="syz.2.159" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.741473][ T3810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.752982][ T3810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.763735][ T3711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.772785][ T3711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.781675][ T3711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.782476][ T29] audit: type=1400 audit(1724699294.531:339): avc: denied { remove_name } for pid=3657 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.791086][ T3711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.814190][ T29] audit: type=1400 audit(1724699294.531:340): avc: denied { rmdir } for pid=3657 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.846741][ T29] audit: type=1400 audit(1724699294.604:341): avc: denied { unlink } for pid=3657 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.870152][ T29] audit: type=1400 audit(1724699294.604:342): avc: denied { unlink } for pid=3657 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 37.871176][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.894456][ T3657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.920328][ T3810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.929307][ T3810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.957221][ T29] audit: type=1400 audit(1724699294.720:343): avc: denied { mount } for pid=3711 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.981560][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.018190][ T3942] netlink: 'syz.3.102': attribute type 21 has an invalid length. [ 38.025977][ T3942] netlink: 'syz.3.102': attribute type 15 has an invalid length. [ 38.033853][ T3942] netlink: 156 bytes leftover after parsing attributes in process `syz.3.102'. [ 38.042839][ T3942] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.051693][ T3942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.058926][ T3942] IPv6: NLM_F_CREATE should be set when creating new route [ 38.066327][ T3942] IPv6: NLM_F_CREATE should be set when creating new route [ 38.073539][ T3942] IPv6: NLM_F_CREATE should be set when creating new route [ 38.126290][ T3810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.172213][ T3810] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.178939][ T29] audit: type=1400 audit(1724699294.940:344): avc: denied { create } for pid=3949 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.207946][ T40] bridge_slave_1: left allmulticast mode [ 38.213735][ T40] bridge_slave_1: left promiscuous mode [ 38.219380][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.245658][ T40] bridge_slave_0: left allmulticast mode [ 38.251380][ T40] bridge_slave_0: left promiscuous mode [ 38.257089][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.261649][ T3954] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 38.280702][ T3954] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 38.297656][ T29] audit: type=1400 audit(1724699295.077:345): avc: denied { create } for pid=3949 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 38.373799][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.384519][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.385797][ T29] audit: type=1326 audit(1724699295.171:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf7a29e79 code=0x7ffc0000 [ 38.423389][ T40] bond0 (unregistering): Released all slaves [ 38.431072][ T3948] loop2: detected capacity change from 0 to 32768 [ 38.447380][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.454545][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.463256][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.470423][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.481139][ T3948] loop2: p1 p2 p3 < p5 p6 p7 > [ 38.507245][ T3810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.517874][ T3810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.558094][ T40] hsr_slave_0: left promiscuous mode [ 38.568143][ T40] hsr_slave_1: left promiscuous mode [ 38.577722][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.585484][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.594061][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.601730][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.613331][ T40] veth1_macvtap: left promiscuous mode [ 38.618892][ T40] veth0_macvtap: left promiscuous mode [ 38.624471][ T40] veth1_vlan: left promiscuous mode [ 38.629713][ T40] veth0_vlan: left promiscuous mode [ 38.702572][ T40] team0 (unregistering): Port device team_slave_1 removed [ 38.713736][ T40] team0 (unregistering): Port device team_slave_0 removed [ 38.783802][ T3810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.796873][ T3973] loop2: detected capacity change from 0 to 764 [ 38.805208][ T3973] rock: directory entry would overflow storage [ 38.811635][ T3973] rock: sig=0x4654, size=5, remaining=4 [ 38.852357][ T3955] chnl_net:caif_netlink_parms(): no params data found [ 38.882278][ T3869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.893378][ T3869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.902617][ T3869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.918214][ T3869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.935133][ T3955] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.942422][ T3955] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.950062][ T3955] bridge_slave_0: entered allmulticast mode [ 38.956255][ T3987] syz.2.171 uses obsolete (PF_INET,SOCK_PACKET) [ 38.957480][ T3955] bridge_slave_0: entered promiscuous mode [ 38.976510][ T3955] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.983712][ T3955] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.006763][ T3955] bridge_slave_1: entered allmulticast mode [ 39.014106][ T3955] bridge_slave_1: entered promiscuous mode [ 39.070517][ T3869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.083714][ T3869] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.092622][ T3810] veth0_vlan: entered promiscuous mode [ 39.104939][ T3992] loop2: detected capacity change from 0 to 512 [ 39.116362][ T3955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.127955][ T3955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.138245][ T3992] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 39.152442][ T3992] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.160030][ T3992] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.177155][ T3992] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 39.192878][ T3992] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.171: bg 0: block 40: padding at end of block bitmap is not set [ 39.210715][ T3992] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 39.221237][ T3992] EXT4-fs (loop2): 1 truncate cleaned up [ 39.229189][ T3992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.250378][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.257654][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.271657][ T3810] veth1_vlan: entered promiscuous mode [ 39.277993][ T3995] wg2: entered promiscuous mode [ 39.282940][ T3995] wg2: entered allmulticast mode [ 39.291715][ T3955] team0: Port device team_slave_0 added [ 39.300022][ T3955] team0: Port device team_slave_1 added [ 39.321483][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.328728][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.369571][ T3869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.380198][ T3869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.414161][ T3955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.421369][ T3955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.447445][ T3955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.461006][ T3955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.468031][ T3955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.494433][ T3955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.512193][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.545516][ T3955] hsr_slave_0: entered promiscuous mode [ 39.551605][ T3955] hsr_slave_1: entered promiscuous mode [ 39.558023][ T3955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.565662][ T3955] Cannot create hsr debugfs directory [ 39.572556][ T3810] veth0_macvtap: entered promiscuous mode [ 39.582133][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.597589][ T3810] veth1_macvtap: entered promiscuous mode [ 39.618187][ T3869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.635895][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.662880][ T3810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.673735][ T3810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.683754][ T3810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.694718][ T3810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.704590][ T3810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.715422][ T3810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.728414][ T3810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.737283][ T3657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.753110][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.770024][ T4008] x_tables: duplicate underflow at hook 2 [ 39.795524][ T3810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.806777][ T3810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.816983][ T3810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.827858][ T3810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.837931][ T3810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.840638][ T4008] xt_cluster: node mask cannot exceed total number of nodes [ 39.848751][ T3810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.851393][ T3810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.901462][ T3810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910375][ T3810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.919455][ T3810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.928174][ T3810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.991524][ T40] bridge_slave_1: left allmulticast mode [ 39.997333][ T40] bridge_slave_1: left promiscuous mode [ 40.003063][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.011687][ T40] bridge_slave_0: left allmulticast mode [ 40.017472][ T40] bridge_slave_0: left promiscuous mode [ 40.023618][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.128757][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.139607][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.149732][ T40] bond0 (unregistering): Released all slaves [ 40.204726][ T3869] veth0_vlan: entered promiscuous mode [ 40.215398][ T3869] veth1_vlan: entered promiscuous mode [ 40.234622][ T3869] veth0_macvtap: entered promiscuous mode [ 40.243253][ T40] hsr_slave_0: left promiscuous mode [ 40.249200][ T40] hsr_slave_1: left promiscuous mode [ 40.255403][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.262966][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.271776][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.279231][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.290619][ T40] veth1_macvtap: left promiscuous mode [ 40.296135][ T40] veth0_macvtap: left promiscuous mode [ 40.301817][ T40] veth1_vlan: left promiscuous mode [ 40.307090][ T40] veth0_vlan: left promiscuous mode [ 40.390483][ T40] team0 (unregistering): Port device team_slave_1 removed [ 40.400394][ T4055] loop3: detected capacity change from 0 to 128 [ 40.408344][ T40] team0 (unregistering): Port device team_slave_0 removed [ 40.450592][ T3869] veth1_macvtap: entered promiscuous mode [ 40.459435][ T4054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.478720][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.489311][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.499214][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.509828][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.519864][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.530746][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.541924][ T3869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.550999][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.553870][ T4060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.185'. [ 40.561527][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.580432][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.590879][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.600909][ T3869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.611421][ T3869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.622452][ T3869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.636212][ T4062] netlink: 44 bytes leftover after parsing attributes in process `syz.3.186'. [ 40.642262][ T3869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.654105][ T3869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.662854][ T3869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.671672][ T3869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.679534][ T4070] loop3: detected capacity change from 0 to 128 [ 40.693572][ T3955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.709726][ T3955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.721673][ T3955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.739464][ T3955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.784678][ T4078] loop4: detected capacity change from 0 to 1024 [ 40.788471][ T3955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.808315][ T3955] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.818486][ T1977] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.825603][ T1977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.840996][ T1977] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.848083][ T1977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.875779][ T3955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.947306][ T4093] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 40.948750][ T3955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.994977][ T4091] raw_sendmsg: syz.3.193 forgot to set AF_INET. Fix it! [ 41.026953][ T3955] veth0_vlan: entered promiscuous mode [ 41.040004][ T3955] veth1_vlan: entered promiscuous mode [ 41.065898][ T3955] veth0_macvtap: entered promiscuous mode [ 41.070361][ T4109] loop3: detected capacity change from 0 to 512 [ 41.077606][ T3955] veth1_macvtap: entered promiscuous mode [ 41.084500][ T4109] EXT4-fs: Ignoring removed oldalloc option [ 41.092671][ T4109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.097708][ T3955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.113274][ T3955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.123211][ T3955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.133786][ T3955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.136895][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 41.143697][ T3955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.156191][ T4111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 41.162902][ T3955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.181776][ T3955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.182444][ T4109] EXT4-fs (loop3): 1 truncate cleaned up [ 41.192666][ T3955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.194686][ T3955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.204392][ T4109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.210524][ T3955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.240266][ T3955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.250248][ T3955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.260901][ T3955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.270981][ T3955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.281826][ T3955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.291803][ T3955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.302962][ T3955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.316762][ T3955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.337503][ T3955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.346549][ T3955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.355281][ T3955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.364114][ T3955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.381850][ T4109] wireguard0: entered promiscuous mode [ 41.387819][ T4109] wireguard0: entered allmulticast mode [ 41.423960][ T4122] loop1: detected capacity change from 0 to 128 [ 41.430605][ T4122] EXT4-fs: Ignoring removed nobh option [ 41.438444][ T4122] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.451383][ T4122] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.493516][ T3955] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.538118][ T4125] loop1: detected capacity change from 0 to 1024 [ 41.545901][ T4125] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.557102][ T4125] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 41.569262][ T4125] EXT4-fs (loop1): invalid journal inode [ 41.575471][ T4125] EXT4-fs (loop1): can't get journal size [ 41.582740][ T3711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.588281][ T4125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.613467][ T4128] netlink: 'syz.3.200': attribute type 9 has an invalid length. [ 41.659652][ T4130] loop3: detected capacity change from 0 to 8192 [ 41.756794][ T4136] netlink: 260 bytes leftover after parsing attributes in process `syz.3.204'. [ 41.786245][ T4138] loop4: detected capacity change from 0 to 512 [ 41.817984][ T4138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.830593][ T4138] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.848696][ T4142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4142 comm=syz.2.206 [ 41.894399][ T3869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.206967][ T4162] mmap: syz.2.212 (4162): VmData 45846528 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 42.243871][ T4170] vlan2: entered promiscuous mode [ 42.351236][ T4176] netlink: 'syz.2.215': attribute type 16 has an invalid length. [ 42.376810][ T4176] ebtables: ebtables: counters copy to user failed while replacing table [ 42.386351][ T4176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.215'. [ 42.436270][ T4182] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 42.540773][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 42.540786][ T29] audit: type=1326 audit(1724700067.533:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367d779e79 code=0x7ffc0000 [ 42.572996][ T29] audit: type=1326 audit(1724700067.533:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367d779e79 code=0x7ffc0000 [ 42.596664][ T29] audit: type=1326 audit(1724700067.533:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f367d779e79 code=0x7ffc0000 [ 42.619888][ T29] audit: type=1326 audit(1724700067.533:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367d779e79 code=0x7ffc0000 [ 42.643458][ T29] audit: type=1326 audit(1724700067.533:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367d779e79 code=0x7ffc0000 [ 42.666817][ T29] audit: type=1326 audit(1724700067.533:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f367d779e79 code=0x7ffc0000 [ 42.669142][ T4205] loop2: detected capacity change from 0 to 1024 [ 42.692242][ T29] audit: type=1326 audit(1724700067.533:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367d779e79 code=0x7ffc0000 [ 42.721820][ T29] audit: type=1326 audit(1724700067.565:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367d779e79 code=0x7ffc0000 [ 42.722089][ T4205] EXT4-fs: Ignoring removed orlov option [ 42.750991][ T4205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.767417][ T4205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.784356][ T29] audit: type=1400 audit(1724700067.785:492): avc: denied { setattr } for pid=4202 comm="syz.2.226" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.791889][ T4212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 42.817698][ T4203] process 'syz.2.226' launched './file0/file0' with NULL argv: empty string added [ 42.821186][ T29] audit: type=1400 audit(1724700067.827:493): avc: denied { execute } for pid=4202 comm="syz.2.226" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.923846][ T4217] x_tables: duplicate underflow at hook 3 [ 42.947558][ T3657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.003329][ T4223] netlink: 'syz.2.233': attribute type 10 has an invalid length. [ 43.015828][ T4223] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 43.025046][ T4223] team0: Failed to send options change via netlink (err -105) [ 43.033055][ T4223] team0: Port device netdevsim1 added [ 43.085143][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 43.094717][ T4226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 43.157493][ T4232] loop2: detected capacity change from 0 to 512 [ 43.165200][ T4232] EXT4-fs error (device loop2): __ext4_iget:4985: inode #12: block 17104912: comm syz.2.236: invalid block [ 43.176908][ T4232] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.236: couldn't read orphan inode 12 (err -117) [ 43.189401][ T4232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.208419][ T3657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.226815][ T4235] loop2: detected capacity change from 0 to 1024 [ 43.311639][ T4245] loop3: detected capacity change from 0 to 2048 [ 43.328604][ T4245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.360199][ T4248] loop2: detected capacity change from 0 to 513 [ 43.368258][ T4248] EXT4-fs (loop2): 1 truncate cleaned up [ 43.374623][ T4248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.403299][ T4255] program syz.3.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.416084][ T3657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.507845][ T4245] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.242: bg 0: block 234: padding at end of block bitmap is not set [ 43.522963][ T4245] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 43.535725][ T4245] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.535725][ T4245] [ 43.564799][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 43.577976][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.577976][ T50] [ 43.587730][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 43.593806][ T50] EXT4-fs (loop3): Free/Dirty block details [ 43.600183][ T50] EXT4-fs (loop3): free_blocks=0 [ 43.605154][ T50] EXT4-fs (loop3): dirty_blocks=6144 [ 43.610551][ T50] EXT4-fs (loop3): Block reservation details [ 43.798970][ T4272] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 43.846960][ T4282] loop3: detected capacity change from 0 to 256 [ 43.855374][ T4282] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.945651][ T4281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.952996][ T4281] IPv6: NLM_F_CREATE should be set when creating new route [ 44.331814][ T4296] loop2: detected capacity change from 0 to 4096 [ 44.363827][ T4300] loop2: detected capacity change from 0 to 128 [ 44.370744][ T4300] FAT-fs (loop2): bogus number of reserved sectors [ 44.377342][ T4300] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 44.386754][ T4300] FAT-fs (loop2): Can't find a valid FAT filesystem [ 44.394403][ T3955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.405258][ T4300] tipc: Can't bind to reserved service type 0 [ 44.491520][ T4315] FAULT_INJECTION: forcing a failure. [ 44.491520][ T4315] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 44.505060][ T4315] CPU: 1 UID: 0 PID: 4315 Comm: syz.2.267 Not tainted 6.11.0-rc5-syzkaller #0 [ 44.513941][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 44.523996][ T4315] Call Trace: [ 44.527272][ T4315] [ 44.530182][ T4315] dump_stack_lvl+0xf2/0x150 [ 44.534760][ T4315] dump_stack+0x15/0x20 [ 44.538983][ T4315] should_fail_ex+0x229/0x230 [ 44.543658][ T4315] should_fail_alloc_page+0xfd/0x110 [ 44.548930][ T4315] __alloc_pages_noprof+0x109/0x360 [ 44.554189][ T4315] ___kmalloc_large_node+0x7a/0x120 [ 44.559373][ T4315] __kmalloc_large_noprof+0x1f/0xb0 [ 44.564709][ T4315] bpf_check+0x78/0xa290 [ 44.568939][ T4315] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 44.575095][ T4315] ? cgroup_rstat_updated+0x99/0x550 [ 44.580395][ T4315] ? pcpu_chunk_relocate+0x183/0x280 [ 44.585794][ T4315] ? __mod_memcg_state+0x10d/0x200 [ 44.590893][ T4315] ? __rcu_read_unlock+0x4e/0x70 [ 44.595815][ T4315] ? bpf_prog_alloc+0x59/0x150 [ 44.600607][ T4315] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 44.605804][ T4315] ? selinux_bpf_prog_load+0x35/0xe0 [ 44.611128][ T4315] ? __kmalloc_cache_noprof+0x20c/0x2a0 [ 44.616685][ T4315] ? selinux_bpf_prog_load+0xbb/0xe0 [ 44.622155][ T4315] bpf_prog_load+0xed4/0x1060 [ 44.627366][ T4315] __sys_bpf+0x463/0x7a0 [ 44.631611][ T4315] __x64_sys_bpf+0x43/0x50 [ 44.636144][ T4315] x64_sys_call+0x2625/0x2d60 [ 44.640814][ T4315] do_syscall_64+0xc9/0x1c0 [ 44.645409][ T4315] ? clear_bhb_loop+0x55/0xb0 [ 44.650128][ T4315] ? clear_bhb_loop+0x55/0xb0 [ 44.655025][ T4315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.660919][ T4315] RIP: 0033:0x7fbbf7a29e79 [ 44.665317][ T4315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.684950][ T4315] RSP: 002b:00007fbbf66a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.693349][ T4315] RAX: ffffffffffffffda RBX: 00007fbbf7bc5f80 RCX: 00007fbbf7a29e79 [ 44.701308][ T4315] RDX: 0000000000000090 RSI: 0000000020000800 RDI: 0000000000000005 [ 44.709399][ T4315] RBP: 00007fbbf66a1090 R08: 0000000000000000 R09: 0000000000000000 [ 44.717467][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.725512][ T4315] R13: 0000000000000001 R14: 00007fbbf7bc5f80 R15: 00007ffc90ad95e8 [ 44.733949][ T4315] [ 44.759728][ T4319] xt_hashlimit: invalid rate [ 44.771046][ T4321] loop2: detected capacity change from 0 to 1024 [ 44.877259][ T4330] loop3: detected capacity change from 0 to 512 [ 44.891220][ T4330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.915351][ T4330] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.936259][ T4335] loop0: detected capacity change from 0 to 2048 [ 44.955482][ T4325] loop2: detected capacity change from 0 to 1024 [ 44.964878][ T4325] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.976412][ T4325] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 44.989131][ T4325] EXT4-fs (loop2): invalid journal inode [ 44.989608][ T4330] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #20: comm syz.3.275: corrupted inode contents [ 44.995093][ T4325] EXT4-fs (loop2): can't get journal size [ 45.007881][ T4330] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #20: comm syz.3.275: mark_inode_dirty error [ 45.020883][ T4325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.024239][ T4330] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #20: comm syz.3.275: corrupted inode contents [ 45.043711][ T4335] loop0: p2 < > p3 p4 < > [ 45.053298][ T4335] loop0: partition table partially beyond EOD, truncated [ 45.060859][ T4335] loop0: p2 start 4294902784 is beyond EOD, truncated [ 45.067630][ T4335] loop0: p3 start 4278191616 is beyond EOD, truncated [ 45.067773][ T4330] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3007: inode #20: comm syz.3.275: mark_inode_dirty error [ 45.086950][ T4330] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3010: inode #20: comm syz.3.275: mark inode dirty (error -117) [ 45.100135][ T4330] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 45.122031][ T3711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.147905][ T4352] loop0: detected capacity change from 0 to 256 [ 45.155958][ T4352] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.209810][ T4359] loop3: detected capacity change from 0 to 1024 [ 45.379654][ T4385] ebtables: ebtables: counters copy to user failed while replacing table [ 45.381231][ T4389] loop4: detected capacity change from 0 to 1024 [ 45.413687][ T4382] syz.1.290 (4382) used greatest stack depth: 9584 bytes left [ 45.453770][ T4395] loop4: detected capacity change from 0 to 1024 [ 45.453818][ T4397] __nla_validate_parse: 4 callbacks suppressed [ 45.453828][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 45.482342][ T4395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.526588][ T3869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.579410][ T4417] loop1: detected capacity change from 0 to 512 [ 45.592485][ T4420] loop3: detected capacity change from 0 to 1024 [ 45.605368][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.619085][ T4417] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.643480][ T4428] loop3: detected capacity change from 0 to 128 [ 45.649955][ T4428] EXT4-fs: Ignoring removed nobh option [ 45.662159][ T4428] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.675249][ T4428] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.736165][ T3711] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.921012][ T4436] netlink: 'syz.3.308': attribute type 21 has an invalid length. [ 45.929225][ T4436] netlink: 'syz.3.308': attribute type 15 has an invalid length. [ 45.937085][ T4436] netlink: 156 bytes leftover after parsing attributes in process `syz.3.308'. [ 45.985525][ T4436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.005080][ T1977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.113193][ T4443] dccp_invalid_packet: P.Data Offset(0) too small [ 46.113391][ T1977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.134364][ T4443] bond_slave_0: entered promiscuous mode [ 46.140142][ T4443] bond_slave_1: entered promiscuous mode [ 46.147288][ T4443] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 46.169658][ T1977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.207497][ T1977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.226619][ T4455] No such timeout policy "syz0" [ 46.275437][ T1977] bridge_slave_1: left allmulticast mode [ 46.281249][ T1977] bridge_slave_1: left promiscuous mode [ 46.286944][ T1977] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.295011][ T1977] bridge_slave_0: left allmulticast mode [ 46.300832][ T1977] bridge_slave_0: left promiscuous mode [ 46.306473][ T1977] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.390353][ T3955] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.400668][ T1977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.411538][ T1977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.420273][ T4462] loop1: detected capacity change from 0 to 1024 [ 46.428337][ T1977] bond0 (unregistering): Released all slaves [ 46.443654][ T4444] chnl_net:caif_netlink_parms(): no params data found [ 46.456085][ T24] kernel write not supported for file /snd/seq (pid: 24 comm: kworker/1:0) [ 46.480509][ T4469] loop1: detected capacity change from 0 to 256 [ 46.487545][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.494724][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.495691][ T4469] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.501981][ T4444] bridge_slave_0: entered allmulticast mode [ 46.519309][ T4444] bridge_slave_0: entered promiscuous mode [ 46.526586][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.533765][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.542740][ T4444] bridge_slave_1: entered allmulticast mode [ 46.549214][ T4444] bridge_slave_1: entered promiscuous mode [ 46.573135][ T4444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.584000][ T4444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.606650][ T1977] hsr_slave_0: left promiscuous mode [ 46.612876][ T1977] hsr_slave_1: left promiscuous mode [ 46.619365][ T1977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.626941][ T1977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.634847][ T1977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.642366][ T1977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.652723][ T1977] veth1_macvtap: left promiscuous mode [ 46.658265][ T1977] veth0_macvtap: left promiscuous mode [ 46.663859][ T1977] veth1_vlan: left promiscuous mode [ 46.669140][ T1977] veth0_vlan: left promiscuous mode [ 46.700286][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 46.709213][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 46.816228][ T4492] loop4: detected capacity change from 0 to 1024 [ 46.834363][ T1977] team0 (unregistering): Port device team_slave_1 removed [ 46.845841][ T1977] team0 (unregistering): Port device team_slave_0 removed [ 46.888578][ T4444] team0: Port device team_slave_0 added [ 46.895834][ T4444] team0: Port device team_slave_1 added [ 46.930204][ T4444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.937621][ T4444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.963871][ T4444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.980461][ T4444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.987527][ T4444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.013720][ T4444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.041093][ T4444] hsr_slave_0: entered promiscuous mode [ 47.056503][ T4444] hsr_slave_1: entered promiscuous mode [ 47.194254][ T4520] capability: warning: `syz.4.334' uses deprecated v2 capabilities in a way that may be insecure [ 47.334149][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 47.334164][ T29] audit: type=1400 audit(1724700840.569:567): avc: denied { connect } for pid=4526 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.382804][ T29] audit: type=1400 audit(1724700840.611:568): avc: denied { setopt } for pid=4526 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.448386][ T4529] loop3: detected capacity change from 0 to 128 [ 47.468538][ T4444] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.477353][ T4444] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.486716][ T4444] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.495170][ T4444] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.531167][ T4444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.544966][ T4444] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.555382][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.562614][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.573245][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.580437][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.649293][ T4444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.667927][ T3657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.733857][ T4444] veth0_vlan: entered promiscuous mode [ 47.734465][ T4549] loop2: detected capacity change from 0 to 128 [ 47.747157][ T4444] veth1_vlan: entered promiscuous mode [ 47.747558][ T4549] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.763071][ T4444] veth0_macvtap: entered promiscuous mode [ 47.771197][ T4549] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.776061][ T4444] veth1_macvtap: entered promiscuous mode [ 47.788034][ T4549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.339'. [ 47.797160][ T4549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.339'. [ 47.809090][ T4549] bond0: entered promiscuous mode [ 47.814233][ T4549] bond_slave_0: entered promiscuous mode [ 47.819987][ T4549] bond_slave_1: entered promiscuous mode [ 47.826943][ T4549] batadv_slave_1: entered promiscuous mode [ 47.839987][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.850539][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.860978][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.871524][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.881504][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.891992][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.901920][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.912436][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.923467][ T4444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.938236][ T4551] loop2: detected capacity change from 0 to 256 [ 47.940270][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.944870][ T4551] vfat: Unknown parameter 'nnonumtail' [ 47.955071][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.970511][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.981000][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.984252][ T4553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 47.990862][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.990943][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.990957][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.990996][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.992593][ T4444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.050309][ T4444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.059144][ T4444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.068166][ T4444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.077008][ T4444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.113643][ T4556] loop4: detected capacity change from 0 to 128 [ 48.130140][ T4560] loop2: detected capacity change from 0 to 512 [ 48.140159][ T4556] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.145790][ T4560] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.344: invalid block [ 48.153741][ T4556] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.211756][ T4556] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.342: checksumming directory block 0 [ 48.214233][ T4568] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 48.244301][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.244976][ T4571] loop3: detected capacity change from 0 to 256 [ 48.255045][ T4556] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.342: checksumming directory block 0 [ 48.271057][ T4560] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.344: invalid indirect mapped block 4294967295 (level 1) [ 48.296647][ T4560] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.344: invalid indirect mapped block 4294967295 (level 1) [ 48.298277][ T4556] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.342: checksumming directory block 0 [ 48.326843][ T4556] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.342: checksumming directory block 0 [ 48.333582][ T4571] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.345767][ T4575] loop0: detected capacity change from 0 to 1024 [ 48.356807][ T4560] EXT4-fs (loop2): 2 truncates cleaned up [ 48.363978][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.366152][ T4556] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.342: checksumming directory block 0 [ 48.381787][ T4560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.404085][ T4556] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.342: checksumming directory block 0 [ 48.427756][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.468332][ T3657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.479442][ T4584] netlink: 'syz.0.350': attribute type 9 has an invalid length. [ 48.497925][ T4584] bond_slave_0: entered promiscuous mode [ 48.504251][ T4584] bond_slave_1: entered promiscuous mode [ 48.511205][ T4584] macvlan2: entered promiscuous mode [ 48.516658][ T4584] bond0: entered promiscuous mode [ 48.519016][ T4589] FAULT_INJECTION: forcing a failure. [ 48.519016][ T4589] name failslab, interval 1, probability 0, space 0, times 0 [ 48.521984][ T4584] macvlan2: entered allmulticast mode [ 48.534332][ T4589] CPU: 0 UID: 0 PID: 4589 Comm: syz.2.351 Not tainted 6.11.0-rc5-syzkaller #0 [ 48.539792][ T4584] bond0: entered allmulticast mode [ 48.548671][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 48.548683][ T4589] Call Trace: [ 48.548691][ T4589] [ 48.548698][ T4589] dump_stack_lvl+0xf2/0x150 [ 48.553780][ T4584] bond_slave_0: entered allmulticast mode [ 48.563902][ T4589] dump_stack+0x15/0x20 [ 48.567276][ T4584] bond_slave_1: entered allmulticast mode [ 48.568663][ T29] audit: type=1326 audit(1724700841.807:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf7a29e79 code=0x7ffc0000 [ 48.570199][ T4589] should_fail_ex+0x229/0x230 [ 48.574880][ T29] audit: type=1326 audit(1724700841.807:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbf7a28810 code=0x7ffc0000 [ 48.580939][ T4589] ? audit_log_d_path+0x96/0x250 [ 48.580969][ T4589] should_failslab+0x8f/0xb0 [ 48.585179][ T29] audit: type=1326 audit(1724700841.807:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbbf7a2895f code=0x7ffc0000 [ 48.590859][ T4589] __kmalloc_cache_noprof+0x4b/0x2a0 [ 48.590892][ T4589] audit_log_d_path+0x96/0x250 [ 48.590910][ T4589] ? get_file_rcu+0xf4/0x110 [ 48.615462][ T29] audit: type=1326 audit(1724700841.807:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fbbf7a29e79 code=0x7ffc0000 [ 48.620562][ T4589] ? __rcu_read_unlock+0x4e/0x70 [ 48.646551][ T4584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 48.649842][ T4589] audit_log_d_path_exe+0x45/0x80 [ 48.735586][ T4589] audit_log_task+0x155/0x180 [ 48.740546][ T4589] audit_seccomp+0x68/0x130 [ 48.745264][ T4589] __seccomp_filter+0x6fa/0x1180 [ 48.750535][ T4589] ? notify_change+0x868/0x8a0 [ 48.755596][ T4589] ? up_write+0x30/0xf0 [ 48.759974][ T4589] ? mnt_drop_write+0xd9/0x130 [ 48.764952][ T4589] __secure_computing+0x9f/0x1c0 [ 48.770170][ T4589] syscall_trace_enter+0xd1/0x1f0 [ 48.775602][ T4589] ? fpregs_assert_state_consistent+0x83/0xa0 [ 48.781685][ T4589] do_syscall_64+0xaa/0x1c0 [ 48.786188][ T4589] ? clear_bhb_loop+0x55/0xb0 [ 48.790971][ T4589] ? clear_bhb_loop+0x55/0xb0 [ 48.795652][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.801989][ T4589] RIP: 0033:0x7fbbf7a288bc [ 48.806398][ T4589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 48.826279][ T4589] RSP: 002b:00007fbbf66a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.834949][ T4589] RAX: ffffffffffffffda RBX: 00007fbbf7bc5f80 RCX: 00007fbbf7a288bc [ 48.843021][ T4589] RDX: 000000000000000f RSI: 00007fbbf66a10a0 RDI: 0000000000000007 [ 48.851267][ T4589] RBP: 00007fbbf66a1090 R08: 0000000000000000 R09: 0000000000000000 [ 48.859476][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.867730][ T4589] R13: 0000000000000000 R14: 00007fbbf7bc5f80 R15: 00007ffc90ad95e8 [ 48.876151][ T4589] [ 48.879925][ T29] audit: type=1326 audit(1724700841.807:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.351" exe="" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbbf7a288bc code=0x7ffc0000 [ 48.903029][ T29] audit: type=1326 audit(1724700842.185:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbbf7a2895f code=0x7ffc0000 [ 48.927341][ T29] audit: type=1326 audit(1724700842.185:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbbf7a28b0a code=0x7ffc0000 [ 48.950487][ T29] audit: type=1326 audit(1724700842.185:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf7a29e79 code=0x7ffc0000 [ 48.978613][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.999328][ T4603] loop0: detected capacity change from 0 to 128 [ 49.019428][ T4603] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.028678][ T4610] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 49.045737][ T4603] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.089687][ T3869] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.134856][ T4620] loop4: detected capacity change from 0 to 512 [ 49.157515][ T4620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.170151][ T4620] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.215835][ T4619] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 49.227844][ T4619] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 49.239824][ T4619] bridge_slave_0: default FDB implementation only supports local addresses [ 49.242670][ T4603] program syz.0.353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.253990][ T4620] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 49.261938][ T4627] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 49.269557][ T4620] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 49.290193][ T4627] loop2: detected capacity change from 0 to 512 [ 49.292089][ T4620] bridge_slave_0: default FDB implementation only supports local addresses [ 49.307451][ T4627] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.316628][ T4627] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 49.331646][ T4627] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 49.339861][ T4627] System zones: 0-2, 18-18, 34-34 [ 49.340031][ T40] bridge_slave_1: left allmulticast mode [ 49.351192][ T40] bridge_slave_1: left promiscuous mode [ 49.352275][ T4627] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.356941][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.380591][ T4627] EXT4-fs (loop2): 1 truncate cleaned up [ 49.387291][ T40] bridge_slave_0: left allmulticast mode [ 49.393162][ T40] bridge_slave_0: left promiscuous mode [ 49.398864][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.406709][ T4627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.425824][ T4627] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.359: corrupted xattr block 19: invalid header [ 49.439486][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 49.449523][ T4627] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.359: corrupted xattr block 19: invalid header [ 49.470262][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 49.479892][ T4627] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.359: corrupted xattr block 19: invalid header [ 49.510899][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 49.521804][ T4627] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.359: corrupted xattr block 19: invalid header [ 49.525126][ T4444] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.536175][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 49.553611][ T4627] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.359: corrupted xattr block 19: invalid header [ 49.567863][ T4627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 49.585457][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.599446][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.610175][ T40] bond0 (unregistering): Released all slaves [ 49.650741][ T3657] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.651771][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 49.683881][ T4572] chnl_net:caif_netlink_parms(): no params data found [ 49.701218][ T4656] loop2: detected capacity change from 0 to 256 [ 49.709126][ T4656] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.733981][ T40] hsr_slave_0: left promiscuous mode [ 49.740679][ T40] hsr_slave_1: left promiscuous mode [ 49.746337][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.753850][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.761780][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.769495][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.778866][ T40] veth1_macvtap: left promiscuous mode [ 49.784514][ T40] veth0_macvtap: left promiscuous mode [ 49.790037][ T40] veth1_vlan: left promiscuous mode [ 49.795460][ T40] veth0_vlan: left promiscuous mode [ 49.873060][ T40] team0 (unregistering): Port device team_slave_1 removed [ 49.884317][ T40] team0 (unregistering): Port device team_slave_0 removed [ 49.924085][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.931270][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.939811][ T4572] bridge_slave_0: entered allmulticast mode [ 49.941712][ T3869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.946353][ T4572] bridge_slave_0: entered promiscuous mode [ 49.962623][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.970012][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.977191][ T4572] bridge_slave_1: entered allmulticast mode [ 49.983808][ T4572] bridge_slave_1: entered promiscuous mode [ 50.014968][ T4572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.037980][ T4572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.066113][ T4572] team0: Port device team_slave_0 added [ 50.076490][ T4572] team0: Port device team_slave_1 added [ 50.079193][ T4673] loop4: detected capacity change from 0 to 1024 [ 50.101133][ T4572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.108108][ T4572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.134992][ T4572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.147506][ T4675] x_tables: duplicate underflow at hook 3 [ 50.164988][ T4572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.173294][ T4572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.201388][ T4572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.227679][ T4685] netlink: 56 bytes leftover after parsing attributes in process `syz.4.373'. [ 50.251520][ T4572] hsr_slave_0: entered promiscuous mode [ 50.257955][ T4572] hsr_slave_1: entered promiscuous mode [ 50.266979][ T4572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.277690][ T4572] Cannot create hsr debugfs directory [ 50.289250][ T4688] macvlan3: entered promiscuous mode [ 50.294852][ T4688] macvlan3: entered allmulticast mode [ 50.307975][ T4633] chnl_net:caif_netlink_parms(): no params data found [ 50.377089][ T4695] pim6reg1: entered promiscuous mode [ 50.382876][ T4695] pim6reg1: entered allmulticast mode [ 50.412749][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.420190][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.428532][ T4633] bridge_slave_0: entered allmulticast mode [ 50.436296][ T4633] bridge_slave_0: entered promiscuous mode [ 50.439095][ T4699] netlink: 72 bytes leftover after parsing attributes in process `syz.0.377'. [ 50.443526][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.458355][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.466773][ T4633] bridge_slave_1: entered allmulticast mode [ 50.473456][ T4633] bridge_slave_1: entered promiscuous mode [ 50.511331][ T4633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.524559][ T4633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.555738][ T4633] team0: Port device team_slave_0 added [ 50.563332][ T4633] team0: Port device team_slave_1 added [ 50.577005][ T4705] loop0: detected capacity change from 0 to 1024 [ 50.597823][ T4633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.605098][ T4633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.610789][ T4707] loop0: detected capacity change from 0 to 164 [ 50.633527][ T4633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.635140][ T4633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.659789][ T4633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.687173][ T4633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.698322][ T4707] Unable to read rock-ridge attributes [ 50.712702][ T4709] sctp: [Deprecated]: syz.0.380 (pid 4709) Use of int in max_burst socket option deprecated. [ 50.712702][ T4709] Use struct sctp_assoc_value instead [ 50.728534][ T4707] sctp: [Deprecated]: syz.0.380 (pid 4707) Use of int in max_burst socket option deprecated. [ 50.728534][ T4707] Use struct sctp_assoc_value instead [ 50.755137][ T4633] hsr_slave_0: entered promiscuous mode [ 50.761304][ T4633] hsr_slave_1: entered promiscuous mode [ 50.768510][ T4633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.768523][ T4633] Cannot create hsr debugfs directory [ 50.892478][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.914164][ T4572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.954647][ T4633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.966428][ T4572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.979703][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.000697][ T4572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.011200][ T4572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.029279][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 51.043752][ T4633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.062326][ T4722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.069581][ T4722] IPv6: NLM_F_CREATE should be set when creating new route [ 51.079166][ T40] team0: Port device netdevsim1 removed [ 51.086518][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.109451][ T4633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.144779][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.178308][ T4633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.199112][ T4728] FAULT_INJECTION: forcing a failure. [ 51.199112][ T4728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.213924][ T4728] CPU: 0 UID: 0 PID: 4728 Comm: syz.0.385 Not tainted 6.11.0-rc5-syzkaller #0 [ 51.222984][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 51.234104][ T4728] Call Trace: [ 51.238269][ T4728] [ 51.240245][ T4572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.241437][ T4728] dump_stack_lvl+0xf2/0x150 [ 51.253466][ T4728] dump_stack+0x15/0x20 [ 51.257742][ T4728] should_fail_ex+0x229/0x230 [ 51.262639][ T4728] should_fail+0xb/0x10 [ 51.262869][ T4572] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.266830][ T4728] should_fail_usercopy+0x1a/0x20 [ 51.278856][ T4728] _copy_to_user+0x1e/0xa0 [ 51.283599][ T4728] simple_read_from_buffer+0xa0/0x110 [ 51.287295][ T4572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.289317][ T4728] proc_fail_nth_read+0xff/0x140 [ 51.300555][ T4572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.305609][ T4728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.305638][ T4728] vfs_read+0x1a2/0x6e0 [ 51.322153][ T1977] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.323605][ T4728] ? __rcu_read_unlock+0x4e/0x70 [ 51.323630][ T4728] ? __fget_files+0x1da/0x210 [ 51.323648][ T4728] ksys_read+0xeb/0x1b0 [ 51.323684][ T4728] __x64_sys_read+0x42/0x50 [ 51.329635][ T1977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.339618][ T4728] x64_sys_call+0x27d3/0x2d60 [ 51.346494][ T1977] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.350062][ T4728] do_syscall_64+0xc9/0x1c0 [ 51.355943][ T1977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.361853][ T4728] ? clear_bhb_loop+0x55/0xb0 [ 51.403296][ T4728] ? clear_bhb_loop+0x55/0xb0 [ 51.408446][ T4728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.415102][ T4728] RIP: 0033:0x7f54accf88bc [ 51.420005][ T4728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 51.424152][ T4572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.441816][ T4728] RSP: 002b:00007f54ab971030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.441841][ T4728] RAX: ffffffffffffffda RBX: 00007f54ace95f80 RCX: 00007f54accf88bc [ 51.441852][ T4728] RDX: 000000000000000f RSI: 00007f54ab9710a0 RDI: 0000000000000008 [ 51.473911][ T4717] chnl_net:caif_netlink_parms(): no params data found [ 51.475075][ T4728] RBP: 00007f54ab971090 R08: 0000000000000000 R09: 0000000000000000 [ 51.493418][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.501657][ T4728] R13: 0000000000000000 R14: 00007f54ace95f80 R15: 00007ffed88fee38 [ 51.511041][ T4728] [ 51.559796][ T40] bridge_slave_1: left allmulticast mode [ 51.565812][ T40] bridge_slave_1: left promiscuous mode [ 51.573007][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.581512][ T40] bridge_slave_0: left allmulticast mode [ 51.589167][ T40] bridge_slave_0: left promiscuous mode [ 51.595712][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.786870][ T40] bond0 (unregistering): left promiscuous mode [ 51.793866][ T40] bond_slave_0: left promiscuous mode [ 51.800143][ T40] bond_slave_1: left promiscuous mode [ 51.808186][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.822017][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.833391][ T40] bond0 (unregistering): Released all slaves [ 51.850011][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.857520][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.866717][ T4717] bridge_slave_0: entered allmulticast mode [ 51.874707][ T4717] bridge_slave_0: entered promiscuous mode [ 51.883447][ T4745] netlink: 'syz.0.387': attribute type 10 has an invalid length. [ 51.899581][ T4745] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 51.910445][ T4745] team0: Failed to send options change via netlink (err -105) [ 51.918680][ T4745] team0: Port device netdevsim1 added [ 51.926923][ T3371] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 51.948242][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.956323][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.968120][ T4717] bridge_slave_1: entered allmulticast mode [ 51.979345][ T4717] bridge_slave_1: entered promiscuous mode [ 51.993983][ T4751] loop0: detected capacity change from 0 to 1024 [ 52.002114][ T4572] veth0_vlan: entered promiscuous mode [ 52.012403][ T40] batadv_slave_1: left promiscuous mode [ 52.027202][ T40] hsr_slave_0: left promiscuous mode [ 52.033750][ T40] hsr_slave_1: left promiscuous mode [ 52.040301][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.048976][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.056920][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.064956][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.074419][ T40] veth1_macvtap: left promiscuous mode [ 52.081176][ T40] veth0_macvtap: left promiscuous mode [ 52.087986][ T40] veth1_vlan: left promiscuous mode [ 52.093813][ T40] veth0_vlan: left promiscuous mode [ 52.193015][ T40] team0 (unregistering): Port device team_slave_1 removed [ 52.203663][ T40] team0 (unregistering): Port device team_slave_0 removed [ 52.263882][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.278436][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.289530][ T4633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.300260][ T4633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.310707][ T4572] veth1_vlan: entered promiscuous mode [ 52.333616][ T4633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.344495][ T4717] team0: Port device team_slave_0 added [ 52.352814][ T4633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.367167][ T4717] team0: Port device team_slave_1 added [ 52.399353][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.406953][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.435953][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.449036][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.456500][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.485840][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.521580][ T4572] veth0_macvtap: entered promiscuous mode [ 52.532385][ T4572] veth1_macvtap: entered promiscuous mode [ 52.576973][ T4717] hsr_slave_0: entered promiscuous mode [ 52.584314][ T4717] hsr_slave_1: entered promiscuous mode [ 52.591239][ T4717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.605906][ T4717] Cannot create hsr debugfs directory [ 52.620337][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.633377][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.644962][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.657435][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.668195][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.679621][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.693696][ T4572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.725324][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.736259][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.747484][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.758226][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.768795][ T4572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.779836][ T4572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.791710][ T4572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.799436][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 52.799455][ T29] audit: type=1400 audit(1724700846.312:598): avc: denied { unlink } for pid=2942 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.820894][ T4753] loop0: detected capacity change from 0 to 1024 [ 52.845905][ T4753] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.846898][ T4572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.857515][ T4753] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 52.866045][ T4572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.866080][ T4572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.866120][ T4572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.917722][ T4753] EXT4-fs (loop0): invalid journal inode [ 52.924294][ T4753] EXT4-fs (loop0): can't get journal size [ 52.927000][ T4633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.947515][ T4753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.977813][ T4444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.006470][ T4633] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.013139][ T29] audit: type=1326 audit(1724700846.522:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.037799][ T29] audit: type=1326 audit(1724700846.522:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.061444][ T29] audit: type=1326 audit(1724700846.522:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.081159][ T1977] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.085291][ T29] audit: type=1326 audit(1724700846.522:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.092350][ T1977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.116139][ T29] audit: type=1326 audit(1724700846.522:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.129623][ T1977] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.146782][ T29] audit: type=1326 audit(1724700846.522:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.153879][ T1977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.178780][ T29] audit: type=1326 audit(1724700846.522:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.210060][ T29] audit: type=1326 audit(1724700846.522:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.210087][ T29] audit: type=1326 audit(1724700846.522:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.0.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54accf9e79 code=0x7ffc0000 [ 53.337352][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 53.400442][ T4782] loop1: detected capacity change from 0 to 1024 [ 53.410571][ T4633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.514731][ T4795] loop0: detected capacity change from 0 to 1024 [ 53.514755][ T4633] veth0_vlan: entered promiscuous mode [ 53.532436][ T4633] veth1_vlan: entered promiscuous mode [ 53.548285][ T4633] veth0_macvtap: entered promiscuous mode [ 53.603906][ T4633] veth1_macvtap: entered promiscuous mode [ 53.617125][ T4797] loop0: detected capacity change from 0 to 512 [ 53.633108][ T4797] EXT4-fs: Ignoring removed i_version option [ 53.639187][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.639193][ T4797] EXT4-fs: inline encryption not supported [ 53.662414][ T4797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.675731][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.686278][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.696285][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.707002][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.717049][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.727533][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.737488][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.747931][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.761998][ T4633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.770140][ T4797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.770591][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.793016][ T4797] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.803652][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.813474][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.823929][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.833864][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.844496][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.854356][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.864797][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.878254][ T4633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.888919][ T4633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.898043][ T4633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.906764][ T4633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.915589][ T4633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.926131][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 53.935515][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.948892][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.959896][ T4802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.967143][ T4802] IPv6: NLM_F_CREATE should be set when creating new route [ 53.981447][ T4785] loop4: detected capacity change from 0 to 1024 [ 53.991296][ T4444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.994302][ T4785] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.002587][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.011702][ T4785] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 54.024939][ T4785] EXT4-fs (loop4): invalid journal inode [ 54.036709][ T4785] EXT4-fs (loop4): can't get journal size [ 54.062712][ T4785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.111214][ T3869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.199580][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.224469][ T4817] SET target dimension over the limit! [ 54.261426][ C1] ================================================================== [ 54.270166][ C1] BUG: KCSAN: data-race in can_send / can_send [ 54.276729][ C1] [ 54.279050][ C1] read-write to 0xffff88811505b210 of 8 bytes by interrupt on cpu 0: [ 54.287386][ C1] can_send+0x562/0x5d0 [ 54.291643][ C1] bcm_can_tx+0x314/0x420 [ 54.295993][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 54.301393][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 54.306607][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 54.311646][ C1] handle_softirqs+0xc3/0x280 [ 54.316332][ C1] do_softirq+0x5e/0x90 [ 54.320503][ C1] __local_bh_enable_ip+0x6e/0x70 [ 54.325536][ C1] copy_fpstate_to_sigframe+0x28b/0x720 [ 54.331082][ C1] get_sigframe+0x295/0x350 [ 54.335599][ C1] x64_setup_rt_frame+0xa7/0x570 [ 54.340595][ C1] arch_do_signal_or_restart+0x287/0x4b0 [ 54.346238][ C1] syscall_exit_to_user_mode+0x59/0x130 [ 54.351908][ C1] do_syscall_64+0xd6/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 54.356447][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.362376][ C1] [ 54.364702][ C1] read-write to 0xffff88811505b210 of 8 bytes by interrupt on cpu 1: [ 54.372773][ C1] can_send+0x562/0x5d0 [ 54.376943][ C1] bcm_can_tx+0x314/0x420 [ 54.381287][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 54.387337][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 54.392641][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 54.397715][ C1] handle_softirqs+0xc3/0x280 [ 54.402467][ C1] irq_exit_rcu+0x3e/0x90 [ 54.406845][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 54.412513][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.418528][ C1] _raw_read_unlock_bh+0x1b/0x20 [ 54.423475][ C1] wg_socket_send_skb_to_peer+0x109/0x130 [ 54.429231][ C1] wg_packet_tx_worker+0x127/0x360 [ 54.434362][ C1] process_scheduled_works+0x483/0x9a0 [ 54.439952][ C1] worker_thread+0x526/0x6e0 [ 54.444562][ C1] kthread+0x1d1/0x210 [ 54.448733][ C1] ret_from_fork+0x4b/0x60 [ 54.453190][ C1] ret_from_fork_asm+0x1a/0x30 [ 54.458001][ C1] [ 54.460322][ C1] value changed: 0x0000000000000e68 -> 0x0000000000000e69 [ 54.467615][ C1] [ 54.469955][ C1] Reported by Kernel Concurrency Sanitizer on: [ 54.476099][ C1] CPU: 1 UID: 0 PID: 3318 Comm: kworker/1:2 Not tainted 6.11.0-rc5-syzkaller #0 [ 54.485399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.495470][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 54.501680][ C1] ================================================================== [ 54.510824][ C1] ================================================================== [ 54.518920][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 54.525637][ C1] [ 54.527964][ C1] read-write to 0xffff88811505b208 of 8 bytes by interrupt on cpu 0: [ 54.536366][ C1] can_receive+0x4e/0x1f0 [ 54.540926][ C1] canfd_rcv+0xe7/0x180 [ 54.545190][ C1] __netif_receive_skb+0x123/0x280 [ 54.550423][ C1] process_backlog+0x22e/0x440 [ 54.555206][ C1] __napi_poll+0x63/0x3c0 [ 54.559557][ C1] net_rx_action+0x3a1/0x7f0 [ 54.564257][ C1] handle_softirqs+0xc3/0x280 [ 54.569043][ C1] irq_exit_rcu+0x3e/0x90 [ 54.573419][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 54.579067][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.585058][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 54.590007][ C1] batadv_nc_purge_paths+0x220/0x270 [ 54.595407][ C1] batadv_nc_worker+0x3db/0xad0 [ 54.600282][ C1] process_scheduled_works+0x483/0x9a0 [ 54.605752][ C1] worker_thread+0x526/0x6e0 [ 54.610365][ C1] kthread+0x1d1/0x210 [ 54.614494][ C1] ret_from_fork+0x4b/0x60 [ 54.619003][ C1] ret_from_fork_asm+0x1a/0x30 [ 54.623777][ C1] [ 54.626092][ C1] read-write to 0xffff88811505b208 of 8 bytes by interrupt on cpu 1: [ 54.634160][ C1] can_receive+0x4e/0x1f0 [ 54.638493][ C1] canfd_rcv+0xe7/0x180 [ 54.642649][ C1] __netif_receive_skb+0x123/0x280 [ 54.647765][ C1] process_backlog+0x22e/0x440 [ 54.652542][ C1] __napi_poll+0x63/0x3c0 [ 54.656984][ C1] net_rx_action+0x3a1/0x7f0 [ 54.661606][ C1] handle_softirqs+0xc3/0x280 [ 54.666326][ C1] do_softirq+0x5e/0x90 [ 54.670513][ C1] __local_bh_enable_ip+0x6e/0x70 [ 54.675554][ C1] ip6t_do_table+0xadd/0xbb0 [ 54.680143][ C1] ip6table_mangle_hook+0x110/0x330 [ 54.685336][ C1] nf_hook_slow+0x86/0x1b0 [ 54.689756][ C1] mld_sendpack+0x689/0x6d0 [ 54.694276][ C1] mld_send_initial_cr+0x12f/0x1e0 [ 54.699383][ C1] mld_dad_work+0x34/0x300 [ 54.703799][ C1] process_scheduled_works+0x483/0x9a0 [ 54.709256][ C1] worker_thread+0x526/0x6e0 [ 54.713845][ C1] kthread+0x1d1/0x210 [ 54.717924][ C1] ret_from_fork+0x4b/0x60 [ 54.722333][ C1] ret_from_fork_asm+0x1a/0x30 [ 54.727094][ C1] [ 54.729403][ C1] value changed: 0x0000000000004595 -> 0x0000000000004596 [ 54.736492][ C1] [ 54.738972][ C1] Reported by Kernel Concurrency Sanitizer on: [ 54.745192][ C1] CPU: 1 UID: 0 PID: 3662 Comm: kworker/1:7 Not tainted 6.11.0-rc5-syzkaller #0 [ 54.754204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.764335][ C1] Workqueue: mld mld_dad_work [ 54.769013][ C1] ================================================================== [ 54.788187][ C1] ================================================================== [ 54.796286][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 54.803148][ C1] [ 54.805548][ C1] read-write to 0xffff88811505b268 of 8 bytes by interrupt on cpu 0: [ 54.814220][ C1] can_receive+0x62/0x1f0 [ 54.818661][ C1] canfd_rcv+0xe7/0x180 [ 54.822930][ C1] __netif_receive_skb+0x123/0x280 [ 54.828056][ C1] process_backlog+0x22e/0x440 [ 54.832841][ C1] __napi_poll+0x63/0x3c0 [ 54.837188][ C1] net_rx_action+0x3a1/0x7f0 [ 54.841804][ C1] handle_softirqs+0xc3/0x280 [ 54.846522][ C1] irq_exit_rcu+0x3e/0x90 [ 54.850894][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 54.856743][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.862738][ C1] do_softirq+0x79/0x90 [ 54.866916][ C1] __local_bh_enable_ip+0x6e/0x70 [ 54.871955][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 54.876918][ C1] batadv_tt_local_purge+0x1a8/0x1f0 [ 54.882211][ C1] batadv_tt_purge+0x2b/0x630 [ 54.886919][ C1] process_scheduled_works+0x483/0x9a0 [ 54.892617][ C1] worker_thread+0x526/0x6e0 [ 54.897205][ C1] kthread+0x1d1/0x210 [ 54.901273][ C1] ret_from_fork+0x4b/0x60 [ 54.905763][ C1] ret_from_fork_asm+0x1a/0x30 [ 54.910523][ C1] [ 54.912843][ C1] read-write to 0xffff88811505b268 of 8 bytes by interrupt on cpu 1: [ 54.921147][ C1] can_receive+0x62/0x1f0 [ 54.925796][ C1] canfd_rcv+0xe7/0x180 [ 54.929973][ C1] __netif_receive_skb+0x123/0x280 [ 54.935095][ C1] process_backlog+0x22e/0x440 [ 54.939975][ C1] __napi_poll+0x63/0x3c0 [ 54.944928][ C1] net_rx_action+0x3a1/0x7f0 [ 54.949620][ C1] handle_softirqs+0xc3/0x280 [ 54.954337][ C1] run_ksoftirqd+0x1c/0x30 [ 54.958875][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 54.963923][ C1] kthread+0x1d1/0x210 [ 54.968005][ C1] ret_from_fork+0x4b/0x60 [ 54.972523][ C1] ret_from_fork_asm+0x1a/0x30 [ 54.977362][ C1] [ 54.979792][ C1] value changed: 0x0000000000002e6f -> 0x0000000000002e70 [ 54.988315][ C1] [ 54.990652][ C1] Reported by Kernel Concurrency Sanitizer on: [ 54.996786][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.11.0-rc5-syzkaller #0 [ 55.006077][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.017095][ C1] ================================================================== [ 55.061378][ C1] ================================================================== [ 55.069631][ C1] BUG: KCSAN: data-race in can_send / can_send [ 55.076082][ C1] [ 55.078513][ C1] read-write to 0xffff88811505b270 of 8 bytes by interrupt on cpu 0: [ 55.087366][ C1] can_send+0x576/0x5d0 [ 55.091549][ C1] bcm_can_tx+0x314/0x420 [ 55.096148][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 55.101673][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 55.106972][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 55.112034][ C1] handle_softirqs+0xc3/0x280 [ 55.116860][ C1] run_ksoftirqd+0x1c/0x30 [ 55.121373][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 55.126325][ C1] kthread+0x1d1/0x210 [ 55.130499][ C1] ret_from_fork+0x4b/0x60 [ 55.134930][ C1] ret_from_fork_asm+0x1a/0x30 [ 55.140611][ C1] [ 55.143013][ C1] read-write to 0xffff88811505b270 of 8 bytes by interrupt on cpu 1: [ 55.151354][ C1] can_send+0x576/0x5d0 [ 55.155608][ C1] bcm_can_tx+0x314/0x420 [ 55.160576][ C1] bcm_tx_timeout_handler+0xdb/0x260 [ 55.166236][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 55.171533][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 55.176838][ C1] handle_softirqs+0xc3/0x280 [ 55.181612][ C1] irq_exit_rcu+0x3e/0x90 [ 55.186094][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 55.192644][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.199362][ C1] __tsan_read8+0x0/0x180 [ 55.203805][ C1] batadv_nc_purge_paths+0x5a/0x270 [ 55.209062][ C1] batadv_nc_worker+0x3db/0xad0 [ 55.217244][ C1] process_scheduled_works+0x483/0x9a0 [ 55.223349][ C1] worker_thread+0x526/0x6e0 [ 55.227966][ C1] kthread+0x1d1/0x210 [ 55.232070][ C1] ret_from_fork+0x4b/0x60 [ 55.236497][ C1] ret_from_fork_asm+0x1a/0x30 [ 55.241364][ C1] [ 55.243693][ C1] value changed: 0x0000000000002ae6 -> 0x0000000000002ae7 [ 55.250989][ C1] [ 55.253387][ C1] Reported by Kernel Concurrency Sanitizer on: [ 55.259785][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-rc5-syzkaller #0 [ 55.269094][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.279676][ C1] Workqueue: bat_events batadv_nc_worker [ 55.285344][ C1] ================================================================== [ 55.597841][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 55.913223][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.989280][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.045875][ T40] team0: Port device netdevsim1 removed [ 56.052929][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.112730][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.177746][ T40] bridge_slave_1: left allmulticast mode [ 56.184637][ T40] bridge_slave_1: left promiscuous mode [ 56.191282][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.202827][ T40] bridge_slave_0: left allmulticast mode [ 56.208876][ T40] bridge_slave_0: left promiscuous mode [ 56.214739][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.368139][ T40] bond0 (unregistering): left allmulticast mode [ 56.374441][ T40] bond_slave_0: left allmulticast mode [ 56.379927][ T40] bond_slave_1: left allmulticast mode [ 56.385706][ T40] bond0 (unregistering): left promiscuous mode [ 56.392019][ T40] bond_slave_0: left promiscuous mode [ 56.397612][ T40] bond_slave_1: left promiscuous mode [ 56.409232][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.419826][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.430392][ T40] bond0 (unregistering): Released all slaves [ 56.522582][ T40] hsr_slave_0: left promiscuous mode [ 56.528492][ T40] hsr_slave_1: left promiscuous mode [ 56.534122][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.541652][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.549572][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.557156][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.566567][ T40] veth1_macvtap: left promiscuous mode [ 56.572388][ T40] veth0_macvtap: left promiscuous mode [ 56.578031][ T40] veth1_vlan: left promiscuous mode [ 56.583259][ T40] veth0_vlan: left promiscuous mode [ 56.663766][ T40] team0 (unregistering): Port device team_slave_1 removed [ 56.675359][ T40] team0 (unregistering): Port device team_slave_0 removed [ 57.019685][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.207331][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.265162][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.341981][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.571461][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.626790][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.684075][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.750871][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.806278][ T40] bridge_slave_1: left allmulticast mode [ 59.811946][ T40] bridge_slave_1: left promiscuous mode [ 59.817739][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.825940][ T40] bridge_slave_0: left allmulticast mode [ 59.831743][ T40] bridge_slave_0: left promiscuous mode [ 59.837550][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.845557][ T40] bridge_slave_1: left allmulticast mode [ 59.851213][ T40] bridge_slave_1: left promiscuous mode [ 59.857008][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.864832][ T40] bridge_slave_0: left allmulticast mode [ 59.870471][ T40] bridge_slave_0: left promiscuous mode [ 59.876193][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.884606][ T40] bridge_slave_1: left allmulticast mode [ 59.890455][ T40] bridge_slave_1: left promiscuous mode [ 59.896287][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.904580][ T40] bridge_slave_0: left allmulticast mode [ 59.910315][ T40] bridge_slave_0: left promiscuous mode [ 59.916058][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.206899][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.217003][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.226932][ T40] bond0 (unregistering): Released all slaves [ 60.235708][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.245795][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.255545][ T40] bond0 (unregistering): Released all slaves [ 60.265524][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.275624][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.286104][ T40] bond0 (unregistering): Released all slaves [ 60.294701][ T40] bond1 (unregistering): Released all slaves [ 60.436416][ T40] hsr_slave_0: left promiscuous mode [ 60.442505][ T40] hsr_slave_1: left promiscuous mode [ 60.450147][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.460004][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.468127][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.477373][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.487069][ T40] hsr_slave_0: left promiscuous mode [ 60.493861][ T40] hsr_slave_1: left promiscuous mode [ 60.503024][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.511466][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.521047][ T40] hsr_slave_0: left promiscuous mode [ 60.526878][ T40] hsr_slave_1: left promiscuous mode [ 60.533172][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.541742][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.549597][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.558120][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.568934][ T40] veth1_macvtap: left promiscuous mode [ 60.575319][ T40] veth0_macvtap: left promiscuous mode [ 60.581332][ T40] veth1_vlan: left promiscuous mode [ 60.588077][ T40] veth0_vlan: left promiscuous mode [ 60.596539][ T40] veth1_macvtap: left promiscuous mode [ 60.603036][ T40] veth0_macvtap: left promiscuous mode [ 60.609619][ T40] veth1_vlan: left promiscuous mode [ 60.615348][ T40] veth0_vlan: left promiscuous mode [ 60.742232][ T40] team0 (unregistering): Port device team_slave_1 removed [ 60.753269][ T40] team0 (unregistering): Port device team_slave_0 removed [ 60.813948][ T40] team0 (unregistering): Port device team_slave_1 removed [ 60.824209][ T40] team0 (unregistering): Port device team_slave_0 removed [ 60.886111][ T40] team0 (unregistering): Port device team_slave_1 removed [ 60.896975][ T40] team0 (unregistering): Port device team_slave_0 removed [ 61.600032][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.645962][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.694124][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.731546][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.788763][ T40] bridge_slave_1: left allmulticast mode [ 61.794800][ T40] bridge_slave_1: left promiscuous mode [ 61.801093][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.809664][ T40] bridge_slave_0: left allmulticast mode [ 61.815555][ T40] bridge_slave_0: left promiscuous mode [ 61.822065][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.903164][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.915204][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.927029][ T40] bond0 (unregistering): Released all slaves [ 62.026539][ T40] hsr_slave_0: left promiscuous mode [ 62.032505][ T40] hsr_slave_1: left promiscuous mode [ 62.038496][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.045973][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.053689][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.061256][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.070249][ T40] veth1_macvtap: left promiscuous mode [ 62.075883][ T40] veth0_macvtap: left promiscuous mode [ 62.081552][ T40] veth1_vlan: left promiscuous mode [ 62.086864][ T40] veth0_vlan: left promiscuous mode [ 62.160518][ T40] team0 (unregistering): Port device team_slave_1 removed [ 62.171602][ T40] team0 (unregistering): Port device team_slave_0 removed