last executing test programs: 5.004821361s ago: executing program 3 (id=8155): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@uid={'uid', 0x3d, r0}}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='mountinfo\x00') r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8000000010001) lremovexattr(0x0, 0x0) 3.957710396s ago: executing program 3 (id=8178): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) (async) r1 = socket$inet6(0xa, 0x4, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x5, 0x4) (async) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r4, 0x4b33, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)="825a370bf897635784938b739107d711a2fb4bb9b55a629e13e53c0a493ee039e330740e7231f88b9ee3d297fe41f627be5b894a0533aa749f4bf1b5c8a9891ac8894724dff3ccdb1681", 0x4a}, {&(0x7f0000000140)="daefed33354910c510cd2702cf3d0cdc679c8d55342e6998a195ccdc58ddd162e9b6427920803f9d8854b219a0607ed9c08e89e17ddcda72658ee51a17a66f5545e545dc0572b4ff0360bbece9bf381af49c213913aaed64c5b9fe03874f36c1d7357baced588050b31696b231a526b63cb09718aaaf1ad442f0de2e28802ba095db92911726e5caaf852d3417e82b492ff515ed68edf541de1fbe5677095d10a3670d4d85c8960de5b8b66dd19892505b1ea95c0ca24fa1608801fe8571174068b403973f8f90a6cb3aba735ac3fc8f90001b", 0xd3}, {&(0x7f0000000240)="a490271019623fe468bcd2bf9190d48eadcbaa5741d146bc4d96c347d582ea4f1c75f042e4178bf607b2287a336efba487dbf1db981133811c4bff3fa2433abbae082807619004a7bcefada4454109a3170db5904d51a895c0fc7b3a2f46c18bf119169e5ece346cb2725940f41f82d0ce0d3a901f17106f0a35c6e39f58ff62bdc74376ca829e3af2ddfd6a9c72d6108afee65b3b18b502091095d91341fa3796c444c3a2c1b432335f4413ba40df8d998e0f81df1e2f821eea992201ea689f9b9b", 0xc2}, {&(0x7f0000000340)="d8ee2b5228ba9aa20e37fbd9b6eb3d5b68739cc2e9b5f4c2eb11a825cf3538b9ed95901293380ce467bc688394dbf384774551c89cb8a9d0445948e7b1ac73182048c4cfeaad8c", 0x47}, {&(0x7f00000003c0)="50b8081bd6ec015a6eae1a9638242c777b803d4eccbf838e140c3e904980aada360955561df6341f9fe51fe172fc8ea5069d1f3f495f2c9da713232310e29d8ef471096ac71b47cd0ff0fad0e68875b617164805402e30233f9301f2a2f88ad00c9025c38a3eaac0ea355bfb74087d67a6afc1d916a7a0089442e524b317d5a20f28ce956b799abfab175a7a8bc0d1a140a82b93b33793f68665f2c7d852", 0x9e}, {&(0x7f0000000480)="d41f18f7dd4322330cf4edcef5381dbaffff1df59cf7c49fd864d0dfff075d1c9f9ffb50243198274547c4dbd4b6b924609e6fe940e3b7a95e99", 0x3a}, {&(0x7f00000004c0)="b04391f9d8e5cbebeb92bc464f43cf258e16d63dc684ba21adf871f15e784a3ae86b3f129636d9a82f08730dffe0c27a7dee93919627d92d630bb77f5181a486aaf40e8965f5053a911b2065685c39a68c4c2ad869dd581c7ba537df4ed4e40a3c1d36ac6859f9bdbaf09a37a3233e7f22603285981a83295b2b35cbc3ba62765c0464e2c0a0471274ec71d55749c725e3d9ec828068a8a2c9a0c79d5dd52fe203", 0xa1}], 0x7}, 0x2000c080) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 3.802450069s ago: executing program 3 (id=8182): socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x500, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000000e0c0), 0x10010) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RNDADDENTROPY(r2, 0x80111500, &(0x7f0000000000)=ANY=[]) 3.725766545s ago: executing program 3 (id=8184): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 3.630316153s ago: executing program 3 (id=8186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x110, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x53, &(0x7f0000000440)=""/83, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x2029, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0xffffffffffffffff, r0, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x2, 0x8, 0x7}, {0x1, 0x3, 0x0, 0x7}, {0x5, 0x2, 0x3, 0x2}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='bcache_btree_gc_coalesce\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x200000002, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000008400000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000051f20000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dec6607c6411e88f107dd958ebe8adbb4c8f6fd4003519451a7154cd8efcd26b364036365f239ac34cd111ff4dbdcb1f00"/205]}, 0x145) 3.604808035s ago: executing program 3 (id=8187): socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001", 0x3, 0xfffffffffffffffb) preadv(r1, 0x0, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000240)=""/34, 0x43) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002100fe880001000000000000060000007d01ff020000000000000000000000000001"], 0xfdef) (fail_nth: 9) 2.175349442s ago: executing program 0 (id=8212): socket$l2tp6(0xa, 0x2, 0x73) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}, 0x111500}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r3, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mknod(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 2.031335914s ago: executing program 2 (id=8221): socket$rds(0x15, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x4, 0x0, 0x0, 0x0}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0506617, &(0x7f0000000040)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r6}, 0x10) syz_emit_ethernet(0x106, &(0x7f0000000900)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0xd0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @loopback, [@srh={0x51d75c5b460a4538, 0xe, 0x4, 0x7, 0x3, 0x30, 0x8, [@mcast1, @empty, @private0, @loopback, @private1, @loopback, @local]}, @routing={0x67, 0x4, 0x2, 0x95, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}}}, 0x0) 1.979808408s ago: executing program 2 (id=8222): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xe06, &(0x7f0000001200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00af00", 0xdd0, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @empty, [{0x0, 0x15, "a72dcca9d0e289f84eb7f1cdde3f25f3a398c9b10810cb7895aa26bea2dbe09b0e7c0b8a538e88853cd9487c6c1f91a93d856c44788465e03843c9a0535cb599a9b43d32afb7a77943630bcae2d5d18edb24af4fcb6437742bf443690125f903de9d372ed7d5817179a0d5cda2773868c383f8ecfda6ba5bea53d51b9bd34ebb9973d3d53f1b360f59a8b3a668f4397963323a1d00ec4b8c5be219182b685d9d4c15b1a85dd526"}, {0x3, 0x185, "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"}, {0x19, 0x3, "3ed2bf8a284974366edfeec5568305f8c2ae69eadb49ed383c1f56ae36"}, {0x1f, 0x6, "34d2345e07bb67c19b986242203e5fe8b8ca940ab69a7bab689bbfc1279dd5c19a31a74e03ff6a9e60a6b2fb2b54"}, {0x1, 0x12, "62b13d16837d409a486daa9c6db874a41065a4ea06c904d395c211f7cdd1f127486f31f5165975b756c965eded97d02598e38a099ddc5cfd04cbb3674c0177343f911ff829e8e6997bdc8829746314584f8d51f8596605faa3c43c1c40690485120cffcbb4920cd3a39688b251892520a436d0d9d0a466af47facb4096eaed8ca4bc5af72c34f15bc200dfe8c5de"}, {0x1f, 0x1, "cf703a8fb75c"}]}}}}}}, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000cd318698117fcb4ac1beab79d40a43"], 0x8, 0x0) 1.971335108s ago: executing program 2 (id=8223): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_macvtap\x00', 0x3}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r5, 0x4010744d, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x2, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f00000013c0)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, r1, 0x1, 0x0, 0x100}, 0x14}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfff7}, 0x90) 1.377375327s ago: executing program 0 (id=8224): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 1.328171392s ago: executing program 0 (id=8225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000480)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r4, 0x5}, &(0x7f0000000140)=0x8) unshare(0x20000400) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fstat(r5, &(0x7f0000001dc0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {0x3, 0x0}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000300)='GPL\x00'}, 0x90) 1.327648442s ago: executing program 0 (id=8226): socket$l2tp6(0xa, 0x2, 0x73) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}, 0x111500}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd08}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x30}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r3, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mknod(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 1.083896831s ago: executing program 2 (id=8231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2283, &(0x7f0000001200)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)=ANY=[@ANYRESDEC=r2], 0x14c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000024001b04000000000000000000233408c7505721ec00000006000300000001018fc481dba4884fd7f33415e519f2cc706556118d5c3b92bb397acdd4cfadba3ad2b93db647c4102d9000ce5a9d8461f983cdc5b6a659e0a7cd9a37fd0627bd0852b0187ac40027d461d5bcaffd9b5d1b445dee4c4c35dc4fdd7d5016f243b621a0cf2f2cecddeb0f30996f36ce7322e60d5f62d0d491f74a5569c37911053b7bcee3dd8570a58b926005307a0d61975072fbf53d7f2c7151e4b370baa80649899a564c921f9a"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0020000", @ANYRES16=r4, @ANYBLOB="00020400a800c90000002a0000008c020380640003800c000180080001003f0000000800018004000300240001800900020073797a300000000007000200275c00000c00020024237b2f647d252728000180040003000800010040000000080001000900000005000200000000000800010005000000040001000400010029000500e94e3e2706f2bcb05ec6b4b8e8472a02880700ff2bec362aa384a691fc7eb38bd3104a7c9d000000dd00040025165e0a0e30f1eef75deec14cf228f83d931788423d4790c113542059203c2a47d09d837dd4907fd561390d0d9ddccdbd70b3db011a16e0b78530cfdec4f930a6a7779bf3cce73a9eb293fa50dc86ca16c62ba76f0124a5c41b357763e6fdc7725888467c4703e9acdc8e5e7c6382f77ae29676778cb2525edce6f1e17ed7b62a3bb2b7a554080ad1f0562708b0bbcc1f8b5f853601331e8c1126d9649c07f36d4ba6c5a5a3f429059a0cfa72d096a8cbdb2f1f78f315cd94c4ee514f89b68225e673bef4fc750cea44f4298d104b377a4fbfd828ceb12958ca3c7e0000000400010050000500f5291142b03945b43524fdff390ef3327c6c52b04466fa2aca580766b92eb027312b26cb7a94a840d5858f460ef88780bfa0759ce3c705a9e074457242fa6f30de17c0eeff310c6950d5997ebc000500177ce9fabd3cf5d65a7124fe6121b5d932433ee32fdb31c06ba2c03a3bd06e31f1f89b7af1563ad0e6b497aee2f59a4bc2a191acdda676895916ba7f1e558a0061e6db7d8148fa248173d88936c43143aa054b3d059d6d0df189bdab7346e925a95a3e5582631b1514d2804ef63363517a6be96f14546fd6f74a247f53f61642503c9ff8d30d30886524c8e87bb1d701dfc42d87e41fa2ec760aee3910ce8cbe8472466d78f83d03309f015e601bc42f8552eb6181357b2f70db669b7ca46783da9254409f688fe51eec1d017beb2876e1675dfc27b4fbcbee7c98389be8b826393fb80b735ba325c1f3303dff1c"], 0x2a0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000000c0)={0x80002014}) socket$inet6_sctp(0xa, 0x5, 0x84) open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.083343301s ago: executing program 1 (id=8232): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000"], 0x290) 1.076546202s ago: executing program 1 (id=8233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010062726964676500002000028005001600010000000c00230000000000000000000600270001"], 0x50}}, 0x0) (fail_nth: 7) 1.055152534s ago: executing program 1 (id=8234): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0x0, 0x6, @random="c147b880963a"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="0301"], 0xdd12}], 0x1}, 0x0) 1.003990758s ago: executing program 1 (id=8235): socket$l2tp6(0xa, 0x2, 0x73) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}, 0x111500}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r3, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() mknod(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 635.549118ms ago: executing program 4 (id=8239): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001500000020002b80080004000000000008000100030000000c00fbffffff00000000000008000300", @ANYRES32=r3], 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780), 0x3, 0x434, &(0x7f00000002c0)="$eJzs289rHFUcAPDv7CataVMTS/3RtGq0isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAkaRepRCt7Fo+Bf4Ekvop4Er3qXQpFcWj2tzO5MsrvZTbPpJlvdzwcmeW/mLe99d+btvjdvJ4CeNZr+SSIGI+L3iBiqZusLjFb/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvzTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmR0s4NPlssdrq67DtSkk74uNoS2FKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNRm/Y2LJBvHP4Xr2wpsi9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96Tsejfm+YnN6njh1d++6LVsdrxX7ql9edjwawd1/v21r9mdnpp+k5irnXjk4iRvmbxJ2srAUlEHI6IkW3WMf/0N0dbHbt9/JvowDpT+euIp6rnfyUa4s8lm69PTtwTpbnjE/lVsdEvv159s1X9dxR/B6Tnf1/T638t/uGkdr12sf06rv7xecs5zXav/z3J23X7PpxeWro0GbEneb3a6Nr9Uw3lptbLp/GPHWve/w/G+jtxJCLSi/jhiHgkIh7N2v5YRDweEcc2if+nl594r27H2GAb8e+sNP7Zts7/emJPNO5pniie//G7ukqHo4340/N/spIay/Zs5fNvK+3a3tUMAAAA/z2FiBiMpDC+li4Uxserv+E/FPsKpYXFpWfOLnxwcbb6jMBw9BfyO11DNfdDJ7NpfZ6fasifyO4bf1kcqOTHZxZKs90OHnrc/hb9P/VnsdutA3ac57Wgd+n/0Lv0f+hd+j/0rib9f6Ab7QB2X7Pv/4+70A5g9zX0f8t+0EPM/6F36f/Qu/R/6EmLA3H7h+QlJDYkonBXNENihxLd/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojH8DAAD//ygv5wk=") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) 491.79798ms ago: executing program 4 (id=8240): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x2000, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1800000025000100000000000000000003"], 0x18}], 0x1}, 0x0) 487.19165ms ago: executing program 0 (id=8241): r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4080, &(0x7f00000000c0)={[], [{@flag='sync'}]}, 0x1, 0x787, &(0x7f00000007c0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x0, @hyper}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2ac, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x208, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_ife={0x190, 0x0, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x119, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7038eceef52fe7bdca153fe865c65015a3b208b282c16472e451aa10a8631235c49cae271f5fc8ce5e34d9938e3d5f43ac7a0e31b0acfc73199ca90e81246819f4c740a4fa3247a2af88d6569da09be7179b89f9f024c9f465098a5a52058a431206bee68089bddc13ffe76ff0f000053fa1517700a54d423c13fb6732a5d39c87101b0882ccd8e86eb437849e249675c60d8a9cf9430b6aa206e8116810b35151fce1e1bf48c2b9cbf0728c53ba121a82f52d6365ff203b02c074528c59a49843dd5cd36ce48d9ed8513e383"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2ac}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 445.667694ms ago: executing program 0 (id=8242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000200)='./file1/file0\x00', 0x0, 0x4020, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x9, 0x0, &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r3, r8, r4, r4, r6, r3, r4, r6, 0x1], &(0x7f0000000780)=[{0x4, 0x2, 0x0, 0xe}, {0x5, 0x4, 0x6, 0x2}], 0x10, 0x80}, 0x90) listen(0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=@known='system.advise\x00') perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r11, 0x0, 0x4ffe6, 0x0) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @void}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r12, r13}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 398.088017ms ago: executing program 4 (id=8243): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00000000000000", @ANYRES32], 0x30}}, 0x0) (fail_nth: 2) 76.323454ms ago: executing program 2 (id=8244): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000140)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) stat(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x5f0, 0xffffffff, 0x420, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x520, 0x520, 0x520, 0xffffffff, 0x4, &(0x7f0000000540), {[{{@uncond, 0x0, 0x328, 0x350, 0x0, {}, [@common=@rt={{0x138}, {0xff, [0x4, 0x9], 0x0, 0x2, 0x3, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback, @private2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private2, @empty, @mcast1, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00']}}, @common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e21], [0x9, 0xffffffff, 0x814, 0xb7c1, 0x101, 0xa4, 0x17a, 0x5, 0x1, 0x1, 0x7fff, 0xc8, 0xde6d73ba, 0x7, 0x81, 0xffffffff, 0x4000, 0x2, 0x2, 0x2, 0xffffffc0, 0x2, 0x5, 0x4d2a, 0x9, 0x0, 0x6, 0x2, 0x3, 0x0, 0x0, 0xe2d, 0x4, 0x6, 0x7, 0x8, 0x4, 0x0, 0x2, 0x7, 0x1, 0xd, 0xecc8, 0x6, 0x9, 0x4, 0x6, 0x9, 0xb59b, 0x4, 0x2, 0xffffffff, 0x2ff, 0xffffffff, 0x100, 0xfffffff7, 0x1, 0xdcd, 0x0, 0x3, 0x52c, 0xfffffff8, 0x1, 0x4], 0x0, [{0x0, 0x4}, {0x9, 0x2, 0x8}, {0x2, 0x6c, 0x1}, {0x8, 0x8, 0x1}], 0x4, 0x6, 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @remote, [0xff, 0x0, 0xff, 0xffffffff], [0xff0000ff, 0x0, 0xff000000, 0xff], 'xfrm0\x00', '\x00', {0xff}, {}, 0x62, 0x81, 0x6, 0x24}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c40)={0x2b0, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_IE={0x266, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x4d}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x78, 0x2}}, @peer_mgmt={0x75, 0x6, {0x1, 0x6, @void, @val=0x24, @void}}, @channel_switch={0x25, 0x3, {0x1, 0x1, 0x9}}, @fast_bss_trans={0x37, 0xa3, {0x0, 0x2, "6bef814bc1abab7d1ebb8471883bef08", "66d97ab0b943457d89d1fb236f5118ba30cfa0799abd941a05a6c8ba0662cb88", "cf3a5dbecde095105aa32eafa3aae0929d730cc104ee58c01eb388810ba82459", [{0x3, 0x27, "e23d213ac40e818a888ef8995f12ea6acdf67ab57ebded033a159444a2001d2c400ad4e01589de"}, {0x2, 0x26, "c3f34444e3cc37ac75ad5344b8c68e4e0fd760f1bfe537b4f1e478b378dfb148ec9d5b886be6"}]}}, @cf={0x4, 0x6, {0xfe, 0x94, 0x1, 0x3}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x20}}, @random_vendor={0xdd, 0xc7, "3e3ff57d36463403eea1288bb222bd60e20719d984145fa5d265e98e3b1ab9e16e5f246e2860d81689c22240a25ad1773e5b8e8bae0587f5de6eb7ac4153c0ad1cc5f5fb68b293910cefe5469171ceeb8c5f523e9eb7212909a6226e45715c5dc0868f7173bc896aafd832093cb0f9eec22b510c5dc8056eadc6bcacbed4e2b11aebfb9e28844af9f5c161a56493fa46998ec322b254cc7ce09ff7c56e388683ea4c5f5fe193ecc67718fb587cc7b1eb01cd27e390da8bc7d6172a647bf8ac5189ba9342a06f17"}, @fast_bss_trans={0x37, 0xc5, {0x0, 0x5, "b41f5317b79e485a369f6fbc4f3cb9a5", "cc10e988003ad53770f1c18bf8321f21d53e1b8744b6da404411d546678d9c1d", "2ad6b1ac04a3a22dd8325464a8681f1a03c01876634fb8d3f81799047aa0e7b0", [{0x3, 0x11, "b0b7c319bafac446717e6c93231c6ed1b0"}, {0x3, 0x11, "429e477799ac8a42f3a9d7cd198b4a44b2"}, {0x4, 0x8, "9d004a629f48c52b"}, {0x4, 0x20, "6c42adf555bbdb38d3693fdae681dcfe42a02b41e0c152868fe814e673bde71d"}, {0x3, 0x1f, "49316d0245f14088a1a3e61e2e57390c6b5807833af425e059e0b25f0c3309"}]}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f80), 0x111500, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000fc0)={{0x10000, 0x1}, {0x9, 0x109}, 0x1, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r2) connect$bt_sco(r2, &(0x7f0000001500)={0x1f, @none}, 0x8) mkdirat(r2, &(0x7f0000001540)='./file0\x00', 0x0) ioctl$FICLONE(r0, 0x40049409, r0) socket$inet6(0xa, 0xa, 0x5) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x88, 0x16, 0xa, 0x104, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x10, 0x1405, 0x100, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40008a0}, 0x50) 74.662244ms ago: executing program 4 (id=8245): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, &(0x7f0000001600)=0x300) 74.168554ms ago: executing program 1 (id=8246): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xfec0ffff00004800}}], 0x1c) 74.027744ms ago: executing program 4 (id=8247): getpid() socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RNDADDENTROPY(r0, 0x801c581f, &(0x7f0000000000)=ANY=[]) 50.129346ms ago: executing program 4 (id=8248): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@nouid32}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2}, 0x18) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 48.980586ms ago: executing program 2 (id=8249): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000180081064e81f782db4cb904021d", 0x12}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f00000000c0)=@deltfilter={0x30, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab040001"], 0x20}], 0x1}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800500000000000000000000d00007f954b4e0d9e936a8dcc52ba3a79c586c24b4b02f332ba1eedc9d3bb694802bf85290ba7517ac55633e0d32bf9aa88abea7d5947d24fcb4f3e2a5835"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r2}, 0x90) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x90) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) r8 = dup(r6) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}}) (async) write$P9_RLERRORu(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@mmap}, {@nodevmap}, {@posixacl}, {@loose}, {@access_client}, {@access_uid}, {@version_L}, {@version_u}], [], 0x6b}}) (async) statfs(&(0x7f0000000080)='./file0\x00', 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x64) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1b, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x1089c8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x8050, 0x0, 0x3f, 0x378c1010a5cd1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x129}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES8=r10], 0x34}}, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r11}, 0x4) 0s ago: executing program 1 (id=8250): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780), 0x3, 0x434, &(0x7f00000002c0)="$eJzs289rHFUcAPDv7CataVMTS/3RtGq0isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAkaRepRCt7Fo+Bf4Ekvop4Er3qXQpFcWj2tzO5MsrvZTbPpJlvdzwcmeW/mLe99d+btvjdvJ4CeNZr+SSIGI+L3iBiqZusLjFb/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvzTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmR0s4NPlssdrq67DtSkk74uNoS2FKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNRm/Y2LJBvHP4Xr2wpsi9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96Tsejfm+YnN6njh1d++6LVsdrxX7ql9edjwawd1/v21r9mdnpp+k5irnXjk4iRvmbxJ2srAUlEHI6IkW3WMf/0N0dbHbt9/JvowDpT+euIp6rnfyUa4s8lm69PTtwTpbnjE/lVsdEvv159s1X9dxR/B6Tnf1/T638t/uGkdr12sf06rv7xecs5zXav/z3J23X7PpxeWro0GbEneb3a6Nr9Uw3lptbLp/GPHWve/w/G+jtxJCLSi/jhiHgkIh7N2v5YRDweEcc2if+nl594r27H2GAb8e+sNP7Zts7/emJPNO5pniie//G7ukqHo4340/N/spIay/Zs5fNvK+3a3tUMAAAA/z2FiBiMpDC+li4Uxserv+E/FPsKpYXFpWfOLnxwcbb6jMBw9BfyO11DNfdDJ7NpfZ6fasifyO4bf1kcqOTHZxZKs90OHnrc/hb9P/VnsdutA3ac57Wgd+n/0Lv0f+hd+j/0rib9f6Ab7QB2X7Pv/4+70A5g9zX0f8t+0EPM/6F36f/Qu/R/6EmLA3H7h+QlJDYkonBXNENihxLd/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojH8DAAD//ygv5wk=") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1265, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) kernel console output (not intermixed with test programs): ring): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.454748][T29054] syz.4.7741: attempt to access beyond end of device [ 505.454748][T29054] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 505.469173][T29054] syz.4.7741: attempt to access beyond end of device [ 505.469173][T29054] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 505.482631][T29054] syz.4.7741: attempt to access beyond end of device [ 505.482631][T29054] loop4: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 505.502417][T29054] syz.4.7741: attempt to access beyond end of device [ 505.502417][T29054] loop4: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 505.517881][T29054] syz.4.7741: attempt to access beyond end of device [ 505.517881][T29054] loop4: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 505.531191][T29054] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #18: block 9: comm syz.4.7741: unable to read itable block [ 505.554847][T29054] syz.4.7741: attempt to access beyond end of device [ 505.554847][T29054] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 505.568261][T29054] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.576872][T29054] EXT4-fs (loop4): I/O error while writing superblock [ 505.578000][T28403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.583696][T29054] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure [ 505.602912][T29054] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.611230][T29054] EXT4-fs (loop4): I/O error while writing superblock [ 505.618017][T29054] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #18: comm syz.4.7741: mark_inode_dirty error [ 505.629430][T29054] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.637713][T29054] EXT4-fs (loop4): I/O error while writing superblock [ 505.656564][T29068] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.666466][T28172] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 5: comm syz-executor: unable to read itable block [ 505.679859][T28172] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.689379][T28172] EXT4-fs (loop4): I/O error while writing superblock [ 505.696234][T28172] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure [ 505.705624][T28172] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.714595][T28172] EXT4-fs (loop4): I/O error while writing superblock [ 505.721438][T28172] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 505.734415][T28172] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.742859][T28172] EXT4-fs (loop4): I/O error while writing superblock [ 505.751036][T28403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.762724][T28400] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #18: block 9: comm kworker/u8:24: unable to read itable block [ 505.777834][T28400] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.783727][T29070] chnl_net:caif_netlink_parms(): no params data found [ 505.792846][T28400] EXT4-fs (loop4): I/O error while writing superblock [ 505.792968][T28400] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #19: block 9: comm kworker/u8:24: unable to read itable block [ 505.813805][T28400] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.822294][T28400] EXT4-fs (loop4): I/O error while writing superblock [ 505.829174][T28400] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #2: block 5: comm kworker/u8:24: unable to read itable block [ 505.844635][T28400] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.852915][T28400] EXT4-fs (loop4): I/O error while writing superblock [ 505.861973][T28172] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 505.873714][T28403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.905021][T29070] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.912117][T29070] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.919462][T29070] bridge_slave_0: entered allmulticast mode [ 505.926047][T29070] bridge_slave_0: entered promiscuous mode [ 505.938404][T29070] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.945619][T29070] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.952804][T29070] bridge_slave_1: entered allmulticast mode [ 505.959593][T29070] bridge_slave_1: entered promiscuous mode [ 505.985806][T29070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.999502][T29070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.028168][T29070] team0: Port device team_slave_0 added [ 506.035690][T28403] bridge_slave_1: left allmulticast mode [ 506.041346][T28403] bridge_slave_1: left promiscuous mode [ 506.047038][T28403] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.057165][T28403] bridge_slave_0: left allmulticast mode [ 506.057614][T29106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7758'. [ 506.062813][T28403] bridge_slave_0: left promiscuous mode [ 506.077522][T28403] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.187893][T28403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.208150][T28403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.221632][T28403] bond0 (unregistering): Released all slaves [ 506.230656][T29070] team0: Port device team_slave_1 added [ 506.268461][T29070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.275541][T29070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.301624][T29070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.317200][T29070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.324334][T29070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.350453][T29070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.450269][T29070] hsr_slave_0: entered promiscuous mode [ 506.465267][T29070] hsr_slave_1: entered promiscuous mode [ 506.471506][T29070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.480621][T29070] Cannot create hsr debugfs directory [ 506.488785][T28403] hsr_slave_0: left promiscuous mode [ 506.495183][T28403] hsr_slave_1: left promiscuous mode [ 506.501423][T28403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.508919][T28403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.519037][T28403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.527010][T28403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.542383][T28403] veth1_macvtap: left promiscuous mode [ 506.547969][T28403] veth0_macvtap: left promiscuous mode [ 506.553494][T28403] veth1_vlan: left promiscuous mode [ 506.558804][T28403] veth0_vlan: left promiscuous mode [ 506.647736][T28403] team0 (unregistering): Port device team_slave_1 removed [ 506.658718][T28403] team0 (unregistering): Port device team_slave_0 removed [ 506.734695][T29139] gretap0: entered promiscuous mode [ 506.810762][T29115] chnl_net:caif_netlink_parms(): no params data found [ 506.858962][T29115] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.866128][T29115] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.873357][T29115] bridge_slave_0: entered allmulticast mode [ 506.886422][T29115] bridge_slave_0: entered promiscuous mode [ 506.893418][T29115] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.900654][T29115] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.912925][T29115] bridge_slave_1: entered allmulticast mode [ 506.919688][T29115] bridge_slave_1: entered promiscuous mode [ 506.947636][T29115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.961401][T29115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.981430][T29115] team0: Port device team_slave_0 added [ 506.988352][T29115] team0: Port device team_slave_1 added [ 507.004054][T29115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.011019][T29115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.037004][T29115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.048348][T29115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.055349][T29115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.081273][T29115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.126590][T29115] hsr_slave_0: entered promiscuous mode [ 507.132891][T29115] hsr_slave_1: entered promiscuous mode [ 507.138941][T29115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.146671][T29115] Cannot create hsr debugfs directory [ 507.178610][T29157] loop2: detected capacity change from 0 to 512 [ 507.186066][T29070] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 507.187464][T29157] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 507.204891][T29070] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 507.208327][T29157] EXT4-fs (loop2): 1 orphan inode deleted [ 507.217581][T29157] EXT4-fs (loop2): 1 truncate cleaned up [ 507.227742][T29157] EXT4-fs error (device loop2): ext4_lookup:1854: inode #15: comm syz.2.7772: iget: bad extra_isize 46 (inode size 256) [ 507.245222][T28403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.256155][T29070] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 507.264703][T29070] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 507.284018][ T29] audit: type=1400 audit(1720909235.135:5588): avc: denied { map } for pid=29156 comm="syz.2.7772" path="socket:[141387]" dev="sockfs" ino=141387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 507.307354][ T29] audit: type=1400 audit(1720909235.135:5589): avc: denied { read accept } for pid=29156 comm="syz.2.7772" path="socket:[141387]" dev="sockfs" ino=141387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 507.317362][T29070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.348662][T28403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.371441][T29070] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.397535][T28403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.412021][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.419106][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.427566][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.434634][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.443966][T29160] bridge0: port 3(hsr0) entered blocking state [ 507.450163][T29160] bridge0: port 3(hsr0) entered disabled state [ 507.456752][T29160] hsr0: entered allmulticast mode [ 507.461810][T29160] hsr_slave_0: entered allmulticast mode [ 507.467510][T29160] hsr_slave_1: entered allmulticast mode [ 507.474259][T29160] hsr0: entered promiscuous mode [ 507.479804][T29160] bridge0: port 3(hsr0) entered blocking state [ 507.486055][T29160] bridge0: port 3(hsr0) entered forwarding state [ 507.500504][T28403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.522324][T29070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.532720][T29070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.570324][T28403] bridge_slave_1: left allmulticast mode [ 507.576031][T28403] bridge_slave_1: left promiscuous mode [ 507.581873][T28403] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.591348][T28403] bridge_slave_0: left allmulticast mode [ 507.597101][T28403] bridge_slave_0: left promiscuous mode [ 507.602885][T28403] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.727017][T28403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.738264][T28403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.750309][T28403] bond0 (unregistering): Released all slaves [ 507.797233][T29070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.945296][T29070] veth0_vlan: entered promiscuous mode [ 507.967710][T29070] veth1_vlan: entered promiscuous mode [ 508.007035][T29070] veth0_macvtap: entered promiscuous mode [ 508.030080][T29070] veth1_macvtap: entered promiscuous mode [ 508.059442][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.069965][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.079800][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.090230][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.100066][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.110496][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.120342][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.130771][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.140594][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.151017][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.160840][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.171276][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.181081][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.191529][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.205652][T29070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.231366][T28403] hsr_slave_0: left promiscuous mode [ 508.238506][T28403] hsr_slave_1: left promiscuous mode [ 508.244550][T28403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.252043][T28403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.263036][T28403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.270626][T28403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.280443][T28403] veth1_macvtap: left promiscuous mode [ 508.286139][T28403] veth0_macvtap: left promiscuous mode [ 508.291647][T28403] veth1_vlan: left promiscuous mode [ 508.296938][T28403] veth0_vlan: left promiscuous mode [ 508.391922][T28403] team0 (unregistering): Port device team_slave_1 removed [ 508.404020][T28403] team0 (unregistering): Port device team_slave_0 removed [ 508.455642][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.466123][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.476180][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.486704][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.496725][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.507232][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.517042][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.527587][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.537470][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.548029][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.557841][T29070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.568372][T29070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.579156][T29070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.591856][T29070] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.600661][T29070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.609457][T29070] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.618375][T29070] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.637909][T29115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 508.647081][T29115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 508.658348][T29115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 508.667435][T29115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 508.712502][T29115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.727018][T29115] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.739372][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.746581][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.763319][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.771412][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.783426][T29198] __nla_validate_parse: 4 callbacks suppressed [ 508.783442][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7782'. [ 508.811344][T29115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 508.821860][T29115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 508.848217][T29202] loop3: detected capacity change from 0 to 128 [ 508.858652][T29202] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 508.882371][T29115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.988587][T29115] veth0_vlan: entered promiscuous mode [ 509.000050][T29115] veth1_vlan: entered promiscuous mode [ 509.014026][T29115] veth0_macvtap: entered promiscuous mode [ 509.023777][T29115] veth1_macvtap: entered promiscuous mode [ 509.034599][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.045125][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.054979][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.065423][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.075353][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.085930][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.095750][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.106160][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.115969][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.126509][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.136329][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.146746][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.156598][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.167154][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.178174][T29115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.189148][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.199627][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.209479][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.219913][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.229722][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.240147][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.250071][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.260585][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.270461][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.280870][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.290739][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.301201][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.311035][T29115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.321646][T29115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.332473][T29115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.353253][T29115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.362020][T29115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.370855][T29115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.379607][T29115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.397346][T29223] loop2: detected capacity change from 0 to 2048 [ 509.427120][T29223] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 509.442171][T29223] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 509.454653][T29223] EXT4-fs (loop2): This should not happen!! Data will be lost [ 509.454653][T29223] [ 509.464327][T29223] EXT4-fs (loop2): Total free blocks count 0 [ 509.470299][T29223] EXT4-fs (loop2): Free/Dirty block details [ 509.476215][T29223] EXT4-fs (loop2): free_blocks=2415919104 [ 509.481913][T29223] EXT4-fs (loop2): dirty_blocks=16 [ 509.487121][T29223] EXT4-fs (loop2): Block reservation details [ 509.493098][T29223] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 509.521189][ T29] audit: type=1400 audit(1720909237.375:5590): avc: denied { getattr } for pid=29227 comm="syz.0.7786" path="socket:[141076]" dev="sockfs" ino=141076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 509.574617][T29238] loop4: detected capacity change from 0 to 1024 [ 509.591025][T29241] loop2: detected capacity change from 0 to 1024 [ 509.598426][T29244] x_tables: duplicate underflow at hook 2 [ 509.687272][T29255] loop4: detected capacity change from 0 to 2048 [ 509.781910][T29270] loop3: detected capacity change from 0 to 512 [ 509.789847][T29270] journal_path: Lookup failure for './file1' [ 509.795909][T29270] EXT4-fs: error: could not find journal device path [ 509.828898][T29270] loop3: detected capacity change from 0 to 1024 [ 509.876734][T29270] vhci_hcd: invalid port number 97 [ 509.881895][T29270] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 509.884917][ T29] audit: type=1400 audit(1720909237.735:5591): avc: denied { execute } for pid=29280 comm="syz.0.7806" path="/251/file0/bus" dev="hugetlbfs" ino=141164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 509.890148][T29283] loop4: detected capacity change from 0 to 1024 [ 509.937506][T29290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7809'. [ 509.946530][T29290] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7809'. [ 509.955506][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7809'. [ 509.998634][T29296] loop3: detected capacity change from 0 to 1024 [ 510.004990][T29295] can: request_module (can-proto-4) failed. [ 510.011494][T29296] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 510.011535][T29296] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 510.021643][T29295] netlink: 'syz.0.7812': attribute type 10 has an invalid length. [ 510.042206][T29296] EXT4-fs (loop3): invalid journal inode [ 510.048223][T29296] EXT4-fs (loop3): can't get journal size [ 510.058857][T29296] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.7810: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 510.059088][T29296] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.7810: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 510.102434][T29295] bond0: (slave netdevsim1): Releasing backup interface [ 510.110007][T29295] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 510.111357][T29295] team0: Port device netdevsim1 added [ 510.125686][T29302] netlink: 'syz.0.7812': attribute type 10 has an invalid length. [ 510.141445][T29302] team0: Port device netdevsim1 removed [ 510.142876][T29302] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 510.155456][T29302] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 510.169335][ T3192] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.239439][T29320] loop3: detected capacity change from 0 to 1024 [ 510.281406][ T29] audit: type=1400 audit(1720909238.135:5592): avc: denied { read } for pid=29332 comm="syz.4.7821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 510.360031][T29336] delete_channel: no stack [ 510.395277][T29300] chnl_net:caif_netlink_parms(): no params data found [ 510.438123][T29347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7827'. [ 510.495864][T29300] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.502956][T29300] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.515275][T29300] bridge_slave_0: entered allmulticast mode [ 510.526253][T29300] bridge_slave_0: entered promiscuous mode [ 510.539897][T29354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7829'. [ 510.553552][T29300] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.560663][T29300] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.580134][T29359] loop4: detected capacity change from 0 to 1024 [ 510.600535][T29300] bridge_slave_1: entered allmulticast mode [ 510.621417][T29300] bridge_slave_1: entered promiscuous mode [ 510.632435][ T3192] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.662830][ T29] audit: type=1400 audit(1720909238.515:5593): avc: denied { create } for pid=29362 comm="syz.2.7832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 510.662853][ T29] audit: type=1400 audit(1720909238.515:5594): avc: denied { bind } for pid=29362 comm="syz.2.7832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 510.662871][ T29] audit: type=1400 audit(1720909238.515:5595): avc: denied { write } for pid=29362 comm="syz.2.7832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 510.664620][T29363] netlink: 'syz.2.7832': attribute type 10 has an invalid length. [ 510.709311][T29363] bond0: (slave netdevsim1): Releasing backup interface [ 510.710849][T29363] team0: Port device netdevsim1 added [ 510.712881][T29343] loop3: detected capacity change from 0 to 65536 [ 510.744143][T29365] netlink: 'syz.0.7833': attribute type 10 has an invalid length. [ 510.775523][T29365] bond0: (slave netdevsim1): Releasing backup interface [ 510.782859][T29365] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 510.784201][T29365] team0: Port device netdevsim1 added [ 510.796305][T29365] FAULT_INJECTION: forcing a failure. [ 510.796305][T29365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.796325][T29365] CPU: 0 PID: 29365 Comm: syz.0.7833 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 510.796348][T29365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 510.829567][T29365] Call Trace: [ 510.832847][T29365] [ 510.832856][T29365] dump_stack_lvl+0xf2/0x150 [ 510.840390][T29365] dump_stack+0x15/0x20 [ 510.840422][T29365] should_fail_ex+0x229/0x230 [ 510.840448][T29365] should_fail+0xb/0x10 [ 510.840542][T29365] should_fail_usercopy+0x1a/0x20 [ 510.840592][T29365] _copy_from_iter+0xd3/0xb00 [ 510.863292][T29365] ? kmalloc_reserve+0x16e/0x190 [ 510.863320][T29365] ? __build_skb_around+0x196/0x1f0 [ 510.863342][T29365] ? __alloc_skb+0x217/0x300 [ 510.863360][T29365] ? __virt_addr_valid+0x1ed/0x250 [ 510.863379][T29365] ? __check_object_size+0x35b/0x510 [ 510.888530][T29365] netlink_sendmsg+0x460/0x6e0 [ 510.888558][T29365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.888575][T29365] __sock_sendmsg+0x140/0x180 [ 510.888593][T29365] ____sys_sendmsg+0x312/0x410 [ 510.888703][T29365] __sys_sendmsg+0x1e9/0x280 [ 510.888735][T29365] __x64_sys_sendmsg+0x46/0x50 [ 510.888764][T29365] x64_sys_call+0xb25/0x2d70 [ 510.888853][T29365] do_syscall_64+0xc9/0x1c0 [ 510.888890][T29365] ? clear_bhb_loop+0x55/0xb0 [ 510.888918][T29365] ? clear_bhb_loop+0x55/0xb0 [ 510.888940][T29365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.889010][T29365] RIP: 0033:0x7f6fd8672bd9 [ 510.889096][T29365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.889135][T29365] RSP: 002b:00007f6fd78f4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.889155][T29365] RAX: ffffffffffffffda RBX: 00007f6fd8800f60 RCX: 00007f6fd8672bd9 [ 510.889169][T29365] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000007 [ 510.889201][T29365] RBP: 00007f6fd78f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 510.889212][T29365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.889222][T29365] R13: 000000000000000b R14: 00007f6fd8800f60 R15: 00007ffe0e60c288 [ 510.889236][T29365] [ 510.917952][ T3192] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.919442][T29363] netlink: 'syz.2.7832': attribute type 10 has an invalid length. [ 510.929393][T29363] team0: Port device netdevsim1 removed [ 510.931610][T29363] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 510.933280][T29300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.940488][T29300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.942632][T29343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7822'. [ 511.041675][T29300] team0: Port device team_slave_0 added [ 511.147103][ T3192] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.160612][T29300] team0: Port device team_slave_1 added [ 511.178159][ T29] audit: type=1400 audit(1720909239.035:5596): avc: denied { listen } for pid=29374 comm="syz.2.7836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 511.245578][T29300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.252556][T29300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.278542][T29300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.290327][T29378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7834'. [ 511.506101][T29300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.513063][T29300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.539025][T29300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.544922][T29391] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7841'. [ 511.572555][T29300] hsr_slave_0: entered promiscuous mode [ 511.580535][T29300] hsr_slave_1: entered promiscuous mode [ 511.586869][T29300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.596143][T29300] Cannot create hsr debugfs directory [ 511.604711][ T29] audit: type=1400 audit(1720909239.455:5597): avc: denied { unmount } for pid=29070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 511.646507][T29391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7841'. [ 511.659257][T29391] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 511.695528][T29397] x_tables: duplicate underflow at hook 2 [ 511.701518][ T3192] bridge_slave_1: left allmulticast mode [ 511.707194][ T3192] bridge_slave_1: left promiscuous mode [ 511.712829][ T3192] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.723671][ T3192] bridge_slave_0: left allmulticast mode [ 511.729545][ T3192] bridge_slave_0: left promiscuous mode [ 511.735287][ T3192] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.809393][T29403] SET target dimension over the limit! [ 511.919601][ T3192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.935312][ T3192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.947185][ T3192] bond0 (unregistering): Released all slaves [ 512.057947][ T3192] hsr_slave_0: left promiscuous mode [ 512.066994][ T3192] hsr_slave_1: left promiscuous mode [ 512.082341][ T3192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.089966][ T3192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.114944][ T3192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.122431][ T3192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.154033][ T3192] veth1_macvtap: left promiscuous mode [ 512.159549][ T3192] veth0_macvtap: left promiscuous mode [ 512.165253][ T3192] veth1_vlan: left promiscuous mode [ 512.170492][ T3192] veth0_vlan: left promiscuous mode [ 512.182780][T29419] loop2: detected capacity change from 0 to 1024 [ 512.201939][T29417] loop3: detected capacity change from 0 to 2048 [ 512.226277][T29417] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 512.274015][T29417] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 512.286736][T29417] EXT4-fs (loop3): This should not happen!! Data will be lost [ 512.286736][T29417] [ 512.296433][T29417] EXT4-fs (loop3): Total free blocks count 0 [ 512.302543][T29417] EXT4-fs (loop3): Free/Dirty block details [ 512.308465][T29417] EXT4-fs (loop3): free_blocks=2415919104 [ 512.314198][T29417] EXT4-fs (loop3): dirty_blocks=16 [ 512.319337][T29417] EXT4-fs (loop3): Block reservation details [ 512.325339][T29417] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 512.449450][T29428] 9pnet_fd: p9_fd_create_tcp (29428): problem binding to privport [ 512.474301][ T3192] team0 (unregistering): Port device team_slave_1 removed [ 512.494646][ T3192] team0 (unregistering): Port device team_slave_0 removed [ 512.571865][T29438] loop2: detected capacity change from 0 to 1024 [ 512.578206][T29443] netlink: 'syz.4.7859': attribute type 4 has an invalid length. [ 512.601987][T29443] loop4: detected capacity change from 0 to 2048 [ 512.611264][T29443] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 512.649565][T29443] loop4: detected capacity change from 0 to 512 [ 512.656626][T29452] loop3: detected capacity change from 0 to 2048 [ 512.665920][T29443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 512.666376][T29443] EXT4-fs (loop4): orphan cleanup on readonly fs [ 512.677494][T29452] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 512.681265][T29452] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 512.681314][T29452] EXT4-fs (loop3): This should not happen!! Data will be lost [ 512.681314][T29452] [ 512.681324][T29452] EXT4-fs (loop3): Total free blocks count 0 [ 512.681335][T29452] EXT4-fs (loop3): Free/Dirty block details [ 512.681400][T29452] EXT4-fs (loop3): free_blocks=2415919104 [ 512.681412][T29452] EXT4-fs (loop3): dirty_blocks=16 [ 512.681422][T29452] EXT4-fs (loop3): Block reservation details [ 512.681433][T29452] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 512.682215][T29443] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7859: bg 0: block 248: padding at end of block bitmap is not set [ 512.771284][T29443] Quota error (device loop4): write_blk: dquota write failed [ 512.771338][T29443] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 512.788879][T29443] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.7859: Failed to acquire dquot type 1 [ 512.802254][T29443] EXT4-fs (loop4): 1 truncate cleaned up [ 512.905580][T29300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.916894][T29300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.927505][T29300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.939061][T29300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.021075][T29300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.036994][T29300] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.046717][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.053889][ T3894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.085935][T29300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.096443][T29300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.110401][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.117521][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.191546][T29300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.327810][T29300] veth0_vlan: entered promiscuous mode [ 513.347611][T29300] veth1_vlan: entered promiscuous mode [ 513.372165][T29300] veth0_macvtap: entered promiscuous mode [ 513.395285][T29300] veth1_macvtap: entered promiscuous mode [ 513.418960][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.429610][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.439449][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.449935][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.459801][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.470426][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.480283][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.491073][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.493705][T29500] SET target dimension over the limit! [ 513.500905][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.500924][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.500944][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.500955][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.547291][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.557788][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.570084][T29300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.581628][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.592178][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.595252][T29478] loop4: detected capacity change from 0 to 65536 [ 513.602015][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.618829][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.628714][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.639160][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.649303][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.649323][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.649338][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.649350][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.649368][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.700403][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.700423][T29300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.721050][T29300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.723495][T29300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.740617][T29300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.749377][T29300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.758321][T29300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.758357][T29300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.812737][T29514] __nla_validate_parse: 9 callbacks suppressed [ 513.812752][T29514] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7879'. [ 513.870880][T29516] loop3: detected capacity change from 0 to 128 [ 513.877246][T29518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7814'. [ 513.882826][T29516] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 513.886413][T29518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7814'. [ 513.943102][T29522] netlink: 41 bytes leftover after parsing attributes in process `syz.1.7882'. [ 513.952265][T29522] netlink: 41 bytes leftover after parsing attributes in process `syz.1.7882'. [ 513.964094][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7870'. [ 513.972865][T29525] SET target dimension over the limit! [ 514.010893][T29531] loop2: detected capacity change from 0 to 256 [ 514.019245][T29531] FAT-fs (loop2): Unrecognized mount option "uni_x" or missing value [ 514.026393][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7889'. [ 514.066916][T29548] loop3: detected capacity change from 0 to 128 [ 514.084186][T29548] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 514.096266][T29550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7892'. [ 514.105327][T29550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7892'. [ 514.166007][T29557] SET target dimension over the limit! [ 515.044939][T29563] FAULT_INJECTION: forcing a failure. [ 515.044939][T29563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 515.058264][T29563] CPU: 0 PID: 29563 Comm: syz.2.7899 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 515.068466][T29563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 515.078530][T29563] Call Trace: [ 515.081808][T29563] [ 515.084778][T29563] dump_stack_lvl+0xf2/0x150 [ 515.089384][T29563] dump_stack+0x15/0x20 [ 515.093555][T29563] should_fail_ex+0x229/0x230 [ 515.098233][T29563] __should_fail_alloc_page+0xfd/0x110 [ 515.103743][T29563] __alloc_pages_noprof+0x109/0x360 [ 515.108980][T29563] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 515.114400][T29563] vma_alloc_folio_noprof+0x176/0x2d0 [ 515.119883][T29563] handle_mm_fault+0xddb/0x2ac0 [ 515.124752][T29563] exc_page_fault+0x3b9/0x650 [ 515.129469][T29563] asm_exc_page_fault+0x26/0x30 [ 515.134358][T29563] RIP: 0033:0x7f96f1554f9b [ 515.138781][T29563] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 515.158433][T29563] RSP: 002b:00007f96f0826e20 EFLAGS: 00010246 [ 515.164507][T29563] RAX: 00007f96f0828f40 RBX: 00007f96f1706620 RCX: 0000000000000000 [ 515.172487][T29563] RDX: 00007f96f0828f88 RSI: 00007f96f16067f8 RDI: 00007f96f0826e40 [ 515.180469][T29563] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 515.188479][T29563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.196498][T29563] R13: 000000000000000b R14: 00007f96f1735f60 R15: 00007ffc4da49c38 [ 515.204483][T29563] [ 515.207675][T29563] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 515.241998][T29587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7906'. [ 515.289235][T29592] FAULT_INJECTION: forcing a failure. [ 515.289235][T29592] name failslab, interval 1, probability 0, space 0, times 0 [ 515.301911][T29592] CPU: 1 PID: 29592 Comm: syz.3.7908 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 515.307200][ T29] audit: type=1400 audit(1720909499.167:5598): avc: denied { unlink } for pid=29300 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 515.312051][T29592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 515.312063][T29592] Call Trace: [ 515.312069][T29592] [ 515.312075][T29592] dump_stack_lvl+0xf2/0x150 [ 515.368013][T29592] dump_stack+0x15/0x20 [ 515.372226][T29592] should_fail_ex+0x229/0x230 [ 515.376917][T29592] ? __alloc_skb+0x10b/0x300 [ 515.381557][T29592] __should_failslab+0x92/0xa0 [ 515.386316][T29592] should_failslab+0x9/0x20 [ 515.390879][T29592] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 515.396748][T29592] __alloc_skb+0x10b/0x300 [ 515.401161][T29592] alloc_skb_with_frags+0x7f/0x400 [ 515.406330][T29592] ? mntput_no_expire+0x70/0x3c0 [ 515.411259][T29592] ? should_fail_ex+0xd7/0x230 [ 515.416014][T29592] sock_alloc_send_pskb+0x435/0x4f0 [ 515.421215][T29592] ? path_openat+0x1a6f/0x1fa0 [ 515.425980][T29592] tun_get_user+0xb6d/0x23b0 [ 515.430569][T29592] ? selinux_file_permission+0x22c/0x360 [ 515.436253][T29592] tun_chr_write_iter+0x18e/0x240 [ 515.441274][T29592] vfs_write+0x78f/0x900 [ 515.445518][T29592] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 515.451147][T29592] ksys_write+0xeb/0x1b0 [ 515.455508][T29592] __x64_sys_write+0x42/0x50 [ 515.460116][T29592] x64_sys_call+0x27ef/0x2d70 [ 515.464830][T29592] do_syscall_64+0xc9/0x1c0 [ 515.469420][T29592] ? clear_bhb_loop+0x55/0xb0 [ 515.474094][T29592] ? clear_bhb_loop+0x55/0xb0 [ 515.478765][T29592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.484727][T29592] RIP: 0033:0x7fbb99cd6bd9 [ 515.489144][T29592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.508796][T29592] RSP: 002b:00007fbb98f58048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 515.517202][T29592] RAX: ffffffffffffffda RBX: 00007fbb99e64f60 RCX: 00007fbb99cd6bd9 [ 515.525167][T29592] RDX: 000000000000fdef RSI: 0000000020000240 RDI: 0000000000000010 [ 515.533131][T29592] RBP: 00007fbb98f580a0 R08: 0000000000000000 R09: 0000000000000000 [ 515.541094][T29592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.549055][T29592] R13: 000000000000000b R14: 00007fbb99e64f60 R15: 00007ffd3317d618 [ 515.557022][T29592] [ 515.626680][T29603] x_tables: duplicate underflow at hook 3 [ 515.650574][ T29] audit: type=1400 audit(1720909499.507:5599): avc: denied { nlmsg_write } for pid=29602 comm="syz.2.7911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 515.651238][T29603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29603 comm=syz.2.7911 [ 515.685394][ T29] audit: type=1400 audit(1720909499.547:5600): avc: denied { read } for pid=29602 comm="syz.2.7911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 515.745124][ T29] audit: type=1400 audit(1720909499.597:5601): avc: denied { setattr } for pid=29609 comm="syz.4.7913" name="" dev="pipefs" ino=140235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 515.893019][ T29] audit: type=1400 audit(1720909499.747:5602): avc: denied { setopt } for pid=29626 comm="syz.2.7920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 516.227901][T29640] FAULT_INJECTION: forcing a failure. [ 516.227901][T29640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.241046][T29640] CPU: 1 PID: 29640 Comm: syz.2.7925 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 516.251261][T29640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 516.261404][T29640] Call Trace: [ 516.264680][T29640] [ 516.267606][T29640] dump_stack_lvl+0xf2/0x150 [ 516.272265][T29640] dump_stack+0x15/0x20 [ 516.276431][T29640] should_fail_ex+0x229/0x230 [ 516.281119][T29640] should_fail+0xb/0x10 [ 516.285373][T29640] should_fail_usercopy+0x1a/0x20 [ 516.290397][T29640] _copy_to_user+0x1e/0xa0 [ 516.294877][T29640] simple_read_from_buffer+0xa0/0x110 [ 516.300357][T29640] proc_fail_nth_read+0xfc/0x140 [ 516.305319][T29640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.310933][T29640] vfs_read+0x1a2/0x6e0 [ 516.315107][T29640] ? __rcu_read_unlock+0x4e/0x70 [ 516.320155][T29640] ? __fget_files+0x1da/0x210 [ 516.324913][T29640] ksys_read+0xeb/0x1b0 [ 516.329164][T29640] __x64_sys_read+0x42/0x50 [ 516.333666][T29640] x64_sys_call+0x27e5/0x2d70 [ 516.338340][T29640] do_syscall_64+0xc9/0x1c0 [ 516.342931][T29640] ? clear_bhb_loop+0x55/0xb0 [ 516.347676][T29640] ? clear_bhb_loop+0x55/0xb0 [ 516.352355][T29640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.358294][T29640] RIP: 0033:0x7f96f15a66bc [ 516.362709][T29640] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 516.371495][T29598] loop1: detected capacity change from 0 to 65536 [ 516.382325][T29640] RSP: 002b:00007f96f0829040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.382344][T29640] RAX: ffffffffffffffda RBX: 00007f96f1735f60 RCX: 00007f96f15a66bc [ 516.405162][T29640] RDX: 000000000000000f RSI: 00007f96f08290b0 RDI: 0000000000000004 [ 516.413141][T29640] RBP: 00007f96f08290a0 R08: 0000000000000000 R09: 0000000000000000 [ 516.421166][T29640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.429166][T29640] R13: 000000000000000b R14: 00007f96f1735f60 R15: 00007ffc4da49c38 [ 516.437130][T29640] [ 516.461615][T29641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.470848][ T29] audit: type=1400 audit(1720909500.327:5603): avc: denied { write } for pid=29651 comm="syz.4.7929" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 516.495091][ T29] audit: type=1400 audit(1720909500.327:5604): avc: denied { open } for pid=29651 comm="syz.4.7929" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 516.527952][T29648] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 516.594925][T29658] loop2: detected capacity change from 0 to 2048 [ 516.611374][T29658] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz.2.7930: casefold flag without casefold feature [ 516.646112][T29658] EXT4-fs (loop2): get root inode failed [ 516.651782][T29658] EXT4-fs (loop2): mount failed [ 516.760455][ T3155] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 516.768782][ T3155] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 516.823359][T29701] loop1: detected capacity change from 0 to 1024 [ 516.862440][T29710] loop3: detected capacity change from 0 to 164 [ 516.980011][T29730] loop3: detected capacity change from 0 to 2048 [ 517.024307][T29730] loop3: p1 < > p4 [ 517.028667][T29730] loop3: p4 size 8388608 extends beyond EOD, truncated [ 517.037285][ T29] audit: type=1400 audit(1720909500.897:5605): avc: denied { read write } for pid=29729 comm="syz.3.7956" name="loop3p4" dev="devtmpfs" ino=1403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 517.060932][ T29] audit: type=1400 audit(1720909500.897:5606): avc: denied { open } for pid=29729 comm="syz.3.7956" path="/dev/loop3p4" dev="devtmpfs" ino=1403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 517.206008][T29734] loop3: detected capacity change from 0 to 1024 [ 517.432482][ T29] audit: type=1326 audit(1720909501.287:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29741 comm="syz.2.7960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f15a7bd9 code=0x0 [ 517.507794][T29744] loop4: detected capacity change from 0 to 256 [ 517.556628][T29744] loop4: detected capacity change from 0 to 512 [ 517.563466][T29744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 517.574719][T29744] EXT4-fs (loop4): 1 truncate cleaned up [ 517.586527][T29744] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.7961: corrupted in-inode xattr: overlapping e_value [ 517.600720][T29744] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz.4.7961: unable to update i_inline_off [ 517.613519][T29744] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.7961: corrupted in-inode xattr: overlapping e_value [ 517.788870][T29763] loop4: detected capacity change from 0 to 1024 [ 517.839244][T29777] x_tables: duplicate underflow at hook 2 [ 518.001387][T29798] can: request_module (can-proto-0) failed. [ 518.056843][T29804] loop1: detected capacity change from 0 to 128 [ 518.063786][T29804] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 518.113140][T28400] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 518.268871][T29820] x_tables: duplicate underflow at hook 2 [ 518.336933][T29829] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 518.361647][T29831] loop2: detected capacity change from 0 to 128 [ 518.368519][T29831] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 518.501970][T29848] loop3: detected capacity change from 0 to 512 [ 518.510956][T29848] EXT4-fs: Ignoring removed nobh option [ 518.522990][T29848] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 518.540553][T29848] EXT4-fs (loop3): 1 truncate cleaned up [ 518.542931][T29857] loop2: detected capacity change from 0 to 128 [ 518.552988][T29857] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 518.555097][T29856] loop1: detected capacity change from 0 to 512 [ 518.597770][T29856] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.612865][T29861] loop3: detected capacity change from 0 to 2048 [ 518.667176][T29861] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 518.683786][T29861] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 518.696811][T29861] EXT4-fs (loop3): This should not happen!! Data will be lost [ 518.696811][T29861] [ 518.706467][T29861] EXT4-fs (loop3): Total free blocks count 0 [ 518.712487][T29861] EXT4-fs (loop3): Free/Dirty block details [ 518.718387][T29861] EXT4-fs (loop3): free_blocks=2415919104 [ 518.724131][T29861] EXT4-fs (loop3): dirty_blocks=16 [ 518.729252][T29861] EXT4-fs (loop3): Block reservation details [ 518.735407][T29861] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 518.780919][T29873] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 518.795021][T29875] loop4: detected capacity change from 0 to 1764 [ 518.838408][T29885] bond0: option mode: unable to set because the bond device has slaves [ 518.874215][T29887] loop1: detected capacity change from 0 to 128 [ 518.884988][T29887] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 518.902258][T29898] loop4: detected capacity change from 0 to 512 [ 518.930599][T29898] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.935944][T29908] loop2: detected capacity change from 0 to 1024 [ 518.950001][T29898] FAULT_INJECTION: forcing a failure. [ 518.950001][T29898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.950025][T29898] CPU: 1 PID: 29898 Comm: syz.4.8019 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 518.950048][T29898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 518.950059][T29898] Call Trace: [ 518.950066][T29898] [ 518.950072][T29898] dump_stack_lvl+0xf2/0x150 [ 518.950134][T29898] dump_stack+0x15/0x20 [ 518.950161][T29898] should_fail_ex+0x229/0x230 [ 518.950184][T29898] should_fail+0xb/0x10 [ 518.950204][T29898] should_fail_usercopy+0x1a/0x20 [ 518.950330][T29898] _copy_from_iter+0xd3/0xb00 [ 518.950349][T29898] ? kernel_fpu_begin_mask+0x19d/0x200 [ 518.950376][T29898] ? kernel_fpu_end+0x5e/0x80 [ 518.950473][T29898] ? blake2s_compress+0xab/0xd0 [ 518.950501][T29898] ? blake2s_update+0x120/0x140 [ 518.950522][T29898] write_pool_user+0x80/0x1e0 [ 518.950589][T29898] ? import_ubuf+0xe9/0x120 [ 518.950613][T29898] random_ioctl+0x2c6/0x3f0 [ 518.950639][T29898] ? __pfx_random_ioctl+0x10/0x10 [ 518.950664][T29898] __se_sys_ioctl+0xd3/0x150 [ 518.950724][T29898] __x64_sys_ioctl+0x43/0x50 [ 518.950749][T29898] x64_sys_call+0x1581/0x2d70 [ 518.950776][T29898] do_syscall_64+0xc9/0x1c0 [ 518.950804][T29898] ? clear_bhb_loop+0x55/0xb0 [ 518.950888][T29898] ? clear_bhb_loop+0x55/0xb0 [ 518.950911][T29898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.950934][T29898] RIP: 0033:0x7f910c293bd9 [ 519.093674][T29898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.113274][T29898] RSP: 002b:00007f910b515048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.121723][T29898] RAX: ffffffffffffffda RBX: 00007f910c421f60 RCX: 00007f910c293bd9 [ 519.129731][T29898] RDX: 0000000020000000 RSI: 0000000040085203 RDI: 000000000000000a [ 519.137716][T29898] RBP: 00007f910b5150a0 R08: 0000000000000000 R09: 0000000000000000 [ 519.145716][T29898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.153677][T29898] R13: 000000000000000b R14: 00007f910c421f60 R15: 00007ffd390e54c8 [ 519.161675][T29898] [ 519.170742][T29910] __nla_validate_parse: 23 callbacks suppressed [ 519.170828][T29910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8021'. [ 519.196561][T29914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8023'. [ 519.205622][T29914] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8023'. [ 519.239020][T29918] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8026'. [ 519.290900][T29916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8024'. [ 519.321057][T29925] loop3: detected capacity change from 0 to 1024 [ 519.328011][T29921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8025'. [ 519.409185][T29934] SET target dimension over the limit! [ 519.438070][T29940] FAULT_INJECTION: forcing a failure. [ 519.438070][T29940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.451228][T29940] CPU: 1 PID: 29940 Comm: syz.0.8034 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 519.461362][T29940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 519.471475][T29940] Call Trace: [ 519.474817][T29940] [ 519.477781][T29940] dump_stack_lvl+0xf2/0x150 [ 519.482465][T29940] dump_stack+0x15/0x20 [ 519.486605][T29940] should_fail_ex+0x229/0x230 [ 519.491277][T29940] should_fail+0xb/0x10 [ 519.495414][T29940] should_fail_usercopy+0x1a/0x20 [ 519.500463][T29940] _copy_to_user+0x1e/0xa0 [ 519.504874][T29940] simple_read_from_buffer+0xa0/0x110 [ 519.510297][T29940] proc_fail_nth_read+0xfc/0x140 [ 519.515264][T29940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.520792][T29940] vfs_read+0x1a2/0x6e0 [ 519.524991][T29940] ? __rcu_read_unlock+0x4e/0x70 [ 519.529918][T29940] ? __fget_files+0x1da/0x210 [ 519.534587][T29940] ksys_read+0xeb/0x1b0 [ 519.538785][T29940] __x64_sys_read+0x42/0x50 [ 519.543315][T29940] x64_sys_call+0x27e5/0x2d70 [ 519.547975][T29940] do_syscall_64+0xc9/0x1c0 [ 519.552460][T29940] ? clear_bhb_loop+0x55/0xb0 [ 519.557175][T29940] ? clear_bhb_loop+0x55/0xb0 [ 519.561936][T29940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.567909][T29940] RIP: 0033:0x7f6fd86716bc [ 519.572376][T29940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 519.591997][T29940] RSP: 002b:00007f6fd78f4040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.600490][T29940] RAX: ffffffffffffffda RBX: 00007f6fd8800f60 RCX: 00007f6fd86716bc [ 519.606244][T29948] loop4: detected capacity change from 0 to 1764 [ 519.608452][T29940] RDX: 000000000000000f RSI: 00007f6fd78f40b0 RDI: 0000000000000005 [ 519.608469][T29940] RBP: 00007f6fd78f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 519.622709][T29940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.622724][T29940] R13: 000000000000000b R14: 00007f6fd8800f60 R15: 00007ffe0e60c288 [ 519.646661][T29940] [ 519.660310][T29951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8039'. [ 519.700161][T29948] netlink: 'syz.4.8038': attribute type 10 has an invalid length. [ 519.711652][T29948] team0: Device veth1_macvtap failed to register rx_handler [ 519.733485][T29948] loop4: detected capacity change from 0 to 512 [ 519.741017][T29948] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 519.751759][T29948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 519.759724][T29948] System zones: 1-12 [ 519.765216][T29948] EXT4-fs (loop4): 1 truncate cleaned up [ 519.829549][T29961] x_tables: duplicate underflow at hook 1 [ 519.875743][T29967] loop4: detected capacity change from 0 to 2048 [ 519.963476][T29983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8047'. [ 519.972935][T29983] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8047'. [ 519.996523][T29981] 9pnet_fd: Insufficient options for proto=fd [ 520.003426][T29981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8051'. [ 520.310957][T30013] loop3: detected capacity change from 0 to 1024 [ 520.319822][T30013] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 520.338191][T30013] 9pnet: Could not find request transport: ofdno=A t3 Q>l* [ 520.338191][T30013] ?QVZe [ 520.338191][T30013] m<^^|=% i4*|ϛ+TV [ 520.378855][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 520.378868][ T29] audit: type=1326 audit(1720909504.237:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f15a7bd9 code=0x7ffc0000 [ 520.409127][ T29] audit: type=1326 audit(1720909504.237:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f15a7bd9 code=0x7ffc0000 [ 520.417790][T30013] loop3: detected capacity change from 1024 to 0 [ 520.432690][ T29] audit: type=1326 audit(1720909504.237:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f15a7bd9 code=0x7ffc0000 [ 520.462681][ T29] audit: type=1326 audit(1720909504.247:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f15a7bd9 code=0x7ffc0000 [ 520.472134][T30026] bio_check_eod: 47 callbacks suppressed [ 520.472149][T30026] syz.3.8062: attempt to access beyond end of device [ 520.472149][T30026] loop3: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 520.486437][ T29] audit: type=1326 audit(1720909504.247:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f15a7bd9 code=0x7ffc0000 [ 520.495672][T30030] loop1: detected capacity change from 0 to 128 [ 520.505280][ T29] audit: type=1326 audit(1720909504.247:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f15a7bd9 code=0x7ffc0000 [ 520.541415][T30026] syz.3.8062: attempt to access beyond end of device [ 520.541415][T30026] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 520.559371][ T29] audit: type=1326 audit(1720909504.397:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f15a7bd9 code=0x7ffc0000 [ 520.595320][ T29] audit: type=1326 audit(1720909504.397:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96f159ec27 code=0x7ffc0000 [ 520.606141][T30025] loop2: detected capacity change from 0 to 1024 [ 520.619241][ T29] audit: type=1326 audit(1720909504.397:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96f15435d9 code=0x7ffc0000 [ 520.632702][T30026] syz.3.8062: attempt to access beyond end of device [ 520.632702][T30026] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 520.649101][ T29] audit: type=1326 audit(1720909504.397:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30024 comm="syz.2.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96f15a7bd9 code=0x7ffc0000 [ 520.663912][T30026] syz.3.8062: attempt to access beyond end of device [ 520.663912][T30026] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 520.705343][T30026] syz.3.8062: attempt to access beyond end of device [ 520.705343][T30026] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 520.719815][T30026] syz.3.8062: attempt to access beyond end of device [ 520.719815][T30026] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 520.733854][T30026] syz.3.8062: attempt to access beyond end of device [ 520.733854][T30026] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 520.748351][T30026] syz.3.8062: attempt to access beyond end of device [ 520.748351][T30026] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 520.749508][ T3192] kworker/u8:7: attempt to access beyond end of device [ 520.749508][ T3192] loop1: rw=1, sector=553, nr_sectors = 488 limit=128 [ 520.761713][T30026] syz.3.8062: attempt to access beyond end of device [ 520.761713][T30026] loop3: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 520.789276][T30026] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #12: block 7: comm syz.3.8062: unable to read itable block [ 520.802664][T30026] buffer_io_error: 1 callbacks suppressed [ 520.802736][T30026] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 520.817086][T30026] EXT4-fs (loop3): I/O error while writing superblock [ 520.823852][T30026] EXT4-fs (loop3): Remounting filesystem read-only [ 520.849324][T30039] loop1: detected capacity change from 0 to 1024 [ 520.859333][T30016] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 520.908648][T30044] loop2: detected capacity change from 0 to 4096 [ 520.975444][T30052] syz_tun: entered promiscuous mode [ 520.982427][T30052] syz_tun: left promiscuous mode [ 521.026449][T30054] FAULT_INJECTION: forcing a failure. [ 521.026449][T30054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 521.039870][T30054] CPU: 0 PID: 30054 Comm: syz.0.8075 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 521.050080][T30054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 521.060226][T30054] Call Trace: [ 521.063498][T30054] [ 521.066419][T30054] dump_stack_lvl+0xf2/0x150 [ 521.071012][T30054] dump_stack+0x15/0x20 [ 521.075204][T30054] should_fail_ex+0x229/0x230 [ 521.079900][T30054] __should_fail_alloc_page+0xfd/0x110 [ 521.085393][T30054] __alloc_pages_noprof+0x109/0x360 [ 521.090578][T30054] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 521.095970][T30054] vma_alloc_folio_noprof+0x176/0x2d0 [ 521.101395][T30054] handle_mm_fault+0xddb/0x2ac0 [ 521.106234][T30054] exc_page_fault+0x3b9/0x650 [ 521.110914][T30054] asm_exc_page_fault+0x26/0x30 [ 521.115857][T30054] RIP: 0033:0x7f6fd861ff9b [ 521.120251][T30054] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 521.139857][T30054] RSP: 002b:00007f6fd78d0e20 EFLAGS: 00010246 [ 521.145916][T30054] RAX: 00007f6fd78d2f40 RBX: 00007f6fd87d1620 RCX: 0000000000000000 [ 521.153924][T30054] RDX: 00007f6fd78d2f88 RSI: 00007f6fd86d17f8 RDI: 00007f6fd78d0e40 [ 521.161898][T30054] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 521.169878][T30054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.177829][T30054] R13: 000000000000006e R14: 00007f6fd8801038 R15: 00007ffe0e60c288 [ 521.185837][T30054] [ 521.188945][T30054] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 521.207701][T30056] SET target dimension over the limit! [ 521.312518][T28389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.334147][T30077] IPVS: set_ctl: invalid protocol: 7 255.255.255.255:20003 [ 521.341891][T30078] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 521.378089][T28389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.414446][T30092] SET target dimension over the limit! [ 521.423608][T28389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.467657][T28389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.536693][T30079] chnl_net:caif_netlink_parms(): no params data found [ 521.586774][T30079] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.594001][T30079] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.601396][T30079] bridge_slave_0: entered allmulticast mode [ 521.607851][T30079] bridge_slave_0: entered promiscuous mode [ 521.614842][T30079] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.621998][T30079] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.629309][T30079] bridge_slave_1: entered allmulticast mode [ 521.636320][T30079] bridge_slave_1: entered promiscuous mode [ 521.650123][T28389] bridge_slave_1: left allmulticast mode [ 521.656010][T28389] bridge_slave_1: left promiscuous mode [ 521.661758][T28389] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.670127][T28389] bridge_slave_0: left allmulticast mode [ 521.675923][T28389] bridge_slave_0: left promiscuous mode [ 521.681775][T28389] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.724104][T28389] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 521.787130][T28389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.797822][T28389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.808089][T28389] bond0 (unregistering): Released all slaves [ 521.816828][T28389] bond1 (unregistering): Released all slaves [ 521.825717][T28389] bond2 (unregistering): Released all slaves [ 521.859744][T30079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.870599][T30079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.896200][T30079] team0: Port device team_slave_0 added [ 521.902887][T30079] team0: Port device team_slave_1 added [ 521.918829][T30079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.925825][T30079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.951852][T30079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.964634][T28389] hsr_slave_0: left promiscuous mode [ 521.970545][T28389] hsr_slave_1: left promiscuous mode [ 521.976209][T28389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.983651][T28389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.991723][T28389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.999364][T28389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.010572][T30125] loop1: detected capacity change from 0 to 2048 [ 522.017169][T28389] veth1_macvtap: left promiscuous mode [ 522.022662][T28389] veth0_macvtap: left promiscuous mode [ 522.028354][T28389] veth1_vlan: left promiscuous mode [ 522.033621][T28389] veth0_vlan: left promiscuous mode [ 522.129095][T28389] team0 (unregistering): Port device team_slave_1 removed [ 522.139684][T28389] team0 (unregistering): Port device team_slave_0 removed [ 522.175226][T30079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.182165][T30079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.208158][T30079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.221431][T30131] FAULT_INJECTION: forcing a failure. [ 522.221431][T30131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.234553][T30131] CPU: 1 PID: 30131 Comm: syz.1.8099 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 522.244711][T30131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 522.254774][T30131] Call Trace: [ 522.258052][T30131] [ 522.260996][T30131] dump_stack_lvl+0xf2/0x150 [ 522.265667][T30131] dump_stack+0x15/0x20 [ 522.269929][T30131] should_fail_ex+0x229/0x230 [ 522.274670][T30131] should_fail+0xb/0x10 [ 522.278859][T30131] should_fail_usercopy+0x1a/0x20 [ 522.283877][T30131] _copy_from_user+0x1e/0xd0 [ 522.288474][T30131] ppp_get_filter+0x3f/0x160 [ 522.293055][T30131] ppp_ioctl+0xbe3/0x11b0 [ 522.297381][T30131] ? __pfx_ppp_ioctl+0x10/0x10 [ 522.302240][T30131] __se_sys_ioctl+0xd3/0x150 [ 522.306826][T30131] __x64_sys_ioctl+0x43/0x50 [ 522.311407][T30131] x64_sys_call+0x1581/0x2d70 [ 522.316075][T30131] do_syscall_64+0xc9/0x1c0 [ 522.320576][T30131] ? clear_bhb_loop+0x55/0xb0 [ 522.325282][T30131] ? clear_bhb_loop+0x55/0xb0 [ 522.329966][T30131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.335912][T30131] RIP: 0033:0x7fdfe6aa6bd9 [ 522.340313][T30131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.359913][T30131] RSP: 002b:00007fdfe5d07048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.368357][T30131] RAX: ffffffffffffffda RBX: 00007fdfe6c35038 RCX: 00007fdfe6aa6bd9 [ 522.376319][T30131] RDX: 0000000020000080 RSI: 0000000040107446 RDI: 0000000000000005 [ 522.384277][T30131] RBP: 00007fdfe5d070a0 R08: 0000000000000000 R09: 0000000000000000 [ 522.392272][T30131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.400337][T30131] R13: 000000000000006e R14: 00007fdfe6c35038 R15: 00007ffd16976368 [ 522.408300][T30131] [ 522.422832][T30135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 522.447918][T30079] hsr_slave_0: entered promiscuous mode [ 522.457801][T30079] hsr_slave_1: entered promiscuous mode [ 522.464956][T30079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.477192][T30079] Cannot create hsr debugfs directory [ 522.604589][T30132] chnl_net:caif_netlink_parms(): no params data found [ 522.656674][T30178] FAULT_INJECTION: forcing a failure. [ 522.656674][T30178] name failslab, interval 1, probability 0, space 0, times 0 [ 522.669370][T30178] CPU: 1 PID: 30178 Comm: syz.0.8113 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 522.679581][T30178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 522.689632][T30178] Call Trace: [ 522.692920][T30178] [ 522.695844][T30178] dump_stack_lvl+0xf2/0x150 [ 522.700460][T30178] dump_stack+0x15/0x20 [ 522.704679][T30178] should_fail_ex+0x229/0x230 [ 522.709364][T30178] ? skb_clone+0x154/0x1f0 [ 522.713804][T30178] __should_failslab+0x92/0xa0 [ 522.718576][T30178] should_failslab+0x9/0x20 [ 522.723087][T30178] kmem_cache_alloc_noprof+0x4c/0x290 [ 522.728455][T30178] skb_clone+0x154/0x1f0 [ 522.732764][T30178] __netlink_deliver_tap+0x2bd/0x4c0 [ 522.738039][T30178] netlink_unicast+0x63b/0x660 [ 522.742821][T30178] netlink_sendmsg+0x5ca/0x6e0 [ 522.747577][T30178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.752855][T30178] __sock_sendmsg+0x140/0x180 [ 522.757591][T30178] ____sys_sendmsg+0x312/0x410 [ 522.762351][T30178] __sys_sendmsg+0x1e9/0x280 [ 522.766999][T30178] __x64_sys_sendmsg+0x46/0x50 [ 522.771753][T30178] x64_sys_call+0xb25/0x2d70 [ 522.776338][T30178] do_syscall_64+0xc9/0x1c0 [ 522.780923][T30178] ? clear_bhb_loop+0x55/0xb0 [ 522.785635][T30178] ? clear_bhb_loop+0x55/0xb0 [ 522.790365][T30178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.796310][T30178] RIP: 0033:0x7f6fd8672bd9 [ 522.800711][T30178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.820364][T30178] RSP: 002b:00007f6fd78f4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.828777][T30178] RAX: ffffffffffffffda RBX: 00007f6fd8800f60 RCX: 00007f6fd8672bd9 [ 522.836750][T30178] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000d [ 522.844794][T30178] RBP: 00007f6fd78f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 522.852805][T30178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.860765][T30178] R13: 000000000000000b R14: 00007f6fd8800f60 R15: 00007ffe0e60c288 [ 522.868766][T30178] [ 522.880999][T30132] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.888133][T30132] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.895455][T30132] bridge_slave_0: entered allmulticast mode [ 522.901867][T30132] bridge_slave_0: entered promiscuous mode [ 522.918399][T30132] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.925572][T30132] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.932887][T30132] bridge_slave_1: entered allmulticast mode [ 522.939619][T30132] bridge_slave_1: entered promiscuous mode [ 522.997251][T30132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.004463][T30192] FAULT_INJECTION: forcing a failure. [ 523.004463][T30192] name failslab, interval 1, probability 0, space 0, times 0 [ 523.008670][T30132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.018866][T30192] CPU: 0 PID: 30192 Comm: syz.0.8120 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 523.018956][T30192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 523.048211][T30192] Call Trace: [ 523.051475][T30192] [ 523.054406][T30192] dump_stack_lvl+0xf2/0x150 [ 523.059019][T30192] dump_stack+0x15/0x20 [ 523.063165][T30192] should_fail_ex+0x229/0x230 [ 523.067828][T30192] ? __alloc_skb+0x10b/0x300 [ 523.072406][T30192] __should_failslab+0x92/0xa0 [ 523.077193][T30192] should_failslab+0x9/0x20 [ 523.081726][T30192] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 523.087595][T30192] __alloc_skb+0x10b/0x300 [ 523.092122][T30192] netlink_alloc_large_skb+0xad/0xe0 [ 523.097483][T30192] netlink_sendmsg+0x3b4/0x6e0 [ 523.102316][T30192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.107631][T30192] __sock_sendmsg+0x140/0x180 [ 523.112294][T30192] ____sys_sendmsg+0x312/0x410 [ 523.117084][T30192] __sys_sendmsg+0x1e9/0x280 [ 523.121728][T30192] __x64_sys_sendmsg+0x46/0x50 [ 523.126483][T30192] x64_sys_call+0xb25/0x2d70 [ 523.131157][T30192] do_syscall_64+0xc9/0x1c0 [ 523.135719][T30192] ? clear_bhb_loop+0x55/0xb0 [ 523.140465][T30192] ? clear_bhb_loop+0x55/0xb0 [ 523.145243][T30192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.151149][T30192] RIP: 0033:0x7f6fd8672bd9 [ 523.155625][T30192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.175342][T30192] RSP: 002b:00007f6fd78f4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.183740][T30192] RAX: ffffffffffffffda RBX: 00007f6fd8800f60 RCX: 00007f6fd8672bd9 [ 523.191698][T30192] RDX: 0000000000000000 RSI: 0000000020000ec0 RDI: 0000000000000003 [ 523.199805][T30192] RBP: 00007f6fd78f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 523.207779][T30192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.215736][T30192] R13: 000000000000000b R14: 00007f6fd8800f60 R15: 00007ffe0e60c288 [ 523.223695][T30192] [ 523.257590][T30132] team0: Port device team_slave_0 added [ 523.264446][T30132] team0: Port device team_slave_1 added [ 523.272341][T30197] FAULT_INJECTION: forcing a failure. [ 523.272341][T30197] name failslab, interval 1, probability 0, space 0, times 0 [ 523.285012][T30197] CPU: 1 PID: 30197 Comm: syz.0.8122 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 523.295154][T30197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 523.305204][T30197] Call Trace: [ 523.308486][T30197] [ 523.311411][T30197] dump_stack_lvl+0xf2/0x150 [ 523.316002][T30197] dump_stack+0x15/0x20 [ 523.320209][T30197] should_fail_ex+0x229/0x230 [ 523.324889][T30197] ? nla_strdup+0x7a/0xc0 [ 523.329216][T30197] __should_failslab+0x92/0xa0 [ 523.333973][T30197] should_failslab+0x9/0x20 [ 523.338539][T30197] __kmalloc_noprof+0xa5/0x370 [ 523.343297][T30197] nla_strdup+0x7a/0xc0 [ 523.347445][T30197] nf_tables_newtable+0x3e7/0xec0 [ 523.352461][T30197] nfnetlink_rcv+0xb1d/0x15b0 [ 523.357222][T30197] netlink_unicast+0x58d/0x660 [ 523.361982][T30197] netlink_sendmsg+0x5ca/0x6e0 [ 523.366734][T30197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.372002][T30197] __sock_sendmsg+0x140/0x180 [ 523.376743][T30197] ____sys_sendmsg+0x312/0x410 [ 523.381499][T30197] __sys_sendmsg+0x1e9/0x280 [ 523.386090][T30197] __x64_sys_sendmsg+0x46/0x50 [ 523.390846][T30197] x64_sys_call+0xb25/0x2d70 [ 523.395509][T30197] do_syscall_64+0xc9/0x1c0 [ 523.400143][T30197] ? clear_bhb_loop+0x55/0xb0 [ 523.404811][T30197] ? clear_bhb_loop+0x55/0xb0 [ 523.409475][T30197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.415362][T30197] RIP: 0033:0x7f6fd8672bd9 [ 523.419758][T30197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.439361][T30197] RSP: 002b:00007f6fd78f4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.447761][T30197] RAX: ffffffffffffffda RBX: 00007f6fd8800f60 RCX: 00007f6fd8672bd9 [ 523.455717][T30197] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 523.463680][T30197] RBP: 00007f6fd78f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 523.471673][T30197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.479628][T30197] R13: 000000000000000b R14: 00007f6fd8800f60 R15: 00007ffe0e60c288 [ 523.487587][T30197] [ 523.510268][T28389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.536084][T30203] loop1: detected capacity change from 0 to 512 [ 523.536447][T30132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.544147][T30203] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.8125: corrupted in-inode xattr: invalid ea_ino [ 523.549369][T30132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.565859][T30203] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.8125: couldn't read orphan inode 15 (err -117) [ 523.588590][T30132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.602416][T30203] EXT4-fs mount: 60 callbacks suppressed [ 523.602428][T30203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.612379][T30132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.635957][T30132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.661900][T30132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.683960][T28389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.697197][T30210] SET target dimension over the limit! [ 523.701721][T30079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.712555][T30079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 523.722851][T30079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 523.733552][T30079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 523.746602][T29300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.756977][T28389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.781878][T30132] hsr_slave_0: entered promiscuous mode [ 523.788101][T30132] hsr_slave_1: entered promiscuous mode [ 523.794653][T30132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.802382][T30132] Cannot create hsr debugfs directory [ 523.813642][T28389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.828598][T30214] dccp_invalid_packet: P.CsCov 3 exceeds packet length 256 [ 523.853327][T30217] syzkaller1: entered promiscuous mode [ 523.859005][T30217] syzkaller1: entered allmulticast mode [ 523.932370][T28389] bridge_slave_1: left allmulticast mode [ 523.938111][T28389] bridge_slave_1: left promiscuous mode [ 523.944013][T28389] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.954097][T28389] bridge_slave_0: left allmulticast mode [ 523.959739][T28389] bridge_slave_0: left promiscuous mode [ 523.965529][T28389] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.088434][T28389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.099026][T28389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.109755][T28389] bond0 (unregistering): Released all slaves [ 524.126080][T30234] tipc: Enabling of bearer rejected, failed to enable media [ 524.170783][T30079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.185093][T30079] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.196977][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.201825][T30245] SET target dimension over the limit! [ 524.204113][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.222699][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.225993][T30247] loop1: detected capacity change from 0 to 512 [ 524.229795][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.253283][T30247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 524.260805][T30079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.273967][T30247] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.276154][T30079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.299770][T29300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 524.312248][T30255] __nla_validate_parse: 16 callbacks suppressed [ 524.312262][T30255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8141'. [ 524.360066][T30263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8140'. [ 524.361195][T30079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.376856][T30265] FAULT_INJECTION: forcing a failure. [ 524.376856][T30265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.390001][T30265] CPU: 0 PID: 30265 Comm: syz.0.8142 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 524.400173][T30265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 524.410272][T30265] Call Trace: [ 524.413548][T30265] [ 524.416477][T30265] dump_stack_lvl+0xf2/0x150 [ 524.421087][T30265] dump_stack+0x15/0x20 [ 524.425252][T30265] should_fail_ex+0x229/0x230 [ 524.429936][T30265] should_fail+0xb/0x10 [ 524.434098][T30265] should_fail_usercopy+0x1a/0x20 [ 524.439212][T30265] _copy_to_user+0x1e/0xa0 [ 524.443634][T30265] rng_dev_read+0x3aa/0x6c0 [ 524.443674][T30079] veth0_vlan: entered promiscuous mode [ 524.448125][T30265] vfs_readv+0x3f1/0x660 [ 524.448147][T30265] ? __pfx_rng_dev_read+0x10/0x10 [ 524.460248][T30079] veth1_vlan: entered promiscuous mode [ 524.462900][T30265] __x64_sys_preadv+0x100/0x1c0 [ 524.473258][T30265] x64_sys_call+0x1d82/0x2d70 [ 524.478057][T30265] do_syscall_64+0xc9/0x1c0 [ 524.481286][T30079] veth0_macvtap: entered promiscuous mode [ 524.482557][T30265] ? clear_bhb_loop+0x55/0xb0 [ 524.490761][T30079] veth1_macvtap: entered promiscuous mode [ 524.492907][T30265] ? clear_bhb_loop+0x55/0xb0 [ 524.492937][T30265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.492962][T30265] RIP: 0033:0x7f6fd8672bd9 [ 524.492975][T30265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.505906][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.509201][T30265] RSP: 002b:00007f6fd78f4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 524.513609][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.513619][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.533194][T30265] RAX: ffffffffffffffda RBX: 00007f6fd8800f60 RCX: 00007f6fd8672bd9 [ 524.533208][T30265] RDX: 0000000000000001 RSI: 0000000020001880 RDI: 0000000000000007 [ 524.533256][T30265] RBP: 00007f6fd78f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 524.533268][T30265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.533280][T30265] R13: 000000000000000b R14: 00007f6fd8800f60 R15: 00007ffe0e60c288 [ 524.533296][T30265] [ 524.549346][T30265] 9pnet_fd: Insufficient options for proto=fd [ 524.554735][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.634364][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.644971][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.654826][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.665253][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.675193][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.685641][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.695463][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.705877][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.715786][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.726282][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.737597][T30079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.750853][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.761416][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.771258][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.781730][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.791611][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.802058][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.811968][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.822405][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.832224][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.842651][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.852509][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.862954][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.872782][T30079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.883223][T30079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.896560][T30079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.910589][T30079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.919316][T30079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.928122][T30079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.937073][T30079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.952245][T28389] hsr_slave_0: left promiscuous mode [ 524.960079][T28389] hsr_slave_1: left promiscuous mode [ 524.966009][T28389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.973450][T28389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.981164][T28389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.988648][T28389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.997930][T28389] veth0_macvtap: left promiscuous mode [ 525.003576][T28389] veth1_vlan: left promiscuous mode [ 525.009037][T28389] veth0_vlan: left promiscuous mode [ 525.085850][T28389] team0 (unregistering): Port device team_slave_1 removed [ 525.096569][T28389] team0 (unregistering): Port device team_slave_0 removed [ 525.135702][T30284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8145'. [ 525.158375][T30287] SET target dimension over the limit! [ 525.182547][T30132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 525.200591][T30132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 525.206419][T30290] loop2: detected capacity change from 0 to 2048 [ 525.219279][T30132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 525.228943][T30290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.236936][T30297] x_tables: duplicate underflow at hook 2 [ 525.241638][T30132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 525.281825][T30299] loop3: detected capacity change from 0 to 1024 [ 525.302969][T30299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.322406][T30132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.337472][T30306] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 525.358099][T30132] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.366691][T30306] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 525.378936][T30306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 525.378936][T30306] [ 525.388580][T30306] EXT4-fs (loop2): Total free blocks count 0 [ 525.394596][T30306] EXT4-fs (loop2): Free/Dirty block details [ 525.400481][T30306] EXT4-fs (loop2): free_blocks=2415919104 [ 525.406237][T30306] EXT4-fs (loop2): dirty_blocks=16 [ 525.411344][T30306] EXT4-fs (loop2): Block reservation details [ 525.417412][T30306] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 525.429801][T30299] 9pnet_fd: Insufficient options for proto=fd [ 525.429995][T30307] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 525.454746][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.461835][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.474473][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.481627][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.505650][T30132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 525.516073][T30132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.539603][T30299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8087'. [ 525.640254][T30079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.652065][T30321] FAULT_INJECTION: forcing a failure. [ 525.652065][T30321] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.665397][T30321] CPU: 0 PID: 30321 Comm: syz.2.8152 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 525.675550][T30321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 525.685594][T30321] Call Trace: [ 525.688859][T30321] [ 525.691778][T30321] dump_stack_lvl+0xf2/0x150 [ 525.696386][T30321] dump_stack+0x15/0x20 [ 525.700540][T30321] should_fail_ex+0x229/0x230 [ 525.705207][T30321] __should_fail_alloc_page+0xfd/0x110 [ 525.710722][T30321] __alloc_pages_noprof+0x109/0x360 [ 525.715918][T30321] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 525.721316][T30321] vma_alloc_folio_noprof+0x176/0x2d0 [ 525.726770][T30321] handle_mm_fault+0xddb/0x2ac0 [ 525.731625][T30321] exc_page_fault+0x3b9/0x650 [ 525.736378][T30321] asm_exc_page_fault+0x26/0x30 [ 525.741229][T30321] RIP: 0033:0x7f96f1554f9b [ 525.745630][T30321] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 525.765235][T30321] RSP: 002b:00007f96f0826e20 EFLAGS: 00010246 [ 525.771303][T30321] RAX: 00007f96f0828f40 RBX: 00007f96f1706620 RCX: 0000000000000000 [ 525.779261][T30321] RDX: 00007f96f0828f88 RSI: 00007f96f16067f8 RDI: 00007f96f0826e40 [ 525.787229][T30321] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 525.795452][T30321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.803434][T30321] R13: 000000000000000b R14: 00007f96f1735f60 R15: 00007ffc4da49c38 [ 525.811422][T30321] [ 525.814970][T30321] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 525.826604][T30132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.886385][T30328] loop2: detected capacity change from 0 to 2048 [ 525.923843][T30328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.013155][T30354] SET target dimension over the limit! [ 526.026960][T30357] loop1: detected capacity change from 0 to 512 [ 526.035756][T26692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.050214][T30132] veth0_vlan: entered promiscuous mode [ 526.058540][T30357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 526.086369][T30132] veth1_vlan: entered promiscuous mode [ 526.092057][T30357] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.110176][T30132] veth0_macvtap: entered promiscuous mode [ 526.130979][T30132] veth1_macvtap: entered promiscuous mode [ 526.144959][T29300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 526.155619][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 526.155664][ T29] audit: type=1400 audit(1720909510.017:6004): avc: denied { setattr } for pid=30364 comm="syz.0.8168" name="PPPOL2TP" dev="sockfs" ino=147634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 526.161379][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.195711][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.205660][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.216161][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.226046][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.236526][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.246391][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.256906][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.266817][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.277243][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.287180][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.289878][T30371] loop2: detected capacity change from 0 to 512 [ 526.297704][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.314040][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.324497][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.338121][T30132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.348033][T30371] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.8165: casefold flag without casefold feature [ 526.355722][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.374550][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.385571][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.396041][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.405935][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.416369][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.426187][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.436626][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.446465][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.451634][T30371] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.8165: couldn't read orphan inode 15 (err -117) [ 526.456897][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.456922][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.488958][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.498866][T30132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.509324][T30132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.513306][T30371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.535009][T30132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.543801][T30132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.552791][T30132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.561584][T30132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.570370][T30132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.640273][T26692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.652048][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8175'. [ 526.701318][T30398] netlink: 'syz.2.8176': attribute type 4 has an invalid length. [ 526.769891][T30404] netlink: 'syz.2.8176': attribute type 4 has an invalid length. [ 526.817555][T30416] loop3: detected capacity change from 0 to 512 [ 526.819456][T30413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8180'. [ 526.833414][T30414] loop2: detected capacity change from 0 to 2048 [ 526.844244][T30416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 526.856890][T30416] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.870639][T30414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.910629][T26692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.922462][T30079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 527.029870][T30430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 527.069099][T30433] FAULT_INJECTION: forcing a failure. [ 527.069099][T30433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.082716][T30433] CPU: 0 PID: 30433 Comm: syz.3.8187 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 527.092855][T30433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 527.102905][T30433] Call Trace: [ 527.106170][T30433] [ 527.109085][T30433] dump_stack_lvl+0xf2/0x150 [ 527.113779][T30433] dump_stack+0x15/0x20 [ 527.118021][T30433] should_fail_ex+0x229/0x230 [ 527.122686][T30433] should_fail+0xb/0x10 [ 527.126891][T30433] should_fail_usercopy+0x1a/0x20 [ 527.131898][T30433] _copy_from_iter+0xd3/0xb00 [ 527.136607][T30433] ? _copy_from_iter+0x161/0xb00 [ 527.141559][T30433] copy_page_from_iter+0x14f/0x280 [ 527.146682][T30433] skb_copy_datagram_from_iter+0x203/0x440 [ 527.152567][T30433] tun_get_user+0xcb6/0x23b0 [ 527.157150][T30433] ? selinux_file_permission+0x22c/0x360 [ 527.162785][T30433] tun_chr_write_iter+0x18e/0x240 [ 527.167902][T30433] vfs_write+0x78f/0x900 [ 527.172155][T30433] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 527.177768][T30433] ksys_write+0xeb/0x1b0 [ 527.182000][T30433] __x64_sys_write+0x42/0x50 [ 527.186691][T30433] x64_sys_call+0x27ef/0x2d70 [ 527.191379][T30433] do_syscall_64+0xc9/0x1c0 [ 527.195946][T30433] ? clear_bhb_loop+0x55/0xb0 [ 527.200608][T30433] ? clear_bhb_loop+0x55/0xb0 [ 527.205270][T30433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.211216][T30433] RIP: 0033:0x7fa0b06b7bd9 [ 527.215632][T30433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.235229][T30433] RSP: 002b:00007fa0af939048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 527.243682][T30433] RAX: ffffffffffffffda RBX: 00007fa0b0845f60 RCX: 00007fa0b06b7bd9 [ 527.251637][T30433] RDX: 000000000000fdef RSI: 0000000020000240 RDI: 0000000000000004 [ 527.259639][T30433] RBP: 00007fa0af9390a0 R08: 0000000000000000 R09: 0000000000000000 [ 527.267667][T30433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.275616][T30433] R13: 000000000000000b R14: 00007fa0b0845f60 R15: 00007ffc6ff56ba8 [ 527.283698][T30433] [ 527.327106][T30439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8190'. [ 527.456770][ T29] audit: type=1400 audit(1720909511.297:6005): avc: denied { watch } for pid=30447 comm="syz.1.8192" path="/proc/178" dev="proc" ino=146954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 527.609964][T30466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8199'. [ 527.619037][T30466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8199'. [ 527.731645][T30478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8203'. [ 527.822242][T30487] FAULT_INJECTION: forcing a failure. [ 527.822242][T30487] name failslab, interval 1, probability 0, space 0, times 0 [ 527.834944][T30487] CPU: 1 PID: 30487 Comm: syz.2.8205 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 527.845092][T30487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 527.855158][T30487] Call Trace: [ 527.858426][T30487] [ 527.861347][T30487] dump_stack_lvl+0xf2/0x150 [ 527.865938][T30487] dump_stack+0x15/0x20 [ 527.870187][T30487] should_fail_ex+0x229/0x230 [ 527.874854][T30487] ? kasprintf+0x82/0xb0 [ 527.879088][T30487] __should_failslab+0x92/0xa0 [ 527.883842][T30487] should_failslab+0x9/0x20 [ 527.888367][T30487] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 527.894565][T30487] kvasprintf+0x8c/0x110 [ 527.898801][T30487] kasprintf+0x82/0xb0 [ 527.902876][T30487] ? __memcg_slab_post_alloc_hook+0x508/0x650 [ 527.908974][T30487] nf_tables_set_alloc_name+0xaa/0x460 [ 527.914506][T30487] ? __kmalloc_noprof+0x203/0x370 [ 527.919531][T30487] nf_tables_newset+0xd83/0x1380 [ 527.924459][T30487] ? __nla_validate_parse+0x1796/0x1e30 [ 527.930002][T30487] nfnetlink_rcv+0xb1d/0x15b0 [ 527.934735][T30487] netlink_unicast+0x58d/0x660 [ 527.939509][T30487] netlink_sendmsg+0x5ca/0x6e0 [ 527.944264][T30487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.949590][T30487] __sock_sendmsg+0x140/0x180 [ 527.954284][T30487] ____sys_sendmsg+0x312/0x410 [ 527.959045][T30487] __sys_sendmsg+0x1e9/0x280 [ 527.963656][T30487] __x64_sys_sendmsg+0x46/0x50 [ 527.968480][T30487] x64_sys_call+0xb25/0x2d70 [ 527.973173][T30487] do_syscall_64+0xc9/0x1c0 [ 527.977734][T30487] ? clear_bhb_loop+0x55/0xb0 [ 527.982412][T30487] ? clear_bhb_loop+0x55/0xb0 [ 527.987086][T30487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.992973][T30487] RIP: 0033:0x7f96f15a7bd9 [ 527.997374][T30487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.016976][T30487] RSP: 002b:00007f96f0829048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.025380][T30487] RAX: ffffffffffffffda RBX: 00007f96f1735f60 RCX: 00007f96f15a7bd9 [ 528.033344][T30487] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000c [ 528.041303][T30487] RBP: 00007f96f08290a0 R08: 0000000000000000 R09: 0000000000000000 [ 528.049265][T30487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.057226][T30487] R13: 000000000000000b R14: 00007f96f1735f60 R15: 00007ffc4da49c38 [ 528.065211][T30487] [ 528.095797][T30495] x_tables: duplicate underflow at hook 2 [ 528.101478][T30497] netlink: 'syz.2.8210': attribute type 10 has an invalid length. [ 528.113288][T30497] bond0: (slave netdevsim1): Releasing backup interface [ 528.127635][T30497] team0: Port device netdevsim1 added [ 528.133658][T30501] netlink: 'syz.0.8211': attribute type 10 has an invalid length. [ 528.133854][T30497] FAULT_INJECTION: forcing a failure. [ 528.133854][T30497] name failslab, interval 1, probability 0, space 0, times 0 [ 528.154087][T30497] CPU: 1 PID: 30497 Comm: syz.2.8210 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 528.164381][T30497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 528.174540][T30497] Call Trace: [ 528.177879][T30497] [ 528.180789][T30497] dump_stack_lvl+0xf2/0x150 [ 528.185475][T30497] dump_stack+0x15/0x20 [ 528.189617][T30497] should_fail_ex+0x229/0x230 [ 528.194276][T30497] ? skb_clone+0x154/0x1f0 [ 528.198762][T30497] __should_failslab+0x92/0xa0 [ 528.203589][T30497] should_failslab+0x9/0x20 [ 528.208099][T30497] kmem_cache_alloc_noprof+0x4c/0x290 [ 528.213464][T30497] skb_clone+0x154/0x1f0 [ 528.217691][T30497] __netlink_deliver_tap+0x2bd/0x4c0 [ 528.222960][T30497] netlink_unicast+0x63b/0x660 [ 528.227723][T30497] netlink_sendmsg+0x5ca/0x6e0 [ 528.232479][T30497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.237773][T30497] __sock_sendmsg+0x140/0x180 [ 528.242502][T30497] ____sys_sendmsg+0x312/0x410 [ 528.247343][T30497] __sys_sendmsg+0x1e9/0x280 [ 528.251965][T30497] __x64_sys_sendmsg+0x46/0x50 [ 528.256721][T30497] x64_sys_call+0xb25/0x2d70 [ 528.261300][T30497] do_syscall_64+0xc9/0x1c0 [ 528.265793][T30497] ? clear_bhb_loop+0x55/0xb0 [ 528.270496][T30497] ? clear_bhb_loop+0x55/0xb0 [ 528.275166][T30497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.281049][T30497] RIP: 0033:0x7f96f15a7bd9 [ 528.285443][T30497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.305036][T30497] RSP: 002b:00007f96f0829048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.313428][T30497] RAX: ffffffffffffffda RBX: 00007f96f1735f60 RCX: 00007f96f15a7bd9 [ 528.321383][T30497] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000007 [ 528.329345][T30497] RBP: 00007f96f08290a0 R08: 0000000000000000 R09: 0000000000000000 [ 528.337301][T30497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.345253][T30497] R13: 000000000000000b R14: 00007f96f1735f60 R15: 00007ffc4da49c38 [ 528.353267][T30497] [ 528.358672][T30502] netlink: 'syz.0.8211': attribute type 10 has an invalid length. [ 528.368059][T30502] team0: Port device netdevsim1 removed [ 528.375149][T30502] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 528.382949][T30502] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 528.393049][T30497] netlink: 'syz.2.8210': attribute type 10 has an invalid length. [ 528.408438][T30497] team0: Port device netdevsim1 removed [ 528.416038][T30497] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 528.438519][ T29] audit: type=1400 audit(1720909512.297:6006): avc: denied { map } for pid=30505 comm="syz.2.8213" path="socket:[147896]" dev="sockfs" ino=147896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 528.439091][T30506] atomic_op ffff888113917128 conn xmit_atomic 0000000000000000 [ 528.462847][ T29] audit: type=1400 audit(1720909512.297:6007): avc: denied { read } for pid=30505 comm="syz.2.8213" path="socket:[147896]" dev="sockfs" ino=147896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 528.585132][T30524] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 528.601142][T30525] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.389257][T30543] __nla_validate_parse: 4 callbacks suppressed [ 529.389267][T30543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8228'. [ 529.453496][T30548] loop1: detected capacity change from 0 to 2048 [ 529.465625][T30548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.499950][T29300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.523206][T30554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8231'. [ 529.535927][ T29] audit: type=1400 audit(1720909513.397:6008): avc: denied { append } for pid=30553 comm="syz.2.8231" name="001" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 529.574984][T30560] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 529.718355][T30568] loop4: detected capacity change from 0 to 1024 [ 529.727141][T30568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.746912][T30568] EXT4-fs error (device loop4): __ext4_iget:4906: inode #12: block 13: comm syz.4.8236: invalid block [ 529.759994][T30568] EXT4-fs error (device loop4): __ext4_iget:4906: inode #12: block 13: comm syz.4.8236: invalid block [ 529.844184][T30132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.020670][T30577] loop4: detected capacity change from 0 to 2048 [ 530.035046][T30577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.084012][T30577] loop4: detected capacity change from 2048 to 0 [ 530.108661][T30132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.118703][T30132] bio_check_eod: 13 callbacks suppressed [ 530.118779][T30132] syz-executor: attempt to access beyond end of device [ 530.118779][T30132] loop4: rw=133121, sector=0, nr_sectors = 4 limit=0 [ 530.138096][T30132] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 530.146528][T30132] EXT4-fs (loop4): I/O error while writing superblock [ 530.153683][T30578] kmmpd-loop4: attempt to access beyond end of device [ 530.153683][T30578] loop4: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 530.167170][T30578] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 530.231073][T30586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8240'. [ 530.250107][T30590] FAULT_INJECTION: forcing a failure. [ 530.250107][T30590] name failslab, interval 1, probability 0, space 0, times 0 [ 530.259217][T30591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30591 comm=syz.0.8242 [ 530.262757][T30590] CPU: 1 PID: 30590 Comm: syz.4.8243 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 530.275138][T30591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30591 comm=syz.0.8242 [ 530.285225][T30590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 530.285239][T30590] Call Trace: [ 530.285247][T30590] [ 530.285255][T30590] dump_stack_lvl+0xf2/0x150 [ 530.297719][T30591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8242'. [ 530.307667][T30590] dump_stack+0x15/0x20 [ 530.307693][T30590] should_fail_ex+0x229/0x230 [ 530.310979][T30591] netlink: 'syz.0.8242': attribute type 12 has an invalid length. [ 530.313632][T30591] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.313944][T30590] ? __alloc_skb+0x10b/0x300 [ 530.313969][T30590] __should_failslab+0x92/0xa0 [ 530.318552][T30591] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.327379][T30590] should_failslab+0x9/0x20 [ 530.327409][T30590] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 530.331622][T30591] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.336264][T30590] __alloc_skb+0x10b/0x300 [ 530.344073][T30591] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.352696][T30590] netlink_alloc_large_skb+0xad/0xe0 [ 530.358288][T30591] vxlan0: entered promiscuous mode [ 530.361989][T30590] netlink_sendmsg+0x3b4/0x6e0 [ 530.362012][T30590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.423539][T30590] __sock_sendmsg+0x140/0x180 [ 530.428289][T30590] ____sys_sendmsg+0x312/0x410 [ 530.433047][T30590] __sys_sendmsg+0x1e9/0x280 [ 530.437633][T30590] __x64_sys_sendmsg+0x46/0x50 [ 530.442460][T30590] x64_sys_call+0xb25/0x2d70 [ 530.447085][T30590] do_syscall_64+0xc9/0x1c0 [ 530.451580][T30590] ? clear_bhb_loop+0x55/0xb0 [ 530.456250][T30590] ? clear_bhb_loop+0x55/0xb0 [ 530.460918][T30590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.466803][T30590] RIP: 0033:0x7fe6dc07abd9 [ 530.471204][T30590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.490863][T30590] RSP: 002b:00007fe6db2fc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.499300][T30590] RAX: ffffffffffffffda RBX: 00007fe6dc208f60 RCX: 00007fe6dc07abd9 [ 530.507270][T30590] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 530.515255][T30590] RBP: 00007fe6db2fc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 530.523213][T30590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.531172][T30590] R13: 000000000000000b R14: 00007fe6dc208f60 R15: 00007ffd58427938 [ 530.539255][T30590] [ 530.554727][T30595] x_tables: duplicate underflow at hook 2 [ 530.599620][T30605] loop4: detected capacity change from 0 to 1024 [ 530.608468][T30605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.618126][T30610] loop1: detected capacity change from 0 to 2048 [ 530.627867][T30608] ================================================================== [ 530.635954][T30608] BUG: KCSAN: data-race in file_update_time / inode_update_timestamps [ 530.644103][T30608] [ 530.646415][T30608] write to 0xffff888107c60550 of 8 bytes by task 30612 on cpu 1: [ 530.654119][T30608] inode_update_timestamps+0x16f/0x280 [ 530.659576][T30608] file_update_time+0x22f/0x2c0 [ 530.664416][T30608] pipe_write+0xa87/0xd30 [ 530.668730][T30608] vfs_write+0x78f/0x900 [ 530.672967][T30608] ksys_write+0xeb/0x1b0 [ 530.677205][T30608] __x64_sys_write+0x42/0x50 [ 530.681791][T30608] x64_sys_call+0x27ef/0x2d70 [ 530.686468][T30608] do_syscall_64+0xc9/0x1c0 [ 530.690975][T30608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.696871][T30608] [ 530.699183][T30608] read to 0xffff888107c60550 of 8 bytes by task 30608 on cpu 0: [ 530.706803][T30608] file_update_time+0x98/0x2c0 [ 530.711557][T30608] pipe_write+0xa87/0xd30 [ 530.715874][T30608] vfs_write+0x78f/0x900 [ 530.720106][T30608] ksys_write+0xeb/0x1b0 [ 530.724354][T30608] __x64_sys_write+0x42/0x50 [ 530.728937][T30608] x64_sys_call+0x27ef/0x2d70 [ 530.733607][T30608] do_syscall_64+0xc9/0x1c0 [ 530.738102][T30608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.743984][T30608] [ 530.746293][T30608] value changed: 0x000000001c76455c -> 0x000000001d0edbdc [ 530.753384][T30608] [ 530.755691][T30608] Reported by Kernel Concurrency Sanitizer on: [ 530.761818][T30608] CPU: 0 PID: 30608 Comm: syz.2.8249 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 530.772043][T30608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 530.782085][T30608] ================================================================== [ 530.805127][T30610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.838588][T29300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.629466][T30132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.