last executing test programs: 4.890126319s ago: executing program 0 (id=3238): socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) lchown(0x0, 0x0, 0xee01) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r6}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x143042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5405, 0x0, 0x0) 4.717017773s ago: executing program 0 (id=3247): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) mknod$loop(0x0, 0x6fbe, 0x0) chown(0x0, 0xee01, 0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="06d5fff70400000018230000", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0xe, 0x6e, &(0x7f0000000100)=""/110, 0x41100, 0x10, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xc, 0x721bfb44, 0x1c1}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x0, 0x2, 0x2, 0xb}, {0x4, 0x3, 0x3, 0x9}, {0x3, 0x2, 0x4, 0x5}], 0x10, 0x6}, 0x90) read$msr(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000300)={0x0}, 0x20) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) bind$bt_hci(r3, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) r6 = socket(0x10, 0x5, 0xfffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$packet_buf(r6, 0x107, 0x16, 0x0, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) socket(0x26, 0x803, 0x7fffffff) 3.688150728s ago: executing program 0 (id=3260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) (fail_nth: 10) 3.385052123s ago: executing program 0 (id=3265): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xffd, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000e530e9)=""/5, &(0x7f0000000000)=0x5) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 3.089670987s ago: executing program 0 (id=3272): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000980)={[{@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0xd775}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0xfb, 0x496, &(0x7f0000000f40)="$eJzs3EtsG0UfAPD/Okn7fX0llPJoKRAoiIpH0qaF9oDEQ0LiAAgJDuVo0rQqdRvUBIlWEQ2oKhckqMQdgbggcebAiRMCTkhcOMAdVapQLxRORmvvGsexHdd14jx+P2nrGWfsmf/uzu7sTtcBbFij6T9JxLaI+C0ihiOi0FhgtPpy4/rc5N/X5yaTKJdf+zNJPxZ/XZ+bzIsm2evWamYwfSlcSuLZJvXOnL9wulgqTZ3L8uOzZ94enzl/4YlTZ4onp05OnZ04evTwoYNHnpp4sidx3pa2dc9703t3v/jGlZcnj11588evk7pG18fRG0MxX7dOGj3c28r6bntdOhlsW7Sw7I2hY5sjKh11qNL/h2Pg0o7a34bjhQ/62jhgWZXL5fJE6z/Pl4F1LIl+twDoj/xEn17/5ssKDT1WhWvPVS+A0rhvZEv1omewdqE61HB920tzEXFs/p/P0iWW5T4EAMBC36Xjn8ebjf8KcWdduR3Z3NBINpeyMyJuj4hdEXFHRKXsXRFx903WP9qQXzz+KVztKrAOpeO/p7O5rXzJ6s2LjAxkue2V+IeSE6dKUweydbI/hjan+YNNvz2JyiRQ/PJxq/pH68Z/6ZLWn48Fs3ZcHdy88DPHi7PFWw48c+39iD2DzeLPJvCyOazdEbGnyzpOPfrV3oXvDNRSS8ffRvt5po6UP494pLr956Mh/lzSfn5y/H9Rmjownu8Vi/308+VXW9V/S/H3QLr9tzTd/2vxjyT187Uzi75i01J1XP79w5bXNKMRz0QX+/+m5PUFlb9bnJ09dzBiU/LS4vfrbnDn+bx8Gv/+fc37/874b03cExHpTnxvRNwXEfdn2+6BiHgwIva1if+H5x96q038fd3+kR2hOtr++Xao7gi1PWKpxMDp779tVXlnx7/DldT+7J1Ojn+dNrDLdQYAAABrSiEitkVSGKulC4Wxser/4d8VWwql6ZnZx05Mv3P2ePUZgZEYKuR3uoazfGT3P0eq+crV90TlNeJidr/0UHbf+NOB/1fyY5PTpeP9Dh42uK0t+n/qj4F+tw5Ydj2YRwPWqHb9/4sjK9gQYMV1f/43coC1bole7AcbYB1zFoeNq1n/v9iHdgArr/X5f8rQANa5Wif/pIPCdY97NT68Caw9TvKwcS3d/19Zrt+/Avqn86f4V0siSRa8E19GtP9U0v82d5H4aHU0o3UiCquiGV0niqujGTeRGOz4Vy3Oly8WS6Vfv7mVSvt9ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiNfwMAAP//oefi4g==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000e80301005c000000000600000000000a14000000ea03010000000000000000000000000a"], 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01000000000000005773ca440000"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYRESDEC], 0x24, 0x2) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xf6, 0x479, &(0x7f00000004c0)="$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") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) 2.259518165s ago: executing program 4 (id=3279): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, 0x0) inotify_init() syz_io_uring_setup(0xa94, &(0x7f0000000580)={0x0, 0xb49e, 0x200, 0x1}, &(0x7f00000007c0), &(0x7f0000000640)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 2.258938175s ago: executing program 4 (id=3280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1004000, &(0x7f00000003c0)={[{@user_xattr}, {@nombcache}, {@quota}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@nojournal_checksum}, {@nobarrier}]}, 0xfe, 0x564, &(0x7f0000002240)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x8c, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x2c, 0x17, [0x1, 0x5, 0x6, 0x3, 0x55, 0x3, 0x2, 0x5f9, 0x3ff, 0xe]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x60, r10, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}]}, 0x60}}, 0x800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002000000008000300", @ANYRES32=r4, @ANYBLOB="24002d8005000100000000000500040000000000080002"], 0x40}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="a700000000000000000008fffffc08000300", @ANYRES32=r15, @ANYRESOCT=r12], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, 0x0, 0x41a, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) 2.081675829s ago: executing program 1 (id=3281): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4ea, &(0x7f0000000840)="$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") 1.965651989s ago: executing program 4 (id=3282): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005080)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}]}, 0xa0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r1, r2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@setlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x5) socket$xdp(0x2c, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff00000053", 0x48}], 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d80)={0x300, 0x13, 0x14, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x7, {0x4e22, 0x4e24, [0x5, 0xfffffffe, 0x2, 0x4], [0xfff, 0x1, 0x3f], 0x0, [0xfffffefd, 0xa7dc]}, 0x7fffffff, 0x800000}, [@INET_DIAG_REQ_BYTECODE={0x153, 0x1, "5eb8069098908eb59e15834eca81101d40eb1326436fb3df4163570cc1affe6820f35e212c6d66183574355670b2bdab27354889e34e38887b059f60f1039e2afc627ca3b1053abc09c3983e8f2721d05a0832cfc7d452d237ef337080fefce8078da86299140273f07f283ced26a11d2f3a497c8f29353e1b0e335b2e731bc102c6d6713e12e5e63e016a4ddd39249a17adb9b9b5b8f19af816e34e3b569a8a03ebe62a7ba4db01824b8a35fba3ba07aa48a15d2ff56f9cfdaf13f9390795de68ff15e41c4587bcfc58ec880000ad60543e043bcdce96b46a4f1853e62908109acf7063f1506cc6ef08866bf33627a29d73b59d8f5462fd64c9b7b2f8328f4841e5188ca15d5393e4c7ccaa15bea4e02fcf450bb4ee2592a0c4cfbcb0225914c94876444258455bfed53c4dfef7e40ad5e1a73f539ca615bb22941e60f9c8152c4d9c52d6aa0caab2d21fd0389370"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "16dced89eb86ae45ad7e65fe264ffa96dbdc1342505e17fbfb0784df8f787f86bd139bdb4425527164ef19c0baf010eff86acd6e1a6034bba1dbaeb02d2f542988dc14694dc59006aafa58ed1c938f41194b878cfb672a"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "ccc781ae28ac55c1d64ff1d633786350e598bfb5af7d084c12e6d6c43b196df4cbebd42ee2fe1fe5cabccb29bcd66b737173a54c65e51082e8e603ce8657c0b1943f65cb9ae55290fdeb1bda91c7c184832a9c33050093b1da7387ab0e6c1d78495ad2ae2e0041d20b8f43f916c2d86cd50df803db3abbf60298a117185ac13d8c8d74be3990f8a5fa1e9e0034c60c5586986972df7c9dd13f6b1ae5ee939f7b87946b600aeecb91eec478b0d0557e5560ef7576569f2eb2fd32b26c9be1cdf41f11307591f619297fa5e025dbd5171a61951010d5806c85541fd78804582bdf4c2f8daaea91782b29a145a223dd4bffc12b708ce1cbff"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, '\v'}]}, 0x300}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) sysfs$2(0x2, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116900000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) r8 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="2400000024003f302dbd7000ffdbdf25000400000600030096"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.942556061s ago: executing program 1 (id=3285): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', '', [], 0xa, "bb773ea19ed3ca21fec5b1ec106b6b64291787ea14a8aa8bb69f5b1a995460a3cea1fb8c677f3e1911217a89088068d53815e19a100d3a4b65821707acf39e4d7e27cd21f8778a0857076ae2a4f90696b2347df21eadb3da51372632ff73be99bf205130f45381e999ceeda6a324ee3276cd67b19d9a520c24ceb8e02e31307e73899cd0a95f9322"}, 0x8c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x100080c0) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0xdd, 0x0, &(0x7f0000000000)) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000db8af8ff51000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000031de0de2bf478ca6278b3d7769e999fa18b03d00d6b3052a5835040c0e883f8504765ac5772282b5b209ff4ad941fc7d5cf9ef08fbaaa986f19d9855fc3a32a3d2d990c5cc3893ed2bdd481d9811780a037aa588ed94a33e2817cb723022b1ff5499e9ea81873ecda78d780cbb471b2702343a4698d40d88642e11e9af102694bbd61e0d8d1435fa11"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x0, 0x0) (async, rerun: 32) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r5) (async) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") io_uring_setup(0x87d, &(0x7f0000000300)={0x0, 0x973c, 0x1000, 0x0, 0x331, 0x0, r4}) (async, rerun: 64) pipe2$9p(&(0x7f00000002c0), 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r8, 0x20, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}]}, 0x50}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0xa) dup(r9) 1.862989827s ago: executing program 4 (id=3288): sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x10}, 0x10}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) io_uring_setup(0x168e, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x120) syz_read_part_table(0x5d5, &(0x7f0000000300)="$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") setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x37, 0x0, "a9a66fb8408330c80ba8a5c4dd1dfac79e915eac19ec42622afbc0946ec77a6292178e77043e36e62674097e5dae9ebb461a494d4ad97cc6152967b4aaa0f88a3e98b35653d7fe5d593b6c734a45734d"}, 0xd8) syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00e980080003000300ffff"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0xffff}, {0x7, 0xffe0}, {0x0, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24048840) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)={0x5, 0x3, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "92774448b28d7fd8"}}, 0x48}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9b29, 0x2c}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) recvmmsg(r6, &(0x7f00000090c0)=[{{&(0x7f0000005900)=@alg, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005980)=""/48, 0x30}, {&(0x7f00000059c0)=""/191, 0xbf}, {&(0x7f0000005a80)=""/67, 0x43}], 0x3, &(0x7f0000005b40)=""/79, 0x4f}}, {{&(0x7f0000005bc0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005c40)=""/229, 0xe5}, {&(0x7f0000005d40)=""/67, 0x43}, {&(0x7f0000005dc0)=""/9, 0x9}, {&(0x7f0000005e00)=""/208, 0xd0}], 0x4, &(0x7f0000005f40)=""/199, 0xc7}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000006040)=""/168, 0xa8}, {&(0x7f0000006100)=""/175, 0xaf}, {&(0x7f00000061c0)=""/118, 0x76}], 0x3, &(0x7f0000006280)=""/123, 0x7b}}, {{&(0x7f0000006300)=@l2tp, 0x80, &(0x7f0000007540)=[{&(0x7f0000006380)=""/98, 0x62}, {&(0x7f0000006400)=""/112, 0x70}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/152, 0x98}], 0x4}}, {{&(0x7f0000007580)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000007840), 0x0, &(0x7f0000007880)=""/104, 0x68}}, {{0x0, 0x0, &(0x7f0000007b00)=[{&(0x7f0000007900)=""/250, 0xfa}, {&(0x7f0000007a00)=""/233, 0xe9}], 0x2, &(0x7f0000007b40)=""/208, 0xd0}}, {{&(0x7f0000007c40)=@caif=@dbg, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007cc0)=""/47, 0x2f}, {&(0x7f0000007d00)=""/180, 0xb4}, {&(0x7f0000007dc0)=""/150, 0x96}, {&(0x7f0000007e80)=""/19, 0x13}], 0x4}}, {{0x0, 0x0, &(0x7f0000008f80)=[{&(0x7f00000092c0)=""/4102, 0x1006}, {&(0x7f0000008f00)=""/57, 0x39}, {&(0x7f0000008f40)=""/49, 0x31}], 0x3, &(0x7f0000008fc0)=""/235, 0xeb}}], 0x8, 0x2002, 0x0) 1.765801475s ago: executing program 1 (id=3291): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)}, 0x20000014) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fadvise64(r3, 0xfffffffffffffffc, 0xf, 0x4) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r4, 0x1, 0x25, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000000), 0x0) unshare(0xe020600) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x18) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f00000014c0)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0}}, {{&(0x7f0000000f80)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000007000000860800000003"], 0x18}}], 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) 1.017910567s ago: executing program 4 (id=3294): timerfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x81fd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x4, 0x9, 0x40, @mcast1, @private1, 0x40, 0x10, 0x1, 0x5}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() r6 = socket$inet(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000740000000000019078ac1e0001ac1414aa0300907803000000460000000000000000010000ffffffffe000000244440001ac1e0001000000fd0200000000000000ffffffff00000000ac1e000100000000e00000020000000000000000000000000000000000000000e000000200000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r8 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c6ba71816eea62d586560e496c4098756d659145bae57b64ed0d1921c480896a6b249f241de296cb1b72c926fd5a52c5af6e63b96179d342b4c9a29e7f74ad99e1d59d3b2667c8df6afe29be91ce2deaf1332541c3bd8281e83668980ebb5ad41cf8e8859c39b69b033510154822f77df0065c0b6718f97010c2c71e0243681e04b0f42be8be2f579197f5e15b308500eef2cd33c56f5146c15da623afaae682e86072730560d0f3ca79367bda79bb2f1a0a7f7e7422268041b1a5eea28be1861e52740ebe0600fd6b65eddb0fb8345bdf87698c077c7081e29c6f9af00"/236]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) 965.605101ms ago: executing program 3 (id=3295): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x16000000, {0x7, 0x0, 0x0, r1, 0x80}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x3e}}, 0x0) 962.600841ms ago: executing program 3 (id=3296): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000011000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 962.445151ms ago: executing program 3 (id=3297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "66cf7a5d"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ad"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 962.122681ms ago: executing program 3 (id=3298): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x2000000, &(0x7f0000000040)={[{@bsdgroups}, {@nombcache}, {@noload}]}, 0x0, 0x4fa, &(0x7f0000000a40)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) creat(&(0x7f0000000280)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r7, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x2000000], 0x0, 0x2000000, 0x1}}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0xd0, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8001}}, @TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0xf4, 0x9, 0x0, 0x2, 0xffff8000, 0x74b, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x81]}}, {{0x1c, 0x1, {0x60, 0x0, 0x82d2, 0x7ff, 0x0, 0xfffffffc, 0x5105}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x5, 0x5, 0x4, 0x1, 0x10, 0x6dd}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x5, 0x3, 0x9653, 0x2, 0x1, 0x6, 0x5}}, {0xe, 0x2, [0x2, 0x6, 0xfffa, 0x748, 0x7]}}]}]}, 0xd0}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 912.829125ms ago: executing program 1 (id=3299): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x8, 0x10, 0x14b, 0x6}, &(0x7f0000000080)=0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) bind$packet(r2, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) close(r3) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000002"], 0x114}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000200)) 845.697641ms ago: executing program 3 (id=3301): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='rxrpc_disconnect_call\x00', r3}, 0xfe7b) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000580)='./file0\x00', r4, 0x4000, r5}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000580)='./file0\x00', r4, 0x4000, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000011c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000400)={0x1, 0xfffffecd, 0x1, 0x40, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0, 0x7}, 0x101100, 0x0, 0x10000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000050000000000000000850000002e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) copy_file_range(r8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000080)=[{0x45, 0x0, 0x3}, {}, {}, {}, {0x6}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c000280080002b90004000000140003007866726d3000"/56], 0x50}}, 0x880) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0xe180) (async) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0xe180) ioctl$BLKPG(r9, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x0, 0x0, 0x13}}) 845.563251ms ago: executing program 1 (id=3302): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') inotify_init() syz_io_uring_setup(0xa94, 0x0, &(0x7f00000007c0), &(0x7f0000000640)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 845.364551ms ago: executing program 2 (id=3303): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x400000, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") unshare(0x2a020480) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x542, &(0x7f00000027c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x5, 0x0, 0x0, 0x0) 799.517415ms ago: executing program 1 (id=3304): r0 = socket$inet6(0x10, 0x3, 0x0) lstat(0x0, &(0x7f0000000cc0)) getgid() sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd", 0xd, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000100)="d544991bfd088548", 0x8}], 0x1) 697.490753ms ago: executing program 2 (id=3305): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='cachefiles_ondemand_read\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='cachefiles_ondemand_read\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0x766ec000) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0x766ec000) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000240)=[0x370, 0x1, 0x3, 0x800, 0x8, 0x8, 0x3a46fe61, 0x4]) (async) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000240)=[0x370, 0x1, 0x3, 0x800, 0x8, 0x8, 0x3a46fe61, 0x4]) setitimer(0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x64e506, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) (async) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) 593.774681ms ago: executing program 2 (id=3306): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, 0x0, 0x97}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x0) 593.143511ms ago: executing program 2 (id=3307): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a060400) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r7, r6, 0x0, 0x80000000) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty=0xa00, @empty}}}], 0x20}}], 0x1, 0x0) mount(&(0x7f0000002780)=@filename='./cgroup\x00', &(0x7f0000002800)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x928071, 0x0) 553.427115ms ago: executing program 2 (id=3308): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) open(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='!=u&\'\'\t|\t') (async) r2 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6c}, {0x6}]}, 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 517.508048ms ago: executing program 4 (id=3309): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)}, 0x20000014) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fadvise64(r3, 0xfffffffffffffffc, 0xf, 0x4) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r4, 0x1, 0x25, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000000), 0x0) unshare(0xe020600) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x18) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f00000014c0)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0}}, {{&(0x7f0000000f80)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000007000000860800000003"], 0x18}}], 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) 429.771285ms ago: executing program 2 (id=3310): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1a}, 0x20) socket$kcm(0xa, 0x5, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = io_uring_setup(0x35dd, &(0x7f0000000380)={0x0, 0xfffffffc, 0x40, 0x1, 0x4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000400)=[{0x0, 0xffff, 0x1000}], 0x1) 87.729103ms ago: executing program 0 (id=3311): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x0) (fail_nth: 13) 0s ago: executing program 3 (id=3312): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) open(0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x141002, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x5fc2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 775f80 R15: 00007ffd1808cd08 [ 218.178641][T12478] [ 218.204663][T12430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.211679][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.237698][T12430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.270362][T12484] loop4: detected capacity change from 0 to 512 [ 218.278326][T12430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.285299][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.311729][T12430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.323165][T12484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.341381][T12484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 218.354058][T12484] EXT4-fs (loop4): 1 truncate cleaned up [ 218.377097][T12484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 218.406945][T12430] hsr_slave_0: entered promiscuous mode [ 218.413769][T12430] hsr_slave_1: entered promiscuous mode [ 218.421136][T12188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.430725][T12430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.440157][T12430] Cannot create hsr debugfs directory [ 218.469145][T12494] loop4: detected capacity change from 0 to 1024 [ 218.489981][T12469] chnl_net:caif_netlink_parms(): no params data found [ 218.500167][T12494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.551032][T12156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.601784][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 218.608511][T12188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 218.636275][T12188] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 218.665428][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.667064][T12188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 218.698594][T12188] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 218.723063][T12188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 218.753841][T12188] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 218.774953][T12469] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.782138][T12469] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.792999][T12188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 218.816894][T12469] bridge_slave_0: entered allmulticast mode [ 218.823438][T12469] bridge_slave_0: entered promiscuous mode [ 218.830957][T12188] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 218.851648][T12188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 218.873894][T12188] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 218.876026][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.911551][T12469] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.918764][T12469] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.927697][T12469] bridge_slave_1: entered allmulticast mode [ 218.934307][T12469] bridge_slave_1: entered promiscuous mode [ 218.960925][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.009341][T12469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.048632][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.063099][T12469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.123439][T12469] team0: Port device team_slave_0 added [ 219.135917][T12469] team0: Port device team_slave_1 added [ 219.163193][T12469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.170192][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.196402][T12469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.214563][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.226090][T12469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.233096][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.258987][T12469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.307969][T12469] hsr_slave_0: entered promiscuous mode [ 219.313980][T12469] hsr_slave_1: entered promiscuous mode [ 219.319940][T12469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.327547][T12469] Cannot create hsr debugfs directory [ 219.353485][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.386881][T12430] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.395288][T12504] chnl_net:caif_netlink_parms(): no params data found [ 219.406510][T12430] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.421200][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.439137][T12430] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.448297][T12430] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.471215][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.539693][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.546853][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.555200][T12504] bridge_slave_0: entered allmulticast mode [ 219.559121][T12188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.561701][T12504] bridge_slave_0: entered promiscuous mode [ 219.591421][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.598622][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.606256][T12504] bridge_slave_1: entered allmulticast mode [ 219.612939][T12504] bridge_slave_1: entered promiscuous mode [ 219.642791][T12504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.658835][T12430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.667965][T12504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.691262][ T50] bridge_slave_1: left allmulticast mode [ 219.696966][ T50] bridge_slave_1: left promiscuous mode [ 219.702821][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.710787][ T50] bridge_slave_0: left allmulticast mode [ 219.716419][ T50] bridge_slave_0: left promiscuous mode [ 219.722291][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.730490][ T50] bridge_slave_1: left allmulticast mode [ 219.736185][ T50] bridge_slave_1: left promiscuous mode [ 219.741827][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.749586][ T50] bridge_slave_0: left allmulticast mode [ 219.755241][ T50] bridge_slave_0: left promiscuous mode [ 219.761079][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.950918][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.961874][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.972239][ T50] bond0 (unregistering): Released all slaves [ 219.981020][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.991784][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.002410][ T50] bond0 (unregistering): Released all slaves [ 220.013271][T12504] team0: Port device team_slave_0 added [ 220.020191][T12504] team0: Port device team_slave_1 added [ 220.047374][T12430] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.055132][T12504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.062159][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.088214][T12504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.100648][T12504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.107619][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.133598][T12504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.170126][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.177221][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.205331][T12504] hsr_slave_0: entered promiscuous mode [ 220.211398][T12504] hsr_slave_1: entered promiscuous mode [ 220.218565][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 220.218579][ T29] audit: type=1400 audit(1723570057.332:1760): avc: denied { name_connect } for pid=12539 comm="syz.3.3027" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 220.218948][T12504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.255306][T12504] Cannot create hsr debugfs directory [ 220.272900][ T50] hsr_slave_0: left promiscuous mode [ 220.278486][ T50] hsr_slave_1: left promiscuous mode [ 220.284322][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.291900][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.299479][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.306958][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.316212][ T50] hsr_slave_0: left promiscuous mode [ 220.321988][ T50] hsr_slave_1: left promiscuous mode [ 220.327716][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.335110][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.342597][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.350103][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.360987][ T50] veth1_macvtap: left promiscuous mode [ 220.366453][ T50] veth0_macvtap: left promiscuous mode [ 220.371969][ T50] veth1_vlan: left promiscuous mode [ 220.377320][ T50] veth0_vlan: left promiscuous mode [ 220.383254][ T50] veth1_macvtap: left promiscuous mode [ 220.388752][ T50] veth0_macvtap: left promiscuous mode [ 220.394356][ T50] veth1_vlan: left promiscuous mode [ 220.399646][ T50] veth0_vlan: left promiscuous mode [ 220.536413][ T50] team0 (unregistering): Port device team_slave_1 removed [ 220.546451][ T50] team0 (unregistering): Port device team_slave_0 removed [ 220.613666][ T50] team0 (unregistering): Port device team_slave_1 removed [ 220.623648][ T50] team0 (unregistering): Port device team_slave_0 removed [ 220.674852][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.681981][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.725089][T12530] chnl_net:caif_netlink_parms(): no params data found [ 220.786389][T12530] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.793599][T12530] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.800808][T12530] bridge_slave_0: entered allmulticast mode [ 220.807983][T12530] bridge_slave_0: entered promiscuous mode [ 220.815455][T12530] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.822614][T12530] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.829903][T12530] bridge_slave_1: entered allmulticast mode [ 220.836226][T12530] bridge_slave_1: entered promiscuous mode [ 220.856131][T12530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.871336][T12530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.893891][T12469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.908410][T12530] team0: Port device team_slave_0 added [ 220.914156][T12469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.922625][T12469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.931996][T12530] team0: Port device team_slave_1 added [ 220.939848][T12469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.959848][T12530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.966839][T12530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.992820][T12530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.005823][T12530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.012806][T12530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.038933][T12530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.076420][T12430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.091790][T12530] hsr_slave_0: entered promiscuous mode [ 221.099727][T12530] hsr_slave_1: entered promiscuous mode [ 221.105792][T12530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.113449][T12530] Cannot create hsr debugfs directory [ 221.143332][T12469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.160845][T12469] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.181619][T12469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.192008][T12469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.211238][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.218289][ T3279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.227159][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.234208][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.472253][T12504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.551403][T12504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.576520][T12504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.591576][T12504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.609760][T12469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.631154][T12530] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.659742][T12430] veth0_vlan: entered promiscuous mode [ 221.671647][T12430] veth1_vlan: entered promiscuous mode [ 221.685783][T12530] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.715481][T12430] veth0_macvtap: entered promiscuous mode [ 221.723306][T12430] veth1_macvtap: entered promiscuous mode [ 221.743119][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.753737][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.763640][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.774157][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.783992][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.794492][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.804341][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.814818][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.825630][T12430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.835673][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.846236][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.856443][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.866901][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.876830][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.887503][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.898187][T12430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.909355][T12430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.920301][T12430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.932147][T12530] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.959675][T12430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.969099][T12430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.977952][T12430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.986713][T12430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.004971][T12504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.028127][T12504] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.039477][T12530] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.057909][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.064991][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.076323][T12469] veth0_vlan: entered promiscuous mode [ 222.088161][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.095309][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.120152][T12469] veth1_vlan: entered promiscuous mode [ 222.129287][T12504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.139791][T12504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.156399][ T29] audit: type=1326 audit(1723570059.262:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.3.3032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24365399f9 code=0x0 [ 222.158258][ T50] bridge_slave_1: left allmulticast mode [ 222.185261][ T50] bridge_slave_1: left promiscuous mode [ 222.191078][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.193909][T12585] loop2: detected capacity change from 0 to 2048 [ 222.205264][ T50] bridge_slave_0: left allmulticast mode [ 222.211021][ T50] bridge_slave_0: left promiscuous mode [ 222.216776][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.247994][T12585] loop2: p1 < > p4 [ 222.253460][T12585] loop2: p4 size 8388608 extends beyond EOD, truncated [ 222.274436][ T29] audit: type=1400 audit(1723570059.382:1762): avc: denied { watch watch_reads } for pid=12582 comm="syz.3.3032" path="/proc/171" dev="proc" ino=43352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 222.299062][ T29] audit: type=1400 audit(1723570059.412:1763): avc: denied { write } for pid=12582 comm="syz.3.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.330250][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.341362][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.352549][ T50] bond0 (unregistering): Released all slaves [ 222.395240][T12530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.415004][T12530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.428941][T12530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.438715][T12530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.455535][T12469] veth0_macvtap: entered promiscuous mode [ 222.470720][ T50] hsr_slave_0: left promiscuous mode [ 222.483673][ T50] hsr_slave_1: left promiscuous mode [ 222.491475][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.499072][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.506905][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.514517][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.524568][ T50] veth1_macvtap: left promiscuous mode [ 222.530121][ T50] veth0_macvtap: left promiscuous mode [ 222.535634][ T50] veth1_vlan: left promiscuous mode [ 222.541107][ T50] veth0_vlan: left promiscuous mode [ 222.655348][ T50] team0 (unregistering): Port device team_slave_1 removed [ 222.674722][ T50] team0 (unregistering): Port device team_slave_0 removed [ 222.727457][T12469] veth1_macvtap: entered promiscuous mode [ 222.775433][T12504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.785951][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.796476][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.806328][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.816795][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.826593][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.837156][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.847000][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.857464][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.868466][T12469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.882420][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.892885][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.902795][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.913224][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.923036][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.933491][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.943299][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.953782][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.964706][T12469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.977863][T12469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.986660][T12469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.995413][T12469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.004126][T12469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.054528][T12530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.082135][T12530] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.092871][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.100144][ T3279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.112979][T12605] loop2: detected capacity change from 0 to 1024 [ 223.120875][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.128109][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.159313][T12605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.189093][T12530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.199350][T12430] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /2/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 223.223927][T12430] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 223.226364][T12504] veth0_vlan: entered promiscuous mode [ 223.254890][T12504] veth1_vlan: entered promiscuous mode [ 223.270208][T12504] veth0_macvtap: entered promiscuous mode [ 223.278289][T12430] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /2/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 223.302020][T12504] veth1_macvtap: entered promiscuous mode [ 223.310225][T12618] xt_NFQUEUE: number of total queues is 0 [ 223.320899][T12430] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 223.329325][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.351748][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.351760][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.351773][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.351913][T12430] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /2/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 223.351903][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.351994][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.352004][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.352018][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.352028][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.352041][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.354844][T12430] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 223.366607][T12504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.388769][T12620] loop1: detected capacity change from 0 to 2048 [ 223.409387][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.437386][T12430] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /2/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 223.439264][T12430] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 223.447815][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.499391][T12430] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /2/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 223.502244][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.522359][T12430] EXT4-fs error (device loop2): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 223.534540][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.589381][T12620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.596785][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.649322][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.659131][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.669573][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.679419][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.689905][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.706257][T12504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.740747][T12504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.749886][T12504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.758713][T12504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.767454][T12504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.803781][T12469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.812689][T12530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.893571][ T29] audit: type=1400 audit(1723570061.002:1764): avc: denied { listen } for pid=12628 comm="syz.1.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.925434][ T29] audit: type=1400 audit(1723570061.002:1765): avc: denied { mount } for pid=12640 comm="syz.3.3039" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 223.948455][ T29] audit: type=1400 audit(1723570061.002:1766): avc: denied { write } for pid=12640 comm="syz.3.3039" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.970841][ T29] audit: type=1400 audit(1723570061.032:1767): avc: denied { connect } for pid=12628 comm="syz.1.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.990786][ T29] audit: type=1400 audit(1723570061.032:1768): avc: denied { unmount } for pid=11928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 224.040594][T12530] veth0_vlan: entered promiscuous mode [ 224.052668][T12530] veth1_vlan: entered promiscuous mode [ 224.058394][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3040'. [ 224.071469][T12530] veth0_macvtap: entered promiscuous mode [ 224.080948][T12530] veth1_macvtap: entered promiscuous mode [ 224.095252][ T29] audit: type=1400 audit(1723570061.202:1769): avc: denied { setopt } for pid=12649 comm="syz.3.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.098314][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.125431][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.135306][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.145922][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.156301][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.166904][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.176772][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.187264][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.197071][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.207535][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.217411][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.227843][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.239760][T12530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.253954][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.264680][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.274602][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.285044][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.295200][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.305628][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.315631][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.326061][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.335982][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.346701][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.356536][T12530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.366943][T12530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.377854][T12530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.390742][T12530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.399672][T12530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.409836][T12530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.418668][T12530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.506274][T12660] loop4: detected capacity change from 0 to 8192 [ 224.513692][T12660] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.648411][T12668] qrtr: Invalid version 6 [ 224.709589][T12672] loop1: detected capacity change from 0 to 2048 [ 224.718275][T12672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.731506][T12672] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.3048: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 224.748312][T12672] EXT4-fs (loop1): Remounting filesystem read-only [ 224.757685][T12675] loop0: detected capacity change from 0 to 2048 [ 224.795674][T12469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.817699][T12677] loop1: detected capacity change from 0 to 1024 [ 224.823330][T12675] loop0: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 224.824387][T12677] EXT4-fs: Ignoring removed orlov option [ 224.825648][T12675] loop0: p3 start 4259840 is beyond EOD, [ 224.915710][T12677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.921311][T12675] truncated [ 224.949133][T12677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.397106][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 225.397120][ T29] audit: type=1326 audit(1723570062.492:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.4.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa094d199f9 code=0x7fc00000 [ 225.426840][ T29] audit: type=1326 audit(1723570062.492:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.4.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7fc00000 [ 225.450612][ T29] audit: type=1326 audit(1723570062.492:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.4.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7fc00000 [ 225.477892][ T29] audit: type=1400 audit(1723570062.592:1777): avc: denied { unmount } for pid=11928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 225.513586][T12685] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3050'. [ 225.553875][T12689] loop4: detected capacity change from 0 to 2048 [ 225.564082][T12691] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 225.573583][T12689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.665384][T12697] netlink: 'syz.3.3056': attribute type 5 has an invalid length. [ 225.676406][ T29] audit: type=1326 audit(1723570062.772:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24365399f9 code=0x7ffc0000 [ 225.700536][ T29] audit: type=1326 audit(1723570062.772:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f24365399f9 code=0x7ffc0000 [ 225.724481][ T29] audit: type=1326 audit(1723570062.772:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24365399f9 code=0x7ffc0000 [ 225.748575][ T29] audit: type=1326 audit(1723570062.772:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f24365399f9 code=0x7ffc0000 [ 225.785314][ T29] audit: type=1326 audit(1723570062.892:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24365399f9 code=0x7ffc0000 [ 225.809339][T12469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.851369][ T29] audit: type=1326 audit(1723570062.932:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.3.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24365399f9 code=0x7ffc0000 [ 225.862184][T12705] loop0: detected capacity change from 0 to 512 [ 225.892718][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.938131][T12710] sctp: [Deprecated]: syz.3.3060 (pid 12710) Use of int in max_burst socket option. [ 225.938131][T12710] Use struct sctp_assoc_value instead [ 225.999062][T12715] loop1: detected capacity change from 0 to 256 [ 226.108050][T12430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.183657][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.344846][T12723] chnl_net:caif_netlink_parms(): no params data found [ 226.383888][T12723] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.391353][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.400527][T12723] bridge_slave_0: entered allmulticast mode [ 226.408987][T12723] bridge_slave_0: entered promiscuous mode [ 226.416649][T12723] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.423816][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.432993][T12723] bridge_slave_1: entered allmulticast mode [ 226.439854][T12723] bridge_slave_1: entered promiscuous mode [ 226.461577][T12723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.475682][T12723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.498075][T12723] team0: Port device team_slave_0 added [ 226.505016][T12723] team0: Port device team_slave_1 added [ 226.524368][T12723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.531438][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.557686][T12723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.569979][T12723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.576978][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.603096][T12723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.651115][T12723] hsr_slave_0: entered promiscuous mode [ 226.658725][T12723] hsr_slave_1: entered promiscuous mode [ 226.664705][T12723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.672382][T12723] Cannot create hsr debugfs directory [ 226.712140][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.781628][T12749] loop1: detected capacity change from 0 to 2048 [ 226.793091][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.809944][T12749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.831396][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.888966][T12469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.901201][ T50] bridge_slave_1: left allmulticast mode [ 226.907084][ T50] bridge_slave_1: left promiscuous mode [ 226.911881][T12759] FAULT_INJECTION: forcing a failure. [ 226.911881][T12759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.912754][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.925862][T12759] CPU: 1 UID: 0 PID: 12759 Comm: syz.0.3073 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 226.943477][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 226.953528][T12759] Call Trace: [ 226.956867][T12759] [ 226.959788][T12759] dump_stack_lvl+0xf2/0x150 [ 226.964446][T12759] dump_stack+0x15/0x20 [ 226.968627][T12759] should_fail_ex+0x229/0x230 [ 226.973334][T12759] should_fail+0xb/0x10 [ 226.977594][T12759] should_fail_usercopy+0x1a/0x20 [ 226.982674][T12759] _copy_from_user+0x1e/0xd0 [ 226.987269][T12759] do_vfs_ioctl+0x4fd/0x1560 [ 226.991860][T12759] ? __fget_files+0x1da/0x210 [ 226.996574][T12759] __se_sys_ioctl+0x81/0x150 [ 227.001157][T12759] __x64_sys_ioctl+0x43/0x50 [ 227.005807][T12759] x64_sys_call+0x15cc/0x2d60 [ 227.010593][T12759] do_syscall_64+0xc9/0x1c0 [ 227.015093][T12759] ? clear_bhb_loop+0x55/0xb0 [ 227.019806][T12759] ? clear_bhb_loop+0x55/0xb0 [ 227.024583][T12759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.030469][T12759] RIP: 0033:0x7feb9a8899f9 [ 227.034996][T12759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.054595][T12759] RSP: 002b:00007feb99501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.063139][T12759] RAX: ffffffffffffffda RBX: 00007feb9aa25f80 RCX: 00007feb9a8899f9 [ 227.071104][T12759] RDX: 0000000020000180 RSI: 00000000c020660b RDI: 0000000000000005 [ 227.079061][T12759] RBP: 00007feb99501090 R08: 0000000000000000 R09: 0000000000000000 [ 227.087064][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.095018][T12759] R13: 0000000000000000 R14: 00007feb9aa25f80 R15: 00007ffd136f0ac8 [ 227.103026][T12759] [ 227.116985][ T50] bridge_slave_0: left allmulticast mode [ 227.118039][T12761] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3072'. [ 227.122631][ T50] bridge_slave_0: left promiscuous mode [ 227.122761][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.131731][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3072'. [ 227.153211][T12761] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3072'. [ 227.153225][T12761] netlink: 'syz.1.3072': attribute type 3 has an invalid length. [ 227.153237][T12761] netlink: 'syz.1.3072': attribute type 2 has an invalid length. [ 227.153247][T12761] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3072'. [ 227.171273][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888112007600: rx timeout, send abort [ 227.298467][T12775] vhci_hcd: default hub control req: 0014 v0006 i0000 l0 [ 227.326191][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.384993][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.396310][ T50] bond0 (unregistering): Released all slaves [ 227.464024][T12788] bridge_slave_0: left allmulticast mode [ 227.469868][T12788] bridge_slave_0: left promiscuous mode [ 227.475719][T12788] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.671308][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888112007600: abort rx timeout. Force session deactivation [ 227.754224][T12792] loop4: detected capacity change from 0 to 2048 [ 227.768365][T12792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.826258][T12788] bridge_slave_1: left allmulticast mode [ 227.832171][T12788] bridge_slave_1: left promiscuous mode [ 227.837909][T12788] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.851192][T12788] bond0: (slave bond_slave_0): Releasing backup interface [ 227.859067][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.874543][T12788] bond0: (slave bond_slave_1): Releasing backup interface [ 227.877918][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3082'. [ 227.909158][T12788] team0: Port device team_slave_0 removed [ 227.930852][T12800] loop4: detected capacity change from 0 to 512 [ 227.931765][T12788] team0: Port device team_slave_1 removed [ 227.944339][T12788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.952082][T12788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.954358][T12800] EXT4-fs (loop4): too many log groups per flexible block group [ 227.967478][T12800] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 227.974583][T12800] EXT4-fs (loop4): mount failed [ 227.975910][T12788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.987285][T12788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.022809][ T50] hsr_slave_0: left promiscuous mode [ 228.034598][ T50] hsr_slave_1: left promiscuous mode [ 228.042049][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.049631][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.057605][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.059970][T12804] sctp: [Deprecated]: syz.4.3085 (pid 12804) Use of int in maxseg socket option. [ 228.059970][T12804] Use struct sctp_assoc_value instead [ 228.065079][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.099011][ T50] veth1_macvtap: left promiscuous mode [ 228.104526][ T50] veth0_macvtap: left promiscuous mode [ 228.107969][T12810] loop0: detected capacity change from 0 to 2048 [ 228.110179][ T50] veth1_vlan: left promiscuous mode [ 228.121726][ T50] veth0_vlan: left promiscuous mode [ 228.158304][T12812] dccp_invalid_packet: P.Data Offset(100) too large [ 228.194639][T12810] loop0: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 228.205875][T12810] loop0: p3 start 4259840 is beyond EOD, truncated [ 228.393673][T12820] x_tables: duplicate underflow at hook 2 [ 228.506015][ T50] team0 (unregistering): Port device team_slave_1 removed [ 228.524056][ T50] team0 (unregistering): Port device team_slave_0 removed [ 228.735168][T12824] sctp: [Deprecated]: syz.1.3092 (pid 12824) Use of int in max_burst socket option. [ 228.735168][T12824] Use struct sctp_assoc_value instead [ 228.840806][T12723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.858238][T12723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.872206][T12723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.904521][T12723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.016581][T12723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.029502][T12723] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.049260][T12723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.059804][T12723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.080941][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.088127][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.107830][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.115042][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.143013][T12841] loop4: detected capacity change from 0 to 1024 [ 229.149991][T12841] EXT4-fs: Ignoring removed orlov option [ 229.155723][T12841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.342381][T12841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.425176][T12723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.439980][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 229.448987][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3098'. [ 229.457926][T12841] veth1_to_bridge: entered promiscuous mode [ 229.463822][T12841] veth1_to_bridge: entered allmulticast mode [ 229.491521][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.500777][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.530761][T12860] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 229.549952][T12864] bridge0: entered promiscuous mode [ 229.555753][T12864] bridge0: left promiscuous mode [ 229.560900][T12860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3100'. [ 229.584064][T12861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3100'. [ 229.598635][T12860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3100'. [ 229.621078][T12723] veth0_vlan: entered promiscuous mode [ 229.630855][T12723] veth1_vlan: entered promiscuous mode [ 229.648058][T12723] veth0_macvtap: entered promiscuous mode [ 229.655800][T12723] veth1_macvtap: entered promiscuous mode [ 229.673396][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.683998][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.694109][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.694179][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.694294][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.694307][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.694321][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.694334][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.749830][T12879] loop0: detected capacity change from 0 to 1024 [ 229.755629][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.766179][T12879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.772559][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.780914][T12879] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 229.791387][T12723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.808157][T12879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.821654][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.832204][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.842568][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.853454][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.863416][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.874035][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.883906][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.894661][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.895171][T12890] loop1: detected capacity change from 0 to 1024 [ 229.904506][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.921531][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.935791][T12723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.941983][T12890] EXT4-fs: Ignoring removed orlov option [ 229.944507][T12723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.948752][T12890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.957366][T12723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.972644][T12723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.981434][T12723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.008715][T12890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.037698][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'. [ 230.046622][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3109'. [ 230.055633][T12890] vlan0: entered promiscuous mode [ 230.060849][T12890] vlan0: entered allmulticast mode [ 230.065955][T12890] veth0_vlan: entered allmulticast mode [ 230.105389][T12890] veth0_vlan: left allmulticast mode [ 230.152293][T12469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.166262][T12900] loop2: detected capacity change from 0 to 512 [ 230.192056][T12900] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3063: bg 0: block 5: invalid block bitmap [ 230.205897][T12900] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 230.214852][T12900] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3063: invalid indirect mapped block 3 (level 2) [ 230.229311][T12900] EXT4-fs (loop2): 1 orphan inode deleted [ 230.235048][T12900] EXT4-fs (loop2): 1 truncate cleaned up [ 230.241323][T12900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.358312][T12504] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.372011][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.408261][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.422866][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.471341][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.511221][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.575305][T12942] loop2: detected capacity change from 0 to 1024 [ 230.597518][T12942] EXT4-fs: Ignoring removed orlov option [ 230.603208][T12942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.669561][T12942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.759584][ T11] bond0 (unregistering): Released all slaves [ 230.769792][ T11] bond1 (unregistering): Released all slaves [ 230.784877][T12928] chnl_net:caif_netlink_parms(): no params data found [ 230.797637][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 230.806675][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 230.815580][T12942] sit0: entered promiscuous mode [ 230.820576][T12942] sit0: entered allmulticast mode [ 230.845661][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.873092][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 230.873106][ T29] audit: type=1326 audit(1723570067.982:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.2.3126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x0 [ 230.912290][ T11] hsr_slave_0: left promiscuous mode [ 230.917985][ T11] hsr_slave_1: left promiscuous mode [ 230.925237][ T11] veth1_macvtap: left promiscuous mode [ 230.930774][ T11] veth0_macvtap: left promiscuous mode [ 230.936314][ T11] veth1_vlan: left promiscuous mode [ 230.941554][ T11] veth0_vlan: left promiscuous mode [ 231.122045][T12928] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.129178][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.142231][T12928] bridge_slave_0: entered allmulticast mode [ 231.148784][T12961] loop1: detected capacity change from 0 to 128 [ 231.149104][T12928] bridge_slave_0: entered promiscuous mode [ 231.174342][T12928] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.181539][T12928] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.191869][T12928] bridge_slave_1: entered allmulticast mode [ 231.199436][T12928] bridge_slave_1: entered promiscuous mode [ 231.216102][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.228660][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.230742][T12928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.243608][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.245344][T12928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.259079][T12963] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 231.271405][T12963] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 231.282140][T12928] team0: Port device team_slave_0 added [ 231.288575][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.295509][T12928] team0: Port device team_slave_1 added [ 231.301767][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.309509][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.320443][ T29] audit: type=1326 audit(1723570068.432:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 231.344195][ T29] audit: type=1326 audit(1723570068.432:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 231.368744][ T29] audit: type=1326 audit(1723570068.432:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 231.392262][ T29] audit: type=1326 audit(1723570068.432:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 231.416000][ T29] audit: type=1326 audit(1723570068.432:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 231.439885][ T29] audit: type=1326 audit(1723570068.432:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 231.463437][ T29] audit: type=1326 audit(1723570068.432:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 231.487135][ T29] audit: type=1326 audit(1723570068.432:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 231.511124][ T29] audit: type=1326 audit(1723570068.432:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa094d1b817 code=0x7ffc0000 [ 231.535630][T12928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.542712][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.568896][T12928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.585288][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.592082][T12928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.599115][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.615783][T12973] loop1: detected capacity change from 0 to 1024 [ 231.625083][T12928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.641865][T12975] loop4: detected capacity change from 0 to 512 [ 231.649132][T12975] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 231.660725][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.667277][T12975] EXT4-fs (loop4): 1 truncate cleaned up [ 231.669498][T12973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.673225][T12975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.687657][T12928] hsr_slave_0: entered promiscuous mode [ 231.703849][T12928] hsr_slave_1: entered promiscuous mode [ 231.716462][T12928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.724211][T12928] Cannot create hsr debugfs directory [ 231.731344][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.747617][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.758765][T12963] wg0 speed is unknown, defaulting to 1000 [ 231.770567][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 231.800545][T12980] loop2: detected capacity change from 0 to 1024 [ 231.813820][T12980] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 231.823758][T12980] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 231.831620][T12469] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /21/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 231.833382][T12980] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 231.857694][T12469] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 231.888173][T12980] EXT4-fs error (device loop2): ext4_get_journal_inode:5740: inode #5: comm syz.2.3135: unexpected bad inode w/o EXT4_IGET_BAD [ 231.892109][T12469] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /21/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 231.901930][T12980] EXT4-fs (loop2): no journal found [ 231.924053][T12469] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 231.928476][T12980] EXT4-fs (loop2): can't get journal size [ 231.948716][T12469] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /21/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 231.976858][T12469] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 231.977495][T12980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.998495][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.018284][T12469] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /21/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 232.023117][T12469] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 232.023484][T12469] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /21/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 232.023797][T12469] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 232.126004][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.146404][T12992] loop4: detected capacity change from 0 to 1024 [ 232.166160][T12992] EXT4-fs: Ignoring removed i_version option [ 232.166400][T12984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.208860][T12992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.230918][T13003] loop2: detected capacity change from 0 to 1024 [ 232.238222][T13003] EXT4-fs: Ignoring removed orlov option [ 232.243928][T13003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.258693][T13003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.395729][T12928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.405238][T12928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.834476][T12928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.866684][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.903782][T12928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.017641][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.124467][T12928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.142135][T12928] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.223336][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.230456][ T3279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.262321][T13050] loop2: detected capacity change from 0 to 512 [ 234.269279][T13050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.287775][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.294953][ T9879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.306582][T13050] EXT4-fs (loop2): orphan cleanup on readonly fs [ 234.313766][T13050] EXT4-fs (loop2): 1 truncate cleaned up [ 234.319023][T13028] wg0 speed is unknown, defaulting to 1000 [ 234.322134][T13050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 234.357740][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.364139][T12928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.377213][T12928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.450500][T13067] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 234.461197][T13028] chnl_net:caif_netlink_parms(): no params data found [ 234.484921][T13072] __nla_validate_parse: 5 callbacks suppressed [ 234.484937][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3163'. [ 234.504210][T13072] loop2: detected capacity change from 0 to 512 [ 234.510769][T13072] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.513242][T12928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.525628][T13028] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.527028][T13072] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.3163: corrupted in-inode xattr: invalid ea_ino [ 234.532820][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.548046][T13072] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3163: couldn't read orphan inode 12 (err -117) [ 234.554854][T13028] bridge_slave_0: entered allmulticast mode [ 234.567833][T13072] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.571697][T13028] bridge_slave_0: entered promiscuous mode [ 234.590923][T13028] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.598159][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.605872][T13028] bridge_slave_1: entered allmulticast mode [ 234.613480][T13028] bridge_slave_1: entered promiscuous mode [ 234.636271][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.649581][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.693428][T13028] team0: Port device team_slave_0 added [ 234.700194][T13028] team0: Port device team_slave_1 added [ 234.718467][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.725513][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.751479][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.762683][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.769908][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.796049][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.832127][T13028] hsr_slave_0: entered promiscuous mode [ 234.838352][T13028] hsr_slave_1: entered promiscuous mode [ 234.844207][T13028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.852043][T13028] Cannot create hsr debugfs directory [ 234.864235][T12928] veth0_vlan: entered promiscuous mode [ 234.886382][T12928] veth1_vlan: entered promiscuous mode [ 234.926348][T13028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.944632][T12928] veth0_macvtap: entered promiscuous mode [ 234.953022][T12928] veth1_macvtap: entered promiscuous mode [ 234.963673][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.974305][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.984278][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.994816][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.004901][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.015687][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.025600][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.036600][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.046570][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.057160][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.067790][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.079266][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.090237][T12928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.101510][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.112323][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.122722][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.133271][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.143101][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.153623][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.163686][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.174794][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.183668][T13093] loop4: detected capacity change from 0 to 512 [ 235.185075][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.203292][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.203657][T13093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.213130][T12928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.213147][T12928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.244331][T13093] EXT4-fs (loop4): orphan cleanup on readonly fs [ 235.246184][T12928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.252580][T13093] EXT4-fs (loop4): 1 truncate cleaned up [ 235.264502][T13093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 235.284902][T13028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.304040][T12928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.312893][T12928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.321943][T12928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.330925][T12928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.341926][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.397442][T13028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.432564][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3169'. [ 235.468045][T13028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.543279][T13028] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.569732][T13028] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.592957][T13118] loop4: detected capacity change from 0 to 1024 [ 235.593703][T13028] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.613430][T13122] loop0: detected capacity change from 0 to 512 [ 235.620313][T13118] EXT4-fs: Ignoring removed oldalloc option [ 235.627534][T13122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 235.628949][T13028] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.647144][T13122] EXT4-fs (loop0): orphan cleanup on readonly fs [ 235.654040][T13122] EXT4-fs (loop0): 1 truncate cleaned up [ 235.662569][T13118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.682170][T13122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 235.731621][T12928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.745121][T13028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.770253][T13028] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.779422][T13129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=13129 comm=syz.0.3178 [ 235.800013][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.807176][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.817131][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.835870][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.843307][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.852813][T12723] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 235.867757][T13131] FAULT_INJECTION: forcing a failure. [ 235.867757][T13131] name failslab, interval 1, probability 0, space 0, times 0 [ 235.874937][T13028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.880583][T13131] CPU: 1 UID: 0 PID: 13131 Comm: syz.4.3179 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 235.880607][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 235.880618][T13131] Call Trace: [ 235.880625][T13131] [ 235.891004][T13028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.901997][T13131] dump_stack_lvl+0xf2/0x150 [ 235.902031][T13131] dump_stack+0x15/0x20 [ 235.902069][T13131] should_fail_ex+0x229/0x230 [ 235.942180][T13131] ? audit_log_d_path+0x96/0x250 [ 235.947282][T13131] should_failslab+0x8f/0xb0 [ 235.951885][T13131] __kmalloc_cache_noprof+0x4b/0x2a0 [ 235.957168][T13131] audit_log_d_path+0x96/0x250 [ 235.961946][T13131] ? get_file_rcu+0xf4/0x110 [ 235.966560][T13131] ? __rcu_read_unlock+0x4e/0x70 [ 235.971511][T13131] audit_log_d_path_exe+0x45/0x80 [ 235.976625][T13131] audit_log_task+0x155/0x180 [ 235.981352][T13131] audit_seccomp+0x68/0x130 [ 235.985962][T13131] __seccomp_filter+0x6fa/0x1180 [ 235.991034][T13131] ? proc_fail_nth_write+0x12d/0x160 [ 235.996351][T13131] ? down_read_killable+0x172/0x6b0 [ 236.001559][T13131] ? vfs_write+0x5a5/0x900 [ 236.005976][T13131] ? radix_tree_lookup+0xf9/0x150 [ 236.011096][T13131] ? __ptrace_may_access+0x1c0/0x350 [ 236.016446][T13131] __secure_computing+0x9f/0x1c0 [ 236.021395][T13131] syscall_trace_enter+0xd1/0x1f0 [ 236.026438][T13131] ? fpregs_assert_state_consistent+0x83/0xa0 [ 236.032644][T13131] do_syscall_64+0xaa/0x1c0 [ 236.037230][T13131] ? clear_bhb_loop+0x55/0xb0 [ 236.041925][T13131] ? clear_bhb_loop+0x55/0xb0 [ 236.046704][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.052775][T13131] RIP: 0033:0x7fa094d1843c [ 236.057186][T13131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 236.076882][T13131] RSP: 002b:00007fa093991030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.085328][T13131] RAX: ffffffffffffffda RBX: 00007fa094eb5f80 RCX: 00007fa094d1843c [ 236.093348][T13131] RDX: 000000000000000f RSI: 00007fa0939910a0 RDI: 0000000000000006 [ 236.101410][T13131] RBP: 00007fa093991090 R08: 0000000000000000 R09: 0000000000000000 [ 236.109381][T13131] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 236.117442][T13131] R13: 0000000000000000 R14: 00007fa094eb5f80 R15: 00007ffe1fbc7a88 [ 236.125571][T13131] [ 236.129845][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 236.129857][ T29] audit: type=1326 audit(1723570072.982:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.4.3179" exe="" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa094d1843c code=0x7ffc0000 [ 236.206402][T13141] loop4: detected capacity change from 0 to 512 [ 236.218889][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.225821][ T29] audit: type=1326 audit(1723570073.242:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa094d184df code=0x7ffc0000 [ 236.227483][T13141] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.249358][ T29] audit: type=1326 audit(1723570073.242:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa094d1868a code=0x7ffc0000 [ 236.282430][ T29] audit: type=1326 audit(1723570073.242:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 236.306144][ T29] audit: type=1326 audit(1723570073.242:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa094d199f9 code=0x7ffc0000 [ 236.347404][T13141] EXT4-fs (loop4): 1 truncate cleaned up [ 236.356170][T13141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.439506][T13154] FAULT_INJECTION: forcing a failure. [ 236.439506][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 236.452283][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.3.3185 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 236.463133][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 236.473392][T13154] Call Trace: [ 236.476674][T13154] [ 236.479651][T13154] dump_stack_lvl+0xf2/0x150 [ 236.484251][T13154] dump_stack+0x15/0x20 [ 236.488430][T13154] should_fail_ex+0x229/0x230 [ 236.493167][T13154] ? __kernfs_new_node+0x6a/0x380 [ 236.498261][T13154] should_failslab+0x8f/0xb0 [ 236.502968][T13154] kmem_cache_alloc_noprof+0x4c/0x290 [ 236.508363][T13154] __kernfs_new_node+0x6a/0x380 [ 236.513218][T13154] ? rb_insert_color+0x284/0x290 [ 236.518208][T13154] ? up_write+0x30/0xf0 [ 236.522370][T13154] ? kernfs_activate+0x256/0x270 [ 236.527337][T13154] kernfs_new_node+0xc8/0x140 [ 236.532027][T13154] __kernfs_create_file+0x49/0x180 [ 236.537161][T13154] ? __pfx_dev_attr_store+0x10/0x10 [ 236.542361][T13154] sysfs_add_file_mode_ns+0x136/0x1c0 [ 236.547771][T13154] internal_create_group+0x464/0x9b0 [ 236.553053][T13154] sysfs_create_groups+0x3c/0xe0 [ 236.558066][T13154] device_add_attrs+0x69/0x400 [ 236.562827][T13154] ? kobject_put+0x107/0x180 [ 236.567423][T13154] device_add+0x38d/0x790 [ 236.571920][T13154] netdev_register_kobject+0x100/0x230 [ 236.577397][T13154] register_netdevice+0x910/0xe30 [ 236.582416][T13154] bond_newlink+0x3b/0x90 [ 236.586779][T13154] ? __pfx_bond_newlink+0x10/0x10 [ 236.591876][T13154] rtnl_newlink+0xeff/0x1690 [ 236.596471][T13154] ? security_capable+0x64/0x80 [ 236.601393][T13154] ? ns_capable+0x7d/0xb0 [ 236.605781][T13154] ? __pfx_rtnl_newlink+0x10/0x10 [ 236.610877][T13154] rtnetlink_rcv_msg+0x6aa/0x710 [ 236.615967][T13154] ? ref_tracker_free+0x3a5/0x410 [ 236.621128][T13154] ? __dev_queue_xmit+0x161/0x1fe0 [ 236.626325][T13154] netlink_rcv_skb+0x12c/0x230 [ 236.631092][T13154] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.636647][T13154] rtnetlink_rcv+0x1c/0x30 [ 236.641104][T13154] netlink_unicast+0x593/0x670 [ 236.645985][T13154] netlink_sendmsg+0x5cc/0x6e0 [ 236.650887][T13154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.656240][T13154] __sock_sendmsg+0x140/0x180 [ 236.661023][T13154] ____sys_sendmsg+0x312/0x410 [ 236.665782][T13154] __sys_sendmsg+0x1e9/0x280 [ 236.670377][T13154] __x64_sys_sendmsg+0x46/0x50 [ 236.675159][T13154] x64_sys_call+0x2689/0x2d60 [ 236.679828][T13154] do_syscall_64+0xc9/0x1c0 [ 236.684344][T13154] ? clear_bhb_loop+0x55/0xb0 [ 236.689038][T13154] ? clear_bhb_loop+0x55/0xb0 [ 236.693707][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.699675][T13154] RIP: 0033:0x7f24365399f9 [ 236.704209][T13154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.724304][T13154] RSP: 002b:00007f24351b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.732740][T13154] RAX: ffffffffffffffda RBX: 00007f24366d5f80 RCX: 00007f24365399f9 [ 236.740737][T13154] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 236.748701][T13154] RBP: 00007f24351b1090 R08: 0000000000000000 R09: 0000000000000000 [ 236.756658][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.764713][T13154] R13: 0000000000000000 R14: 00007f24366d5f80 R15: 00007ffed7590948 [ 236.772724][T13154] [ 236.780371][T13154] bond3 (unregistered): Released all slaves [ 236.787619][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 236.825525][T13028] veth0_vlan: entered promiscuous mode [ 236.864549][T13028] veth1_vlan: entered promiscuous mode [ 236.907478][T13162] loop2: detected capacity change from 0 to 512 [ 236.928445][T13028] veth0_macvtap: entered promiscuous mode [ 236.944748][T13162] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.955867][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.957086][T13028] veth1_macvtap: entered promiscuous mode [ 236.982683][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.993607][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.003505][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.013958][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.023797][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.036106][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.045938][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.056972][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.066985][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.078929][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.088937][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.101645][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.113070][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.125003][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.137507][T13162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 237.157910][T13162] EXT4-fs (loop2): 1 truncate cleaned up [ 237.164130][T13162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 237.184886][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.205775][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.216344][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.226231][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.236686][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.251513][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.262573][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.270150][ T29] audit: type=1326 audit(1723570074.372:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.2.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 237.273189][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.297273][ T29] audit: type=1326 audit(1723570074.372:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.2.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 237.307992][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.341584][ T29] audit: type=1326 audit(1723570074.442:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.2.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 237.342498][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.365984][ T29] audit: type=1326 audit(1723570074.442:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.2.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 237.366012][ T29] audit: type=1326 audit(1723570074.442:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.2.3187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 237.430508][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.440587][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.451928][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.462818][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.462876][T12723] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /16/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 237.463095][T12723] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 23: comm syz-executor: path /16/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=4, size=1024 fake=0 [ 237.473762][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.531319][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.542828][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.566252][T13028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.575319][T13028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.584071][T13028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.592891][T13028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.627940][T13179] loop4: detected capacity change from 0 to 1024 [ 237.648721][T13179] EXT4-fs: Ignoring removed orlov option [ 237.654504][T13179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.689215][T13179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.712950][T13180] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3191'. [ 237.779359][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3151'. [ 237.782904][T13185] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 238.270567][T13198] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 238.330947][T13200] loop0: detected capacity change from 0 to 512 [ 238.348554][T13200] EXT4-fs (loop0): 1 truncate cleaned up [ 238.356758][T13200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.407058][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 238.489733][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.528350][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3202'. [ 238.622275][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 238.645153][T13216] bridge0: entered promiscuous mode [ 238.655037][T13216] macvtap1: entered promiscuous mode [ 238.660463][T13216] macvtap1: entered allmulticast mode [ 238.666112][T13216] bridge0: entered allmulticast mode [ 238.704545][T13218] bridge0: left allmulticast mode [ 238.709885][T13218] bridge0: left promiscuous mode [ 238.811260][T13220] FAULT_INJECTION: forcing a failure. [ 238.811260][T13220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.824560][T13220] CPU: 0 UID: 0 PID: 13220 Comm: syz.4.3204 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 238.835348][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 238.845395][T13220] Call Trace: [ 238.848668][T13220] [ 238.851592][T13220] dump_stack_lvl+0xf2/0x150 [ 238.856264][T13220] dump_stack+0x15/0x20 [ 238.860531][T13220] should_fail_ex+0x229/0x230 [ 238.865232][T13220] should_fail_alloc_page+0xfd/0x110 [ 238.870530][T13220] __alloc_pages_noprof+0x109/0x360 [ 238.875739][T13220] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 238.881167][T13220] folio_alloc_noprof+0xee/0x130 [ 238.886133][T13220] filemap_alloc_folio_noprof+0x69/0x220 [ 238.891777][T13220] __filemap_get_folio+0x298/0x5b0 [ 238.896886][T13220] ? __kmalloc_noprof+0x26d/0x370 [ 238.901973][T13220] aio_setup_ring+0x266/0x6b0 [ 238.906716][T13220] ioctx_alloc+0x2b2/0x4c0 [ 238.911139][T13220] __se_sys_io_setup+0x6b/0x1b0 [ 238.916035][T13220] __x64_sys_io_setup+0x31/0x40 [ 238.920953][T13220] x64_sys_call+0x2639/0x2d60 [ 238.925675][T13220] do_syscall_64+0xc9/0x1c0 [ 238.930271][T13220] ? clear_bhb_loop+0x55/0xb0 [ 238.934960][T13220] ? clear_bhb_loop+0x55/0xb0 [ 238.939729][T13220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.945645][T13220] RIP: 0033:0x7fa094d199f9 [ 238.950051][T13220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.970008][T13220] RSP: 002b:00007fa093991038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 238.978457][T13220] RAX: ffffffffffffffda RBX: 00007fa094eb5f80 RCX: 00007fa094d199f9 [ 238.986715][T13220] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000010000 [ 238.994687][T13220] RBP: 00007fa093991090 R08: 0000000000000000 R09: 0000000000000000 [ 239.002703][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.010740][T13220] R13: 0000000000000001 R14: 00007fa094eb5f80 R15: 00007ffe1fbc7a88 [ 239.018718][T13220] [ 239.024931][T12928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.090486][T13224] loop0: detected capacity change from 0 to 2048 [ 239.120987][T13224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.141813][T13233] loop4: detected capacity change from 0 to 1024 [ 239.163762][T13233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 239.179148][T13239] loop2: detected capacity change from 0 to 512 [ 239.206435][T13239] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.224015][T13233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.239109][T13239] EXT4-fs (loop2): 1 truncate cleaned up [ 239.250445][T13239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.273347][T13225] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 239.298180][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3211'. [ 239.332405][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 239.344982][ T28] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.344982][ T28] [ 239.354882][ T28] EXT4-fs (loop0): Total free blocks count 0 [ 239.360973][ T28] EXT4-fs (loop0): Free/Dirty block details [ 239.366935][ T28] EXT4-fs (loop0): free_blocks=2415919104 [ 239.372652][ T28] EXT4-fs (loop0): dirty_blocks=5488 [ 239.377950][ T28] EXT4-fs (loop0): Block reservation details [ 239.383919][ T28] EXT4-fs (loop0): i_reserved_data_blocks=343 [ 239.403614][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.403642][ T28] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 239.631828][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3221'. [ 239.672879][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 239.681903][T13205] ip_vti0: entered promiscuous mode [ 239.687132][T13205] ip_vti0: entered allmulticast mode [ 239.813491][T13275] loop1: detected capacity change from 0 to 128 [ 239.815992][T13273] loop2: detected capacity change from 0 to 2048 [ 239.822970][T13275] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.840358][T13275] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.879676][T13273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.880780][T13275] dummy0: entered promiscuous mode [ 239.898716][T13275] syz_tun: entered promiscuous mode [ 239.918945][T13028] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.954154][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.976152][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.979992][T13284] loop2: detected capacity change from 0 to 1764 [ 239.992477][T13284] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 240.001731][T13284] ISOFS: unable to read i-node block [ 240.007140][T13284] isofs_fill_super: get root inode failed [ 240.038778][T13289] loop2: detected capacity change from 0 to 2048 [ 240.064783][T13293] FAULT_INJECTION: forcing a failure. [ 240.064783][T13293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.078537][T13293] CPU: 0 UID: 0 PID: 13293 Comm: syz.4.3231 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 240.089655][T13293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 240.099798][T13293] Call Trace: [ 240.103112][T13293] [ 240.106117][T13293] dump_stack_lvl+0xf2/0x150 [ 240.111317][T13293] dump_stack+0x15/0x20 [ 240.115510][T13293] should_fail_ex+0x229/0x230 [ 240.120357][T13293] should_fail+0xb/0x10 [ 240.124615][T13293] should_fail_usercopy+0x1a/0x20 [ 240.129676][T13293] copy_page_from_iter_atomic+0x22a/0xda0 [ 240.136106][T13293] ? shmem_write_begin+0xa0/0x1c0 [ 240.141572][T13293] ? shmem_write_begin+0x10c/0x1c0 [ 240.146682][T13293] generic_perform_write+0x323/0x580 [ 240.152032][T13293] shmem_file_write_iter+0xc8/0xf0 [ 240.157142][T13293] vfs_write+0x78f/0x900 [ 240.161404][T13293] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 240.167358][T13293] ksys_write+0xeb/0x1b0 [ 240.171638][T13293] __x64_sys_write+0x42/0x50 [ 240.176244][T13293] x64_sys_call+0x27dd/0x2d60 [ 240.181068][T13293] do_syscall_64+0xc9/0x1c0 [ 240.186197][T13293] ? clear_bhb_loop+0x55/0xb0 [ 240.193790][T13293] ? clear_bhb_loop+0x55/0xb0 [ 240.199167][T13293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.205323][T13293] RIP: 0033:0x7fa094d184df [ 240.210253][T13293] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 240.230004][T13293] RSP: 002b:00007fa093990df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 240.238415][T13293] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fa094d184df [ 240.246461][T13293] RDX: 0000000000040000 RSI: 00007fa08b571000 RDI: 0000000000000006 [ 240.254421][T13293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000469 [ 240.262379][T13293] R10: 00000000000003b8 R11: 0000000000000293 R12: 0000000000000006 [ 240.270406][T13293] R13: 00007fa093990ef0 R14: 00007fa093990eb0 R15: 00007fa08b571000 [ 240.278433][T13293] [ 240.287632][T13293] loop4: detected capacity change from 0 to 512 [ 240.294342][T13293] EXT4-fs: Ignoring removed nobh option [ 240.301996][T13293] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 240.312588][T13293] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3231: attempt to clear invalid blocks 2 len 1 [ 240.316301][T13297] process 'syz.2.3232' launched './file0' with NULL argv: empty string added [ 240.326119][T13293] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 240.349306][T13293] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3231: invalid indirect mapped block 1819239214 (level 0) [ 240.364522][T13293] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3231: invalid indirect mapped block 1819239214 (level 1) [ 240.378999][T13293] EXT4-fs (loop4): 1 truncate cleaned up [ 240.385048][T13293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.401828][T13293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.423850][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3236'. [ 240.453874][T13309] loop0: detected capacity change from 0 to 2048 [ 240.461017][T13312] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 240.481346][T13309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.533138][T13317] netlink: 'syz.2.3241': attribute type 5 has an invalid length. [ 240.579299][T13320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.591996][T13320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.614830][T12928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.654485][T13332] loop2: detected capacity change from 0 to 1024 [ 240.661166][T13332] EXT4-fs: Ignoring removed orlov option [ 240.666935][T13332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.677320][T13331] loop0: detected capacity change from 0 to 2048 [ 240.688700][T13332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.701523][T13331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.720383][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3248'. [ 240.737264][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.971709][T13361] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 16: comm syz.0.3247: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 241.154202][T13366] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3255'. [ 241.155369][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 241.155382][ T29] audit: type=1400 audit(1723570078.262:2408): avc: denied { create } for pid=13367 comm="syz.3.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.163197][T13366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3255'. [ 241.199377][ T29] audit: type=1400 audit(1723570078.302:2409): avc: denied { create } for pid=13367 comm="syz.3.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 241.211742][T13368] netlink: 'syz.3.3256': attribute type 11 has an invalid length. [ 241.227255][T13368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3256'. [ 241.256760][ T29] audit: type=1400 audit(1723570078.362:2410): avc: denied { mounton } for pid=13371 comm="syz.4.3257" path="/proc/147/task" dev="proc" ino=47619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 241.257120][T13374] FAULT_INJECTION: forcing a failure. [ 241.257120][T13374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.279874][ T29] audit: type=1400 audit(1723570078.362:2411): avc: denied { mount } for pid=13371 comm="syz.4.3257" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 241.292672][T13374] CPU: 0 UID: 0 PID: 13374 Comm: syz.4.3257 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 241.292697][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 241.292708][T13374] Call Trace: [ 241.292715][T13374] [ 241.292722][T13374] dump_stack_lvl+0xf2/0x150 [ 241.292763][T13374] dump_stack+0x15/0x20 [ 241.292790][T13374] should_fail_ex+0x229/0x230 [ 241.292863][T13374] should_fail+0xb/0x10 [ 241.292889][T13374] should_fail_usercopy+0x1a/0x20 [ 241.292927][T13374] _copy_to_user+0x1e/0xa0 [ 241.292950][T13374] ? __pfx_ext4_fiemap+0x10/0x10 [ 241.374081][T13374] do_vfs_ioctl+0x101c/0x1560 [ 241.378764][T13374] ? __fget_files+0x1da/0x210 [ 241.383467][T13374] __se_sys_ioctl+0x81/0x150 [ 241.388152][T13374] __x64_sys_ioctl+0x43/0x50 [ 241.392776][T13374] x64_sys_call+0x15cc/0x2d60 [ 241.397480][T13374] do_syscall_64+0xc9/0x1c0 [ 241.402019][T13374] ? clear_bhb_loop+0x55/0xb0 [ 241.406692][T13374] ? clear_bhb_loop+0x55/0xb0 [ 241.411394][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.417278][T13374] RIP: 0033:0x7fa094d199f9 [ 241.421708][T13374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.442087][T13374] RSP: 002b:00007fa093991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.450586][T13374] RAX: ffffffffffffffda RBX: 00007fa094eb5f80 RCX: 00007fa094d199f9 [ 241.458547][T13374] RDX: 0000000020000180 RSI: 00000000c020660b RDI: 0000000000000005 [ 241.466746][T13374] RBP: 00007fa093991090 R08: 0000000000000000 R09: 0000000000000000 [ 241.475071][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.483223][T13374] R13: 0000000000000000 R14: 00007fa094eb5f80 R15: 00007ffe1fbc7a88 [ 241.491426][T13374] [ 241.508243][ T29] audit: type=1326 audit(1723570078.622:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.2.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 241.533060][ T29] audit: type=1326 audit(1723570078.622:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.2.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 241.556737][ T29] audit: type=1326 audit(1723570078.622:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.2.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 241.580390][ T29] audit: type=1326 audit(1723570078.622:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.2.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 241.588423][T13187] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 241.604810][ T29] audit: type=1326 audit(1723570078.622:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.2.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 241.642974][ T29] audit: type=1326 audit(1723570078.622:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.2.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2ced99f9 code=0x7ffc0000 [ 241.652108][T13380] loop1: detected capacity change from 0 to 1024 [ 241.676248][T12928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.680250][T13380] EXT4-fs: Ignoring removed orlov option [ 241.691011][T13380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.710185][T13386] FAULT_INJECTION: forcing a failure. [ 241.710185][T13386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.723725][T13386] CPU: 0 UID: 0 PID: 13386 Comm: syz.0.3260 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 241.734920][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 241.745060][T13386] Call Trace: [ 241.748340][T13386] [ 241.751438][T13386] dump_stack_lvl+0xf2/0x150 [ 241.756045][T13386] dump_stack+0x15/0x20 [ 241.760273][T13386] should_fail_ex+0x229/0x230 [ 241.765000][T13386] should_fail+0xb/0x10 [ 241.769179][T13386] should_fail_usercopy+0x1a/0x20 [ 241.774302][T13386] _copy_to_user+0x1e/0xa0 [ 241.778762][T13386] simple_read_from_buffer+0xa0/0x110 [ 241.784154][T13386] proc_fail_nth_read+0xfc/0x140 [ 241.789100][T13386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.794690][T13386] vfs_read+0x1a2/0x6e0 [ 241.798858][T13386] ? __rcu_read_unlock+0x4e/0x70 [ 241.803881][T13386] ? __fget_files+0x1da/0x210 [ 241.808740][T13386] ksys_read+0xeb/0x1b0 [ 241.813439][T13386] __x64_sys_read+0x42/0x50 [ 241.818000][T13386] x64_sys_call+0x27d3/0x2d60 [ 241.819308][T13380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.822727][T13386] do_syscall_64+0xc9/0x1c0 [ 241.839249][T13386] ? clear_bhb_loop+0x55/0xb0 [ 241.843937][T13386] ? clear_bhb_loop+0x55/0xb0 [ 241.848640][T13386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.854586][T13386] RIP: 0033:0x7f4c8485843c [ 241.858987][T13386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 241.879115][T13386] RSP: 002b:00007f4c834d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.887516][T13386] RAX: ffffffffffffffda RBX: 00007f4c849f5f80 RCX: 00007f4c8485843c [ 241.895485][T13386] RDX: 000000000000000f RSI: 00007f4c834d10a0 RDI: 0000000000000004 [ 241.903452][T13386] RBP: 00007f4c834d1090 R08: 0000000000000000 R09: 0000000000000000 [ 241.911524][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.920182][T13386] R13: 0000000000000000 R14: 00007f4c849f5f80 R15: 00007ffc2a34e048 [ 241.928319][T13386] [ 241.947181][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3261'. [ 241.956097][T13380] dummy0: entered allmulticast mode [ 242.004654][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.079332][T13407] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3269'. [ 242.100210][T13398] syz.0.3265[13398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.100383][T13398] syz.0.3265[13398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.114142][T13398] syz.0.3265[13398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.127179][T13398] syz.0.3265[13398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.141035][T13412] loop2: detected capacity change from 0 to 128 [ 242.193088][T13416] loop1: detected capacity change from 0 to 2048 [ 242.244213][T13416] loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 242.245488][T13416] loop1: p3 start 4259840 is beyond EOD, truncated [ 242.421827][T13418] loop0: detected capacity change from 0 to 512 [ 242.430094][T13418] EXT4-fs: quotafile must be on filesystem root [ 242.461648][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.484604][T13418] loop0: detected capacity change from 0 to 512 [ 242.493909][T13418] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 242.506577][T13418] block device autoloading is deprecated and will be removed. [ 242.514657][T13418] syz.0.3272: attempt to access beyond end of device [ 242.514657][T13418] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 242.527871][T13418] EXT4-fs (loop0): couldn't read superblock of external journal [ 242.906814][T13430] loop2: detected capacity change from 0 to 512 [ 242.920982][T13430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.933656][T13430] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.960280][T12723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.103797][T13441] loop4: detected capacity change from 0 to 1024 [ 243.154879][T13441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.203179][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 243.274536][T13448] loop1: detected capacity change from 0 to 512 [ 243.301634][T13448] EXT4-fs (loop1): too many log groups per flexible block group [ 243.309454][T13448] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 243.319433][T12530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.334475][T13448] EXT4-fs (loop1): mount failed [ 243.550062][T13497] loop1: detected capacity change from 0 to 1024 [ 243.563014][T13498] loop4: detected capacity change from 0 to 2048 [ 243.585768][T13497] EXT4-fs: Ignoring removed orlov option [ 243.592498][T13497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.627203][T13497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.646591][T13498] loop4: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 243.648282][T13498] loop4: p3 start 4259840 is beyond EOD, truncated [ 244.002888][T13428] bridge0: entered promiscuous mode [ 244.008500][T13428] macvtap1: entered promiscuous mode [ 244.013877][T13428] macvtap1: entered allmulticast mode [ 244.019375][T13428] bridge0: entered allmulticast mode [ 244.097869][T13428] bridge0: left allmulticast mode [ 244.103101][T13428] bridge0: left promiscuous mode [ 244.408528][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.493899][T13536] loop2: detected capacity change from 0 to 128 [ 244.643660][T13543] syz.2.3305 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 244.658045][T13543] loop2: detected capacity change from 0 to 512 [ 244.668561][T13543] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.862293][T13559] loop4: detected capacity change from 0 to 1024 [ 244.868948][T13559] EXT4-fs: Ignoring removed orlov option [ 244.874877][T13559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.248687][T13566] FAULT_INJECTION: forcing a failure. [ 245.248687][T13566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.261793][T13566] CPU: 0 UID: 0 PID: 13566 Comm: syz.0.3311 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 245.272587][T13566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 245.282632][T13566] Call Trace: [ 245.285891][T13566] [ 245.288810][T13566] dump_stack_lvl+0xf2/0x150 [ 245.293414][T13566] dump_stack+0x15/0x20 [ 245.297557][T13566] should_fail_ex+0x229/0x230 [ 245.302255][T13566] should_fail+0xb/0x10 [ 245.306501][T13566] should_fail_usercopy+0x1a/0x20 [ 245.311668][T13566] _copy_to_user+0x1e/0xa0 [ 245.316100][T13566] simple_read_from_buffer+0xa0/0x110 [ 245.321459][T13566] proc_fail_nth_read+0xfc/0x140 [ 245.326446][T13566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.332052][T13566] vfs_read+0x1a2/0x6e0 [ 245.336294][T13566] ? __rcu_read_unlock+0x4e/0x70 [ 245.341272][T13566] ? __fget_files+0x1da/0x210 [ 245.346009][T13566] ksys_read+0xeb/0x1b0 [ 245.350174][T13566] __x64_sys_read+0x42/0x50 [ 245.354782][T13566] x64_sys_call+0x27d3/0x2d60 [ 245.356940][T13570] tipc: Invalid UDP bearer configuration [ 245.359563][T13566] do_syscall_64+0xc9/0x1c0 [ 245.359734][T13570] ================================================================== [ 245.365247][T13566] ? clear_bhb_loop+0x55/0xb0 [ 245.369755][T13570] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 245.377762][T13566] ? clear_bhb_loop+0x55/0xb0 [ 245.382409][T13570] [ 245.382416][T13570] write to 0xffffffff86677b78 of 8 bytes by task 13566 on cpu 0: [ 245.389001][T13566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.393646][T13570] data_alloc+0x291/0x2c0 [ 245.395948][T13566] RIP: 0033:0x7f4c8485843c [ 245.403627][T13570] prb_reserve+0x85e/0xb60 [ 245.409489][T13566] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 245.413784][T13570] vprintk_store+0x53f/0x810 [ 245.418176][T13566] RSP: 002b:00007f4c834d1030 EFLAGS: 00000246 [ 245.422556][T13570] vprintk_emit+0x10c/0x5e0 [ 245.442177][T13566] ORIG_RAX: 0000000000000000 [ 245.446819][T13570] vprintk_default+0x26/0x30 [ 245.452849][T13566] RAX: ffffffffffffffda RBX: 00007f4c849f5f80 RCX: 00007f4c8485843c [ 245.457324][T13570] vprintk+0x75/0x80 [ 245.457353][T13570] _printk+0x7a/0xa0 [ 245.457368][T13570] show_trace_log_lvl+0x430/0x510 [ 245.457388][T13570] dump_stack_lvl+0xf2/0x150 [ 245.462055][T13566] RDX: 000000000000000f RSI: 00007f4c834d10a0 RDI: 0000000000000004 [ 245.466632][T13570] dump_stack+0x15/0x20 [ 245.474588][T13566] RBP: 00007f4c834d1090 R08: 0000000000000000 R09: 0000000000000000 [ 245.478547][T13570] should_fail_ex+0x229/0x230 [ 245.482414][T13566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.487493][T13570] should_fail+0xb/0x10 [ 245.492051][T13566] R13: 0000000000000000 R14: 00007f4c849f5f80 R15: 00007ffc2a34e048 [ 245.499993][T13570] should_fail_usercopy+0x1a/0x20 [ 245.504123][T13566] [ 245.512060][T13570] _copy_to_user+0x1e/0xa0 [ 245.549311][T13570] simple_read_from_buffer+0xa0/0x110 [ 245.554669][T13570] proc_fail_nth_read+0xfc/0x140 [ 245.559772][T13570] vfs_read+0x1a2/0x6e0 [ 245.564002][T13570] ksys_read+0xeb/0x1b0 [ 245.568498][T13570] __x64_sys_read+0x42/0x50 [ 245.572985][T13570] x64_sys_call+0x27d3/0x2d60 [ 245.577649][T13570] do_syscall_64+0xc9/0x1c0 [ 245.582155][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.588029][T13570] [ 245.590329][T13570] read to 0xffffffff86677b78 of 8 bytes by task 13570 on cpu 1: [ 245.597944][T13570] prb_reserve+0x235/0xb60 [ 245.602360][T13570] vprintk_store+0x53f/0x810 [ 245.607013][T13570] vprintk_emit+0x10c/0x5e0 [ 245.611495][T13570] vprintk_default+0x26/0x30 [ 245.616067][T13570] vprintk+0x75/0x80 [ 245.619944][T13570] _printk+0x7a/0xa0 [ 245.623825][T13570] __tipc_nl_bearer_enable+0xa3a/0xb20 [ 245.629263][T13570] tipc_nl_bearer_enable+0x22/0x40 [ 245.634352][T13570] genl_rcv_msg+0x61b/0x6c0 [ 245.638841][T13570] netlink_rcv_skb+0x12c/0x230 [ 245.643615][T13570] genl_rcv+0x28/0x40 [ 245.647586][T13570] netlink_unicast+0x593/0x670 [ 245.652338][T13570] netlink_sendmsg+0x5cc/0x6e0 [ 245.657098][T13570] __sock_sendmsg+0x140/0x180 [ 245.661870][T13570] ____sys_sendmsg+0x312/0x410 [ 245.666624][T13570] __sys_sendmsg+0x1e9/0x280 [ 245.671230][T13570] __x64_sys_sendmsg+0x46/0x50 [ 245.675979][T13570] x64_sys_call+0x2689/0x2d60 [ 245.680636][T13570] do_syscall_64+0xc9/0x1c0 [ 245.685127][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.691007][T13570] [ 245.693339][T13570] value changed: 0x0000000000002250 -> 0x00000000000a9fc8 [ 245.700428][T13570] [ 245.702736][T13570] Reported by Kernel Concurrency Sanitizer on: [ 245.708954][T13570] CPU: 1 UID: 0 PID: 13570 Comm: syz.3.3313 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 245.719789][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 245.729832][T13570] ================================================================== [ 245.359596][T13570] tipc: Enabling of bearer rejected, failed to enable media