last executing test programs: 6m8.892122343s ago: executing program 3 (id=807): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xf0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000002000000000000000001819", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) keyctl$setperm(0x5, 0x0, 0x1c243811) 6m8.743567043s ago: executing program 3 (id=809): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000900000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100ab0000000007010000f8ffffffb7020000fdffffffb60300000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff3702000000000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x3, 0x0, 0x4, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xce4}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r5, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() 6m8.503989672s ago: executing program 3 (id=815): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000400)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)="3a7996297e3969e81468f8d8a299d8d83ddf5956e1727521ff4f05524d3941de89b518c45acc55d1bd378a89797260a4411585d2a776079b15205dba99c4d81777a4b917289e4864aee3c1053b761ae038e2c4993bcadcb9cd775e556f03bbeb4b9021953e95d183e31771e13355a8152a1f0cfb9058af36368c7c5f0d5d2f86dd47562ad86e8de52b6dc88693411d0e50568c1648a14e2b0af39774b5cb172dad73d1dbf7b823a84829358fabe6dcb58c2fc9a65835ef1abaf685bfd85970e65a0466ee80fac184550878e5184e16ff6d268ab0c557a4c5623439f3bf3a0e9c8c877a14769c3ba4", 0xe8}], 0x1}, 0x801) 6m8.461790762s ago: executing program 3 (id=816): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 6m8.401992421s ago: executing program 3 (id=817): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x22, 0x80000, 0x85c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x20, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x8, 0x200000b, r6}}], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001640)={r6, 0x0, 0x101, 0xfffffb70, 0x63d7, 0x2}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x400}, 0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0xfa, 0xfffffffd}]}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_io_uring_setup(0x23f, &(0x7f00000002c0)={0x0, 0x3b08, 0x400, 0x3, 0x1f}, &(0x7f0000000380)=0x0, &(0x7f0000000ec0)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000001600)=@IORING_OP_SENDMSG={0x9, 0xf7, 0x0, r1, 0x0, &(0x7f00000015c0)={&(0x7f0000000f80)=@l2={0x1f, 0x7ff, @any, 0x1, 0x1}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001000)="c1980538f3b8a80561c51d63c768846a10c1b359524b9fa8936977b41e9c99cab036c9ead16cf8625168965e3f9df60e96da727f8a25bfeb6cb71514734ad29ff77a0a9cbcc4680190d93158a61cb0f17f1522da77acdceb0fda05716ea62126c12aa0c378b1c30cafa53e0caa6c", 0x6e}, {&(0x7f0000001080)="8f9b574f474dbc693772c70ead93ab91be08833bbf93c70e55203a158b5ebf22aa6e66930e45cb892c25d30ff977474f535f4bb55c6806ce9915a784030e74876d052cb48a5d4c71df14ea14c99ffc398abb5a88d713a84123fa713d8b7a47ad1f61fdd9a762e782336febee2c74bf2b39cf4d1cabc4c940e80dda01f8c5ed2e001863c4fb4dfb664b95b38445d2ff28d524cb0c09e04149578597ca253c67e1d3ce89d6d50f1007cfdc742933c066f6831b636041665dbe6b25274f20062bbf245c7ac344d1e287784607d9", 0xcc}, {&(0x7f0000001180)="bf17de3593b4c38df25f0a031cf8a120206272daba8324dfac7947ecef144312d8de798de9f614de845cccfc924f146c49308eea79b6358a0cb5fde93f46e3c251cd2d", 0x43}], 0x3, &(0x7f0000001240)=[{0x110, 0x88, 0xed1d, "f292f83872037588d88d3c48cee15fd7e58fa3db9b3dc2df810a482dbdcdbcd3b2bbcb9e3b0fd5e2e04c523f3863f04f3dc74b6708b20096fefb48f84d6101e2285249f154ed1175d46d6398e61515574629e97bd43e6e7ef9100e2342b40ec0e2c16e2d7e11d7f6ad4fa5033afac1271a05d731030b167e5b8774125d839da15369136167031f4441769cdbf161517888d32e71caaf168fd685349d50b9b31957f5ff1c5a7e22bde1dd3325f832adbb87094b90dad684cd33842acc8a813b1d89ee32a6896e233002a56662b9269a6692628886a4cadc0e55737f53d38c37cbd8899ea847fb10ea982b19c5a2131b5f57721986f3a2143c86"}, {0x30, 0x107, 0x7, "64678b6eecd72ff45129f249c0be5b938912a35c1ba5897ebb"}, {0x48, 0x116, 0x400, "85a3310a585e91348576c87a43791c804ffcfb1fcfd3ba3f978a84b49e7b7a0f4391a7dab655e43da1bc19584775272700"}, {0x108, 0x115, 0x9, "72a7fa117d7871585d77a200c41c4ac73dc694b95bfabcc32d70402775b27851481118f52b48fb84ad9d18de25786611548461755dd0bbbd49fb525f2b20eabbb1a4399b05bc4a455fd71f06d0c41bbe3f04675823b5a6cb6225109571b7d504b1db70890913068352a1af4c47266a2f7bfd0f06ee553f0c473587b0713ba2729056813e064215da75d6eeef970c3ee75d146d23600a9f56d9e9ff8edfa42955a0fe3aaaedf84b7914917cf9e06c1e250cc3728e8be4784f15b39ccc0444e33b3f0259904b2fe89b5799d77ea5cc98a0ff0f819c41819a0f7b3be6480bebba00d52f40625bc732bf4decfc08926d8e3bfa0e1707"}, {0xe0, 0x117, 0x5, "9af48c5cbcfe00b43d7bfb67a22c613809678faf6ad99388c19e152b3475b37fe7e8034c9c7799a74dfbfb906090643dfddf5afb11aef42690f4d10e9ffa0778c258664296d649ca3354a45f10aaa55409658fef13b89416ca6e8814e6e0e89233493c50dc5e06735baa055de638b0778f0708bcf2eee5918718e1d63f519fb139cb977f1d534765f21bfea98700384569143d406d11158b76b32a2e8a07478c0c5b41db362a053d3ec54f0b97bb16e8efb92f768208dd7122170496cc9983ce9ec4ae7ae6a391304bdb083b4e025f"}], 0x370}, 0x0, 0x44080, 0x1}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x3, 0x5fa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200008c0], 0x0, &(0x7f0000000000), &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]}, 0x672) 6m7.456184919s ago: executing program 3 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x7, 0x4e23, 0x3ff, 0xa, 0x20, 0x0, 0x2f, r2, r3}, {0x2, 0x10001, 0x0, 0x8, 0xffffffff00000000, 0x9b46, 0x2, 0x829}, {0x1, 0xc4b, 0x80000, 0xccd7}, 0x4, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0x2b}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x4f, 0x0, 0x9, 0x9}}, 0xe8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}], [], 0x6b}}) 5m52.388502534s ago: executing program 32 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x7, 0x4e23, 0x3ff, 0xa, 0x20, 0x0, 0x2f, r2, r3}, {0x2, 0x10001, 0x0, 0x8, 0xffffffff00000000, 0x9b46, 0x2, 0x829}, {0x1, 0xc4b, 0x80000, 0xccd7}, 0x4, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0x2b}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x4f, 0x0, 0x9, 0x9}}, 0xe8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}], [], 0x6b}}) 3m58.311229644s ago: executing program 2 (id=3506): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x1016c7, 0x8, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xa8, 0x110, 0x0, {0x700}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x1, @ANYBLOB="002a0bb629f962f989047f1200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES8=r0], 0x50) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x486180, 0xb5588ef82e871e8b) mknodat(r3, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x6}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') bpf$PROG_LOAD(0x5, 0x0, 0xd314b4a0a8b41bc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 3m58.230118374s ago: executing program 2 (id=3509): bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000700)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x41c, &(0x7f0000000000)=ANY=[@ANYBLOB='size=%']) 3m58.197205764s ago: executing program 2 (id=3510): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) socket(0x2, 0x3, 0x100000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 3m58.152509614s ago: executing program 2 (id=3512): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000f80)={0x1220, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "2b8ebb10165297f0eada811f10ad543dc6b666d02a83c6d14e1ac798d956fecb11cd1f363d9b1c8bbfc6bd3fa1144e8b77049ba697abda41ad7f5e5131ae1e48d469c31d8b20b85ea02b69109bdfeae6043e656e6d0a6d72510e2e861ce4ae0162eaa8de47fcad4fa33ec4d8a98504821b1e0ffde6e7eee6cf110cb2896880428421ffdaf11f3c05e17c5eafee6ae662d4f8dd0ad46a264dd69b1deda489964120b29929030a68ccfdff56984da2cd1ceaf5d3aec271b6efbc39ff05866f9e"}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "6ba5679ad16783cadec14f6324a348f37dcc1c0d74ca3989c0e3b5437e44e1624313e6d750885972b7c3e9d375b9695b79cd152762b941bb99caf5366b6ecee58bf85d13f4f3e0adb8888418f01ea17361eee481f5424a20a9d3ac66c46f3a7487a25419d56dc5ebd5345e348fbea9bd37d13a2fef60e79b8323966bbfc56dab856d87d853bf633a15c2335d16c3c7ccadf9a933a5575fe0"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7c6d}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#\'/-.$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '][\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ']}(-)(@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "ccdedb661c27c2040b8e0b16007c5e31"}]}]}, 0x1220}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) r6 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000600)=0x1) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000040)={0x31, 0x5, 0xfffffffffffff2fa, 0xfffffffffffffe01, 0x7, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket(0x0, 0x5, 0xff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x80000) 3m57.843028003s ago: executing program 2 (id=3525): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x39}, @multicast2, 0xfffe, "66c5af0000d40600", 0x4, 0x10000, 0x80, 0x1}, 0x3c) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1}, 0x18) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 3m57.259572541s ago: executing program 2 (id=3542): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3m57.259410841s ago: executing program 33 (id=3542): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 21.05795579s ago: executing program 0 (id=10152): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile={0xf, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0xe7dc7f025d63929c, 0x5f, 0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000280)=""/68, 0x2c, 0x44, 0x0, 0xff, 0x0, @void, @value}, 0x28) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000100)='GPL\x00', 0x10, 0xe5, &(0x7f0000000140)=""/229, 0x41000, 0xc, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xa, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3], 0x0, 0x10, 0x80000001, @void, @value}, 0x94) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0xe73}}, 0x1) 20.99147965s ago: executing program 0 (id=10153): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$vcs(0xffffffffffffff9c, 0x0, 0x220000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000000)='system_u:object_r:userio_device_t:s0\x00', 0xd) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000001780)={@val, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe0, 0xa00, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0xcc, 0x0, @wg=@data={0x4, 0xc, 0x0, "8e25e378923e3caba370ee8bcc42f44419c541f70613c825b66668f0b8e4dc8f32d5c414351d97ef4707e2f3e8fe21e74aac3137c0fb6349ae54c1da8083b472c82f128cc976f4f7f67d679b380da4be6ce6168b2512a33c234d58d3cc9b707d1d92d6de8e6be7f113aae5256d6b153123834c186087c59d5775cdc765d3399c457e3cddcd88d75d01490bb495857b8b2c3c632921195d54b26d7db09deaf0f06b10351e8fd74f55ee6237c134e813a7141529bb"}}}}}}}, 0xfa) r9 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x0, 0xffffffff}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0), 0x1800}], 0x1}}], 0x1, 0x9200000000000000) dup3(r9, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x1d) r10 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r10, &(0x7f00000002c0)='./file0\x00') statx(r10, &(0x7f0000000300)='./file0/../file0\x00', 0x4000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 20.87147599s ago: executing program 0 (id=10162): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r1, 0x0, 0x0) 20.832704619s ago: executing program 0 (id=10166): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2007}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x5e, &(0x7f00000008c0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 2) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 20.581097139s ago: executing program 0 (id=10172): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000015000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 572.163482ms ago: executing program 5 (id=10705): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) 515.873832ms ago: executing program 4 (id=10706): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 499.536771ms ago: executing program 4 (id=10707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000015000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) 476.209491ms ago: executing program 7 (id=10708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000217100000001010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000016d8ce4db711d5e46c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e30000000000000000000000014000100677265e52ea619052f9c08000000040008000140000000005c0000"], 0x4b0}}, 0x0) 466.340891ms ago: executing program 1 (id=10709): r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0xd, '\x00', r6, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f15210181d736b2d3da7d24857a8", 0x70) write$qrtrtun(r4, &(0x7f0000000540)="9d8d645e53b6183d874f9e06a18dd009a0d07d18950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bfd9a315544fa0a1622d749faba7978890835497c9b7ab548704e680dae25bc94962f5fce4", 0x53) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xc3], 0x0, 0x0, 0x1, 0x1}}, 0x40) clock_adjtime(0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 335.935191ms ago: executing program 1 (id=10713): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x11ac, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff2}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x1170, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x200}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x1140, 0x7, [@m_ct={0xf4, 0x3, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x4, 0x7, 0xfffff374, 0xf}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}]}, {0x99, 0x6, "1426d3280c9cede5ba3cf25b98b07c1f8bef126c99570c2540016528250f2ac782c3ccf707baef0a06e6063cbc26b1cc375787fd6b9f5a1a38fd65271e32c2972849923cc64febec8211584cad96587bd88f07785ddb6602c2b61bca929bc21252b5f720a779344f4af3c4bd64975321ea2c0f39aa5977c66f631a58b5d1ad29c6e2db23d343014c6d413ef3e670e8ad417c1f0d75"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0xc54, 0x20, 0x0, 0x0, {{0xb}, {0xc28, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xff, 0x1, 0x6, 0x5, 0x401, 0x10001, 0x0, 0x8, 0x8001, 0xd, 0x511e, 0x7, 0x998, 0x401, 0x0, 0x80000000, 0x3, 0x91, 0x8, 0x9, 0x9, 0x2, 0x1, 0xb4, 0x9, 0x400, 0x5, 0x1d52, 0x3, 0x5, 0x2efd, 0xffffffff, 0x8000000, 0x4, 0x8, 0x6, 0xd67, 0x2, 0xff, 0x182c, 0x3, 0x6, 0x0, 0x4, 0x6, 0xc1, 0x3, 0x1, 0x40, 0x0, 0x9, 0x623, 0x2, 0x5, 0x1, 0x3, 0x100, 0x6, 0x0, 0x5, 0x972, 0x4, 0xfda2, 0x5, 0x4, 0xfffffffd, 0xfffffffb, 0xcb3d, 0x8, 0x5, 0xac1, 0x50, 0x2, 0x2, 0x8, 0x6, 0x5692, 0x1ff, 0xff, 0x8, 0x2, 0x1, 0x8, 0x1000, 0x6, 0x4, 0x4, 0xf, 0x10, 0x7ff, 0x6, 0x4, 0x61, 0x76, 0x0, 0x4, 0x2, 0x2, 0x141e, 0x4, 0xfffffff9, 0x0, 0x10000, 0x3, 0x2, 0x5, 0x7fff, 0x8, 0xfffffff8, 0x0, 0x9, 0xc0a5, 0x9, 0xce1, 0x1, 0x2, 0x5, 0x7, 0x400000, 0x10000, 0x6, 0xcce, 0x4, 0x5, 0x1000, 0x6, 0xaa9, 0x81, 0x1, 0x10000, 0x401, 0x57, 0x8e0, 0xf8, 0xd3, 0x80000001, 0x40000, 0x0, 0xffff, 0x88e9, 0x3, 0x1, 0x4, 0x3, 0x4, 0x7, 0x10, 0x3, 0x4, 0x81, 0x2d0d, 0x1, 0x6, 0x9, 0x1, 0xffff0e3e, 0x8, 0x3b52, 0x10, 0x2, 0x4, 0x7, 0x7ff, 0x4, 0x5, 0x4, 0x2, 0x1ff, 0x1, 0x90f2, 0x4, 0xa, 0x1, 0xe, 0x1, 0xffffff0a, 0x7e79, 0x10, 0x0, 0xf586, 0x9, 0x689, 0x0, 0x1, 0x6, 0x8, 0x5, 0x5, 0x2, 0x9, 0x1ff, 0x10, 0x7f800, 0x0, 0xfffffff9, 0x0, 0x1, 0x7, 0x1000, 0x10, 0x57b, 0x7, 0x0, 0x80, 0x2, 0x4, 0xfffffcfb, 0x7, 0x4, 0x5, 0x7fffffff, 0x2, 0xd, 0x800, 0x889, 0x4, 0x0, 0x7, 0x7, 0x7, 0xfffffffc, 0x3, 0xa5, 0xffffffe4, 0x6, 0xe, 0x7, 0x8, 0x9, 0x10001, 0x10, 0x400, 0x100, 0x101, 0x200, 0xfffffff7, 0x0, 0x8000, 0x6, 0x6, 0x10000, 0x0, 0xa03, 0xff, 0x8, 0x3, 0xbb90, 0x3, 0x916, 0x7, 0x2, 0x0, 0x2, 0x4, 0xc94]}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x6, 0x9, 0x6, 0xf47, 0x8, 0x2af6afca, 0x29, 0x1, 0xf3, 0x6, 0x2, 0x401, 0x7, 0x2, 0x5, 0x7fffffff, 0xec41, 0xfffffffc, 0x9, 0x6, 0x5f, 0x40, 0x3, 0x5a59, 0x3, 0xfffffc00, 0x9, 0x1, 0x3, 0x5, 0x798, 0x7, 0xff, 0xd4, 0x81, 0x200, 0x8, 0x0, 0xc5e, 0x9, 0x0, 0x400, 0x9, 0x9, 0x4, 0x6, 0x8, 0x3, 0x3, 0xfffffff8, 0x9, 0x8, 0x4, 0x7, 0x3, 0x401, 0xd1, 0x401, 0x5, 0xe, 0x6, 0xf, 0x8000, 0x8, 0x5, 0x80, 0x200, 0x7, 0x1, 0x7, 0x7fff, 0xffffffff, 0x6, 0x2, 0x2, 0x9, 0x6, 0x1, 0x9, 0x80000001, 0x9, 0xf7, 0x80, 0x401, 0x0, 0xf, 0x101, 0x81, 0x7, 0x6a6, 0x1c0, 0xb, 0x6d, 0x400, 0x0, 0x9, 0x4, 0xce0b, 0xfff, 0x9, 0x618, 0x52, 0x9, 0x0, 0xffff, 0x9, 0x6, 0x9cf, 0x1ff, 0x1000, 0x2, 0x1, 0xc14d, 0xf, 0x400, 0x2, 0x67b0, 0x3874a753, 0x7, 0x0, 0x5, 0x41e5, 0x5, 0x4, 0x5, 0x80, 0x0, 0x8, 0x6e, 0x7ff, 0x7c, 0x9, 0x1, 0x7, 0x0, 0x5, 0x1, 0x8, 0x6, 0xfffffff8, 0x6, 0x0, 0x2, 0x3, 0x8, 0x7d01, 0x2, 0x4, 0x6, 0x9, 0x2be, 0x40c3, 0x6, 0x7, 0x3, 0x6, 0x7, 0x2, 0x9, 0x7, 0x0, 0x7, 0x5, 0x6, 0xd1, 0x9, 0x1, 0xffff0000, 0x80000001, 0x3, 0x96, 0xff, 0x401, 0x7, 0x2, 0x7, 0x6, 0x8, 0x3, 0xc8d, 0x1, 0x6, 0xfffff735, 0xe, 0xfc000000, 0x0, 0x80000001, 0x1, 0x3, 0x6, 0x6, 0x1, 0xf, 0x8, 0x6, 0x200, 0xfffffff2, 0x320d, 0xfffffbff, 0x3, 0xfffffffd, 0x5, 0x1, 0xb, 0x80, 0x0, 0x6, 0xf, 0x4d, 0x6, 0xffffffff, 0xd018, 0xd, 0x8, 0x0, 0x4, 0xc9, 0xffff, 0x1ec, 0x4, 0x1, 0xe035, 0xe2, 0xab, 0x800000, 0x63d, 0x0, 0x0, 0x4, 0x6, 0xe, 0xde9b, 0x733, 0x1, 0x5, 0xc8c5, 0x2, 0x9, 0x7fff, 0x4, 0x7, 0x0, 0x5, 0x8000, 0x7, 0x1, 0x22db, 0x400, 0x23, 0x10000, 0x9, 0x9, 0x6, 0xa, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c83, 0x5, 0x3, 0x9, 0x7f, 0x80, 0x1000, 0x8, 0xffffbbf0, 0x30, 0x80000000, 0x3, 0x3, 0x0, 0x11, 0x8, 0x59, 0x2, 0x6, 0xc, 0x7, 0x0, 0x1, 0x7fffffff, 0x7, 0x519, 0x7, 0x0, 0xfffffffa, 0x3ece, 0x5, 0x8, 0xd92, 0x7, 0x893, 0x7f, 0x9, 0x1, 0x101, 0xd82, 0x401, 0xfffffffa, 0x1, 0x8, 0x4, 0x9, 0x0, 0x74, 0x1, 0x1000, 0x7, 0x4, 0x0, 0x2, 0x2, 0xe0000000, 0x0, 0xf3e, 0x7, 0x80, 0x480000, 0x5, 0x5, 0x8, 0x6b56, 0x4, 0x8, 0x3, 0x7, 0x3, 0x4, 0x3, 0xb451, 0x7, 0x7, 0xe, 0x2, 0x100, 0x9, 0x3, 0x2, 0x1, 0x7, 0x3, 0x8, 0x80, 0x8, 0x7000, 0x4, 0x7, 0x5, 0xfffffff7, 0xb, 0x7, 0x4, 0x101, 0x87, 0x7, 0x5e, 0x3, 0x8, 0xfffffffa, 0x3, 0x5, 0xffffffff, 0x5, 0x0, 0x4, 0xf, 0x4, 0xe, 0x5c0, 0x7, 0x1000, 0x3, 0x1, 0x6, 0x0, 0x7, 0x2, 0xb3, 0x7f, 0x4, 0xf9df, 0x9, 0x6, 0x4, 0x5, 0x4, 0xfffffffb, 0xffffffff, 0xfff, 0x401, 0x80000000, 0x81, 0x7, 0x7, 0x9, 0x6, 0x200, 0x7, 0x2, 0x7, 0x6011, 0x1, 0x7fffffff, 0x7, 0x4, 0xffff, 0x4, 0xc, 0x7, 0x5, 0x42d3, 0x8, 0x9, 0x5, 0x3, 0x9817, 0x10, 0x4, 0x8, 0x1, 0x74, 0xb8, 0x1, 0x3, 0x1, 0xe, 0x4, 0x1000, 0x400, 0xf11c, 0x5, 0x2d0, 0x3, 0x5, 0x2, 0x7, 0x0, 0x9512, 0x6, 0x4, 0xaea1, 0x5, 0x3, 0x8, 0xa9, 0x9, 0x6, 0x800, 0x7f, 0x7, 0x10000, 0x100, 0xa6, 0x9, 0x2, 0x6, 0x800, 0x7, 0x6147, 0x6, 0x10, 0x6, 0xa, 0x8ee, 0x9, 0x6, 0x40, 0x8e9, 0x0, 0x7, 0x8, 0x0, 0x1, 0x7, 0xffffffff, 0x5990df92, 0x101, 0xfffffff1, 0x5, 0xf, 0x332c, 0x100, 0x7f, 0x4, 0x20000, 0x8001, 0x0, 0xfff, 0x6, 0x0, 0x7, 0x5, 0xf87, 0x5a, 0x6, 0x4, 0x6, 0xfffffff9, 0x1, 0x65ef, 0x8, 0x0, 0xffffff7f, 0x1, 0x1, 0x10000, 0x80, 0x64, 0x80000001, 0x6, 0x0, 0x10, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6a}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x154, 0x15, 0x0, 0x0, {{0x7}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffc01}, @TCA_IPT_INDEX={0x8, 0x3, 0x90}, @TCA_IPT_TARG={0x58, 0x6, {0x2, 'security\x00', 0x2, 0x8, "4a528233e03ac0c3b5da48ec1ca6e3a3e3f92ba6d2d990b9c847271e0d10cf3328a46f612aa1694e8e5fde2425a9"}}, @TCA_IPT_TARG={0x3d, 0x6, {0x6, 'security\x00', 0x63, 0xc, "f74fefd4940193941910a10b7b3c60639c9c5a"}}, @TCA_IPT_TARG={0x4d, 0x6, {0xffff, 'mangle\x00', 0x8, 0x4, "098523af0734436422fcbc0c1d83bd635050adb5f801f6878ebeb24faf9e6446035061"}}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5aa4000100"/37}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x43}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0xa}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x54, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x25, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfe"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x30, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x1}, 0x6004800) r0 = socket(0x10, 0x803, 0x0) sendmmsg$inet(r0, &(0x7f0000000340), 0x0, 0x40) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000580)={0x0, 0x8, 0x9, 0x0, 0xe79, 0x5}, &(0x7f00000005c0)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) shutdown(r0, 0x1) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = accept(r3, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300)="4881", 0x2, 0x4041, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8, 0x81}, &(0x7f00000006c0)=0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910ff"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000900003"], 0x4b0}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x1c, r9, 0x1, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}]}, 0xfffffdee}}, 0x20000004) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 312.387241ms ago: executing program 4 (id=10714): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffd}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) unshare(0x46060480) write(r0, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 308.282101ms ago: executing program 1 (id=10715): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000030c0)=""/4110, 0x100e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4a, &(0x7f0000000080)=ANY=[@ANYRES8], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = epoll_create1(0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xfe, 0x2, 0x6, 0x8, 0x0, 0xffffffffffffff74, 0x40, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffeffff, 0x7ff}, 0x2080, 0x1, 0xf0a, 0x1, 0x4, 0x6, 0xfffe, 0x0, 0x800}, 0x0, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r6, 0xa) r7 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa, 0xf, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff", @ANYRES32], 0x5c}}, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x6000001e}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x401a, 0x0, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000000)='cpu<=0||!') connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d2140000000000000000001400"], 0x68}}, 0x0) 157.839971ms ago: executing program 4 (id=10716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r2, &(0x7f0000000100)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3ffffffffffffd2, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r5, 0xd51e, 0x7f, 0x6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = gettid() tkill(r6, 0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r5, 0xc}, 0x8) 0s ago: executing program 7 (id=10717): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f00000002c0)='./file0\x00') statx(r4, &(0x7f0000000300)='./file0/../file0\x00', 0x4000, 0x0, 0x0) kernel console output (not intermixed with test programs): 2][T30262] macvlan2: entered promiscuous mode [ 408.955547][T30262] bridge0: port 3(macvlan2) entered blocking state [ 408.962858][T30262] bridge0: port 3(macvlan2) entered disabled state [ 408.970344][T30262] macvlan2: entered allmulticast mode [ 408.975853][T30262] bridge0: entered allmulticast mode [ 408.986507][T30262] macvlan2: left allmulticast mode [ 408.991708][T30262] bridge0: left allmulticast mode [ 408.998931][T30262] bridge0: left promiscuous mode [ 409.027300][T30187] team0: Port device team_slave_0 added [ 409.036617][T30187] team0: Port device team_slave_1 added [ 409.081438][T30187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.088481][T30187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.114595][T30187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.138138][T30187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.145279][T30187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.171390][T30187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.193926][T30274] bridge0: entered promiscuous mode [ 409.199292][T30274] macvlan2: entered promiscuous mode [ 409.234869][T30274] bridge0: port 3(macvlan2) entered blocking state [ 409.241510][T30274] bridge0: port 3(macvlan2) entered disabled state [ 409.256295][T30274] macvlan2: entered allmulticast mode [ 409.262559][T30274] bridge0: entered allmulticast mode [ 409.277756][T30274] macvlan2: left allmulticast mode [ 409.282975][T30274] bridge0: left allmulticast mode [ 409.307868][T30274] bridge0: left promiscuous mode [ 409.370515][T30187] hsr_slave_0: entered promiscuous mode [ 409.388051][T30187] hsr_slave_1: entered promiscuous mode [ 409.403762][T30187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.426682][T30187] Cannot create hsr debugfs directory [ 409.553101][T30187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.565935][T30301] bpf_get_probe_write_proto: 2 callbacks suppressed [ 409.565951][T30301] syz.4.9682[30301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.606854][T30301] syz.4.9682[30301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.609429][T30187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.643998][T30301] syz.4.9682[30301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.733966][T30187] team0: Port device netdevsim1 removed [ 409.758246][T30187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.839157][T30187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.920380][T30187] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.940283][T30187] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.959999][T30187] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 410.009268][T30187] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 410.143929][T30363] bridge0: entered promiscuous mode [ 410.168820][T30363] macvlan3: entered promiscuous mode [ 410.185643][T30363] bridge0: port 3(macvlan3) entered blocking state [ 410.192943][T30363] bridge0: port 3(macvlan3) entered disabled state [ 410.209813][T30363] macvlan3: entered allmulticast mode [ 410.215393][T30363] bridge0: entered allmulticast mode [ 410.243296][T30363] macvlan3: left allmulticast mode [ 410.248548][T30363] bridge0: left allmulticast mode [ 410.270688][T30363] bridge0: left promiscuous mode [ 410.319383][T30187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.338984][T30187] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.353039][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.360245][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.386780][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.393972][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.584646][T30187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.646792][T30403] bridge0: entered promiscuous mode [ 410.659105][T30403] macvlan3: entered promiscuous mode [ 410.695791][T30403] bridge0: port 3(macvlan3) entered blocking state [ 410.702562][T30403] bridge0: port 3(macvlan3) entered disabled state [ 410.714090][T30403] macvlan3: entered allmulticast mode [ 410.719615][T30403] bridge0: entered allmulticast mode [ 410.727134][T30403] macvlan3: left allmulticast mode [ 410.732426][T30403] bridge0: left allmulticast mode [ 410.741160][T30403] bridge0: left promiscuous mode [ 410.791512][T30408] bridge0: entered promiscuous mode [ 410.796842][T30408] macvlan2: entered promiscuous mode [ 410.806213][T30408] bridge0: port 3(macvlan2) entered blocking state [ 410.812840][T30408] bridge0: port 3(macvlan2) entered disabled state [ 410.845757][T30408] macvlan2: entered allmulticast mode [ 410.851307][T30408] bridge0: entered allmulticast mode [ 410.870146][T30408] macvlan2: left allmulticast mode [ 410.872859][ T29] kauditd_printk_skb: 712 callbacks suppressed [ 410.872878][ T29] audit: type=1326 audit(1736545216.481:18075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30409 comm="syz.0.9716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb60b5d29 code=0x7ffc0000 [ 410.875360][T30408] bridge0: left allmulticast mode [ 410.886515][ T29] audit: type=1326 audit(1736545216.491:18076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30409 comm="syz.0.9716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7feeb60b5d29 code=0x7ffc0000 [ 410.934649][T30408] bridge0: left promiscuous mode [ 410.981061][ T29] audit: type=1326 audit(1736545216.551:18077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30409 comm="syz.0.9716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb60b5d29 code=0x7ffc0000 [ 411.005606][ T29] audit: type=1326 audit(1736545216.551:18078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30409 comm="syz.0.9716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb60b5d29 code=0x7ffc0000 [ 411.029287][ T29] audit: type=1326 audit(1736545216.551:18079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30409 comm="syz.0.9716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7feeb60b5d29 code=0x7ffc0000 [ 411.053803][ T29] audit: type=1326 audit(1736545216.551:18080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30409 comm="syz.0.9716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb60b5d29 code=0x7ffc0000 [ 411.077629][ T29] audit: type=1326 audit(1736545216.551:18081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30409 comm="syz.0.9716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb60b5d29 code=0x7ffc0000 [ 411.102692][ T29] audit: type=1326 audit(1736545216.621:18082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.4.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 411.126335][ T29] audit: type=1326 audit(1736545216.621:18083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.4.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 411.150720][ T29] audit: type=1326 audit(1736545216.621:18084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.4.9717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 411.291922][T30187] veth0_vlan: entered promiscuous mode [ 411.328907][T30187] veth1_vlan: entered promiscuous mode [ 411.359828][T30187] veth0_macvtap: entered promiscuous mode [ 411.368658][T30187] veth1_macvtap: entered promiscuous mode [ 411.387563][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.398088][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.408097][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.418646][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.428632][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.439267][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.449118][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.459672][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.469554][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.480041][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.489993][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.500562][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.510617][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.521083][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.531383][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.541883][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.551735][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.562282][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.573675][T30187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.618974][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.630163][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.640016][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.650470][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.661105][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.671649][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.682222][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.692727][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.702570][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.713674][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.723516][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.734118][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.744631][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.755313][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.765323][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.776466][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.786385][T30187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.796935][T30187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.808228][T30187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.887522][T30187] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.896398][T30187] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.905179][T30187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.914022][T30187] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.388012][T30463] loop6: detected capacity change from 0 to 8192 [ 412.430176][T30463] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 412.437469][T30463] FAT-fs (loop6): Filesystem has been set read-only [ 412.602224][T30471] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 413.269566][T30485] netlink: 'syz.6.9737': attribute type 1 has an invalid length. [ 413.333522][T30499] netlink: 'syz.6.9743': attribute type 1 has an invalid length. [ 413.341349][T30499] netlink: 'syz.6.9743': attribute type 2 has an invalid length. [ 413.382446][T30502] bridge0: entered promiscuous mode [ 413.405149][T30502] macvlan2: entered promiscuous mode [ 413.417299][T30502] bridge0: port 3(macvlan2) entered blocking state [ 413.424822][T30502] bridge0: port 3(macvlan2) entered disabled state [ 413.432002][T30502] macvlan2: entered allmulticast mode [ 413.437468][T30502] bridge0: entered allmulticast mode [ 413.456365][T30502] macvlan2: left allmulticast mode [ 413.461641][T30502] bridge0: left allmulticast mode [ 413.467869][T30502] bridge0: left promiscuous mode [ 413.625630][T30524] futex_wake_op: syz.4.9754 tries to shift op by 32; fix this program [ 413.927155][T30544] bond1: entered promiscuous mode [ 413.932439][T30544] bond1: entered allmulticast mode [ 413.961502][T30544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.012306][T30544] bond1 (unregistering): Released all slaves [ 414.057503][T30555] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9767'. [ 414.547885][ T3387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.606754][ T3387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.692454][ T3387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.765206][T30583] chnl_net:caif_netlink_parms(): no params data found [ 414.830295][T30620] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9791'. [ 414.849816][ T3387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.871386][T30621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.878757][T30621] IPv6: NLM_F_CREATE should be set when creating new route [ 414.983562][T30583] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.990691][T30583] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.998050][T30583] bridge_slave_0: entered allmulticast mode [ 415.048711][T30629] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9793'. [ 415.060542][T30583] bridge_slave_0: entered promiscuous mode [ 415.068999][T30583] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.076086][T30583] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.091681][T30583] bridge_slave_1: entered allmulticast mode [ 415.106194][T30583] bridge_slave_1: entered promiscuous mode [ 415.506690][T30583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.630672][T30647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.637947][T30647] IPv6: NLM_F_CREATE should be set when creating new route [ 415.655815][T30583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.684736][ T3387] bridge_slave_1: left allmulticast mode [ 415.690424][ T3387] bridge_slave_1: left promiscuous mode [ 415.696170][ T3387] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.717810][ T3387] bridge_slave_0: left allmulticast mode [ 415.723598][ T3387] bridge_slave_0: left promiscuous mode [ 415.729291][ T3387] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.850922][ T3387] erspan0 (unregistering): left promiscuous mode [ 415.895039][T30668] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9802'. [ 415.920977][ T3387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.934803][ T3387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.949695][ T3387] bond0 (unregistering): Released all slaves [ 415.978038][T30583] team0: Port device team_slave_0 added [ 416.003802][T30583] team0: Port device team_slave_1 added [ 416.075386][T30583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.082510][T30583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.091455][T30686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9810'. [ 416.108678][T30583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.145859][ T3387] batadv_slave_1: left promiscuous mode [ 416.164527][ T3387] hsr_slave_0: left promiscuous mode [ 416.171426][ T3387] hsr_slave_1: left promiscuous mode [ 416.184767][ T3387] veth1_macvtap: left promiscuous mode [ 416.190348][ T3387] veth0_macvtap: left promiscuous mode [ 416.196069][ T3387] veth1_vlan: left promiscuous mode [ 416.201436][ T3387] veth0_vlan: left promiscuous mode [ 416.328026][ T3387] team0 (unregistering): Port device team_slave_1 removed [ 416.345395][ T3387] team0 (unregistering): Port device team_slave_0 removed [ 416.385226][T30690] bridge0: entered promiscuous mode [ 416.390576][T30690] macvlan2: entered promiscuous mode [ 416.402658][T30690] bridge0: port 3(macvlan2) entered blocking state [ 416.409409][T30690] bridge0: port 3(macvlan2) entered disabled state [ 416.413240][T30713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9814'. [ 416.430435][T30690] macvlan2: entered allmulticast mode [ 416.436033][T30690] bridge0: entered allmulticast mode [ 416.444946][T30690] macvlan2: left allmulticast mode [ 416.450215][T30690] bridge0: left allmulticast mode [ 416.456185][T30690] bridge0: left promiscuous mode [ 416.468795][T30583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.475975][T30583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.502186][T30583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.543807][T30721] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9818'. [ 416.559226][T30583] hsr_slave_0: entered promiscuous mode [ 416.567669][T30583] hsr_slave_1: entered promiscuous mode [ 416.576362][T30583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.587933][T30583] Cannot create hsr debugfs directory [ 416.702116][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 416.702134][ T29] audit: type=1326 audit(1736545222.311:18435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.746778][ T3387] IPVS: stop unused estimator thread 0... [ 416.761549][ T29] audit: type=1326 audit(1736545222.341:18436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.785200][ T29] audit: type=1326 audit(1736545222.341:18437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.809175][ T29] audit: type=1326 audit(1736545222.341:18438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.833144][ T29] audit: type=1326 audit(1736545222.341:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.856790][ T29] audit: type=1326 audit(1736545222.341:18440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.880549][ T29] audit: type=1326 audit(1736545222.341:18441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.904210][ T29] audit: type=1326 audit(1736545222.341:18442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.928333][ T29] audit: type=1326 audit(1736545222.341:18443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 416.952157][ T29] audit: type=1326 audit(1736545222.341:18444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30735 comm="syz.5.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf0a35d29 code=0x7ffc0000 [ 417.078395][T30756] netlink: 'syz.1.9826': attribute type 1 has an invalid length. [ 417.164089][T30763] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 417.177728][T30763] netlink: 'syz.4.9830': attribute type 1 has an invalid length. [ 417.181703][T30764] syz.1.9828(30764): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 417.185527][T30763] netlink: 'syz.4.9830': attribute type 2 has an invalid length. [ 417.216159][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9830'. [ 417.350530][T30583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.366846][T30763] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9830'. [ 417.378854][T30583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.415189][T30583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.451212][T30583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.479778][T30790] bridge0: entered promiscuous mode [ 417.491227][T30790] macvlan3: entered promiscuous mode [ 417.502810][T30790] bridge0: port 3(macvlan3) entered blocking state [ 417.509569][T30790] bridge0: port 3(macvlan3) entered disabled state [ 417.516822][T30790] macvlan3: entered allmulticast mode [ 417.522911][T30790] bridge0: entered allmulticast mode [ 417.554122][T30790] macvlan3: left allmulticast mode [ 417.559319][T30790] bridge0: left allmulticast mode [ 417.568307][T30790] bridge0: left promiscuous mode [ 417.671844][T30583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.693328][T30583] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.708266][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.715413][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.741934][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.749133][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.850990][T30822] dccp_invalid_packet: pskb_may_pull failed [ 417.895645][T30583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.987871][T30583] veth0_vlan: entered promiscuous mode [ 417.997293][T30583] veth1_vlan: entered promiscuous mode [ 418.014690][T30583] veth0_macvtap: entered promiscuous mode [ 418.023729][T30583] veth1_macvtap: entered promiscuous mode [ 418.050550][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.061202][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.071090][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.081541][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.091405][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.102093][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.111955][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.122487][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.132389][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.142848][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.152963][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.163518][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.173370][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.183941][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.193789][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.204251][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.214099][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.224558][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.234483][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.244952][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.255777][T30583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.265370][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.275968][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.285877][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.296347][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.306266][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.316761][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.326619][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.337094][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.347109][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.357609][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.367457][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.377986][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.387853][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.398301][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.408176][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.418666][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.428602][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.439127][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.448984][T30583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.459463][T30583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.470510][T30583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.493138][T30583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.501919][T30583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.510708][T30583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.519543][T30583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.537750][T30859] FAULT_INJECTION: forcing a failure. [ 418.537750][T30859] name failslab, interval 1, probability 0, space 0, times 0 [ 418.550690][T30859] CPU: 0 UID: 0 PID: 30859 Comm: syz.6.9846 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 418.561485][T30859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.571673][T30859] Call Trace: [ 418.574981][T30859] [ 418.577937][T30859] dump_stack_lvl+0xf2/0x150 [ 418.582711][T30859] dump_stack+0x15/0x1a [ 418.587044][T30859] should_fail_ex+0x223/0x230 [ 418.591767][T30859] should_failslab+0x8f/0xb0 [ 418.596406][T30859] kmem_cache_alloc_node_noprof+0x59/0x320 [ 418.602239][T30859] ? __alloc_skb+0x10b/0x310 [ 418.606906][T30859] __alloc_skb+0x10b/0x310 [ 418.611348][T30859] rtmsg_ifinfo_build_skb+0x63/0x1b0 [ 418.616672][T30859] ? ib_device_get_by_netdev+0x1f8/0x230 [ 418.622490][T30859] ? __pfx_mpls_dev_notify+0x10/0x10 [ 418.627850][T30859] ? __pfx_rtnetlink_event+0x10/0x10 [ 418.633233][T30859] rtnetlink_event+0x180/0x200 [ 418.638021][T30859] raw_notifier_call_chain+0x6f/0x1d0 [ 418.643425][T30859] ? save_fpregs_to_fpstate+0x102/0x160 [ 418.649044][T30859] call_netdevice_notifiers_info+0xae/0x100 [ 418.654962][T30859] dev_set_mtu_ext+0x28c/0x360 [ 418.659776][T30859] dev_set_mtu+0x4b/0xf0 [ 418.664099][T30859] dev_ifsioc+0x48d/0xa10 [ 418.668597][T30859] dev_ioctl+0x7fa/0xab0 [ 418.672852][T30859] sock_do_ioctl+0x11c/0x260 [ 418.677472][T30859] sock_ioctl+0x40f/0x600 [ 418.681818][T30859] ? __pfx_sock_ioctl+0x10/0x10 [ 418.686682][T30859] __se_sys_ioctl+0xc9/0x140 [ 418.691286][T30859] __x64_sys_ioctl+0x43/0x50 [ 418.695889][T30859] x64_sys_call+0x1690/0x2dc0 [ 418.700610][T30859] do_syscall_64+0xc9/0x1c0 [ 418.705169][T30859] ? clear_bhb_loop+0x55/0xb0 [ 418.709867][T30859] ? clear_bhb_loop+0x55/0xb0 [ 418.714554][T30859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.720482][T30859] RIP: 0033:0x7f5a16c95d29 [ 418.724902][T30859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.744597][T30859] RSP: 002b:00007f5a15301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.753018][T30859] RAX: ffffffffffffffda RBX: 00007f5a16e85fa0 RCX: 00007f5a16c95d29 [ 418.761062][T30859] RDX: 0000000020000b40 RSI: 0000000000008922 RDI: 0000000000000004 [ 418.769039][T30859] RBP: 00007f5a15301090 R08: 0000000000000000 R09: 0000000000000000 [ 418.777028][T30859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.785005][T30859] R13: 0000000000000000 R14: 00007f5a16e85fa0 R15: 00007ffd2c658c68 [ 418.793202][T30859] [ 419.242224][T30927] FAULT_INJECTION: forcing a failure. [ 419.242224][T30927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.255454][T30927] CPU: 1 UID: 0 PID: 30927 Comm: syz.6.9864 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 419.259647][T30906] loop0: detected capacity change from 0 to 2048 [ 419.266248][T30927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.266266][T30927] Call Trace: [ 419.266275][T30927] [ 419.266284][T30927] dump_stack_lvl+0xf2/0x150 [ 419.266337][T30927] dump_stack+0x15/0x1a [ 419.297949][T30927] should_fail_ex+0x223/0x230 [ 419.302760][T30927] should_fail+0xb/0x10 [ 419.306971][T30927] should_fail_usercopy+0x1a/0x20 [ 419.312073][T30927] _copy_to_user+0x20/0xa0 [ 419.316610][T30927] simple_read_from_buffer+0xa0/0x110 [ 419.322016][T30927] proc_fail_nth_read+0xf9/0x140 [ 419.326982][T30927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.332606][T30927] vfs_read+0x1a2/0x700 [ 419.336796][T30927] ? __rcu_read_unlock+0x4e/0x70 [ 419.341769][T30927] ? __fget_files+0x17c/0x1c0 [ 419.346508][T30927] ksys_read+0xe8/0x1b0 [ 419.350702][T30927] __x64_sys_read+0x42/0x50 [ 419.355235][T30927] x64_sys_call+0x2874/0x2dc0 [ 419.359936][T30927] do_syscall_64+0xc9/0x1c0 [ 419.364482][T30927] ? clear_bhb_loop+0x55/0xb0 [ 419.369228][T30927] ? clear_bhb_loop+0x55/0xb0 [ 419.373928][T30927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.379864][T30927] RIP: 0033:0x7f5a16c9473c [ 419.384351][T30927] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 419.404001][T30927] RSP: 002b:00007f5a15301030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.412547][T30927] RAX: ffffffffffffffda RBX: 00007f5a16e85fa0 RCX: 00007f5a16c9473c [ 419.420575][T30927] RDX: 000000000000000f RSI: 00007f5a153010a0 RDI: 0000000000000004 [ 419.428584][T30927] RBP: 00007f5a15301090 R08: 0000000000000000 R09: 0000000000000000 [ 419.436624][T30927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.444629][T30927] R13: 0000000000000000 R14: 00007f5a16e85fa0 R15: 00007ffd2c658c68 [ 419.452685][T30927] [ 419.598340][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.627434][T30958] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 419.654556][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.839175][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.871920][T30981] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 419.911361][T30995] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9878'. [ 419.956894][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.059062][T30917] chnl_net:caif_netlink_parms(): no params data found [ 420.342297][T30917] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.349473][T30917] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.364666][T30917] bridge_slave_0: entered allmulticast mode [ 420.371693][T30917] bridge_slave_0: entered promiscuous mode [ 420.378562][ T11] bridge_slave_1: left allmulticast mode [ 420.384377][ T11] bridge_slave_1: left promiscuous mode [ 420.390062][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.398581][ T11] bridge_slave_0: left allmulticast mode [ 420.404320][ T11] bridge_slave_0: left promiscuous mode [ 420.409985][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.490455][ T11] bond2 (unregistering): (slave geneve2): Releasing active interface [ 420.594342][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.604951][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.615441][ T11] bond0 (unregistering): Released all slaves [ 420.625211][ T11] bond1 (unregistering): Released all slaves [ 420.634503][ T11] bond2 (unregistering): Released all slaves [ 420.647622][T30917] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.654763][T30917] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.662411][T30917] bridge_slave_1: entered allmulticast mode [ 420.669553][T30917] bridge_slave_1: entered promiscuous mode [ 420.704218][T30917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.732233][ T11] tipc: Left network mode [ 420.742809][T30917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.769140][T31050] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 420.792736][T31052] bridge0: entered promiscuous mode [ 420.802199][T31052] macvlan3: entered promiscuous mode [ 420.809517][T31052] bridge0: port 3(macvlan3) entered blocking state [ 420.816570][T31052] bridge0: port 3(macvlan3) entered disabled state [ 420.825542][T31052] macvlan3: entered allmulticast mode [ 420.831158][T31052] bridge0: entered allmulticast mode [ 420.874877][T31052] macvlan3: left allmulticast mode [ 420.880154][T31052] bridge0: left allmulticast mode [ 420.886323][T31052] bridge0: left promiscuous mode [ 420.922752][T30917] team0: Port device team_slave_0 added [ 420.933385][T30917] team0: Port device team_slave_1 added [ 420.996555][T31072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9897'. [ 421.008354][ T11] hsr_slave_0: left promiscuous mode [ 421.017174][ T11] hsr_slave_1: left promiscuous mode [ 421.026069][ T11] veth1_macvtap: left promiscuous mode [ 421.031665][ T11] veth0_macvtap: left promiscuous mode [ 421.037339][ T11] veth1_vlan: left promiscuous mode [ 421.042667][ T11] veth0_vlan: left promiscuous mode [ 421.120642][T31085] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 421.203401][ T11] team0 (unregistering): Port device team_slave_1 removed [ 421.215187][ T11] team0 (unregistering): Port device team_slave_0 removed [ 421.276067][T30917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.283242][T30917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.309400][T30917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.359652][T30917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.366792][T30917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.392842][T30917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.468291][T30917] hsr_slave_0: entered promiscuous mode [ 421.475594][T31104] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9906'. [ 421.500732][T30917] hsr_slave_1: entered promiscuous mode [ 421.509064][T30917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.518423][T30917] Cannot create hsr debugfs directory [ 421.714036][ T11] IPVS: stop unused estimator thread 0... [ 421.793733][T31126] loop6: detected capacity change from 0 to 512 [ 421.814217][T31126] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 421.836178][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 421.836196][ T29] audit: type=1400 audit(1736545227.441:19217): avc: denied { bind } for pid=31125 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 421.927948][ T29] audit: type=1326 audit(1736545227.531:19218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31130 comm="syz.0.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f28f5d29 code=0x7ffc0000 [ 421.951831][ T29] audit: type=1326 audit(1736545227.531:19219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31130 comm="syz.0.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f18f28f5d29 code=0x7ffc0000 [ 421.975396][ T29] audit: type=1326 audit(1736545227.531:19220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31130 comm="syz.0.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f28f5d29 code=0x7ffc0000 [ 421.999103][ T29] audit: type=1326 audit(1736545227.531:19221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31130 comm="syz.0.9913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f28f5d29 code=0x7ffc0000 [ 422.041016][ T29] audit: type=1326 audit(1736545227.641:19222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.6.9914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 422.066405][ T29] audit: type=1326 audit(1736545227.671:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.6.9914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 422.090031][ T29] audit: type=1326 audit(1736545227.671:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.6.9914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 422.113829][ T29] audit: type=1326 audit(1736545227.671:19225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.6.9914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 422.169069][T30917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.181962][T30917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.191534][T30917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 422.203117][T30917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.332834][T30917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.356038][T30917] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.380052][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.387289][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.421542][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.428700][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.445066][T31169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9920'. [ 422.599897][T30917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.802393][ T29] audit: type=1400 audit(1736545228.411:19226): avc: denied { shutdown } for pid=31213 comm="syz.6.9925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 422.840853][T31214] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 422.918590][T30917] veth0_vlan: entered promiscuous mode [ 422.952171][T30917] veth1_vlan: entered promiscuous mode [ 423.010326][T31230] bridge0: entered promiscuous mode [ 423.027159][T31230] macvlan2: entered promiscuous mode [ 423.035172][T31230] bridge0: port 3(macvlan2) entered blocking state [ 423.041791][T31230] bridge0: port 3(macvlan2) entered disabled state [ 423.073947][T31230] macvlan2: entered allmulticast mode [ 423.079420][T31230] bridge0: entered allmulticast mode [ 423.094203][T31230] macvlan2: left allmulticast mode [ 423.099431][T31230] bridge0: left allmulticast mode [ 423.109315][T31230] bridge0: left promiscuous mode [ 423.138847][T30917] veth0_macvtap: entered promiscuous mode [ 423.169805][T30917] veth1_macvtap: entered promiscuous mode [ 423.230164][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.240759][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.250682][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.261290][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.271126][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.281766][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.291701][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.302245][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.312213][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.322811][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.332801][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.343378][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.353358][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.364021][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.374075][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.387650][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.398284][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.409006][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.418995][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.429618][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.439700][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.450303][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.534807][T30917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.559571][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.570121][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.580013][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.590499][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.600748][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.611490][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.617640][T31256] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 423.621852][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.629835][T31256] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 423.640472][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.658817][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.669317][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.679272][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.689914][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.699773][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.710396][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.720577][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.731060][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.741192][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.748761][T31263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9937'. [ 423.751741][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.751762][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.751779][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.751795][T30917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.801875][T30917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.814150][T30917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.823320][T30917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.832217][T30917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.840939][T30917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.849920][T30917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.893082][T31260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9936'. [ 423.941868][T31279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9941'. [ 424.079410][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9944'. [ 424.229531][T31306] loop0: detected capacity change from 0 to 2048 [ 424.356828][T31335] FAULT_INJECTION: forcing a failure. [ 424.356828][T31335] name failslab, interval 1, probability 0, space 0, times 0 [ 424.369590][T31335] CPU: 0 UID: 0 PID: 31335 Comm: syz.0.9965 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 424.380453][T31335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.390635][T31335] Call Trace: [ 424.393985][T31335] [ 424.396963][T31335] dump_stack_lvl+0xf2/0x150 [ 424.401642][T31335] dump_stack+0x15/0x1a [ 424.405909][T31335] should_fail_ex+0x223/0x230 [ 424.410652][T31335] should_failslab+0x8f/0xb0 [ 424.415317][T31335] kmem_cache_alloc_node_noprof+0x59/0x320 [ 424.421215][T31335] ? __alloc_skb+0x10b/0x310 [ 424.425839][T31335] __alloc_skb+0x10b/0x310 [ 424.430281][T31335] netlink_alloc_large_skb+0xad/0xe0 [ 424.435608][T31335] netlink_sendmsg+0x3b4/0x6e0 [ 424.440419][T31335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.445891][T31335] __sock_sendmsg+0x140/0x180 [ 424.450709][T31335] ____sys_sendmsg+0x312/0x410 [ 424.455504][T31335] __sys_sendmsg+0x19d/0x230 [ 424.460165][T31335] __x64_sys_sendmsg+0x46/0x50 [ 424.465013][T31335] x64_sys_call+0x2734/0x2dc0 [ 424.469708][T31335] do_syscall_64+0xc9/0x1c0 [ 424.474234][T31335] ? clear_bhb_loop+0x55/0xb0 [ 424.478994][T31335] ? clear_bhb_loop+0x55/0xb0 [ 424.483685][T31335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.489796][T31335] RIP: 0033:0x7f18f28f5d29 [ 424.494217][T31335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.513858][T31335] RSP: 002b:00007f18f0f61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.522344][T31335] RAX: ffffffffffffffda RBX: 00007f18f2ae5fa0 RCX: 00007f18f28f5d29 [ 424.530322][T31335] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 424.538315][T31335] RBP: 00007f18f0f61090 R08: 0000000000000000 R09: 0000000000000000 [ 424.546292][T31335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.554269][T31335] R13: 0000000000000000 R14: 00007f18f2ae5fa0 R15: 00007ffcb6a314c8 [ 424.562262][T31335] [ 424.726161][T31351] program syz.5.9960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.786773][T31349] loop6: detected capacity change from 0 to 8192 [ 424.901893][T31377] bridge0: entered promiscuous mode [ 424.907252][T31377] macvlan2: entered promiscuous mode [ 424.914747][T31377] bridge0: port 3(macvlan2) entered blocking state [ 424.921410][T31377] bridge0: port 3(macvlan2) entered disabled state [ 424.928392][T31377] macvlan2: entered allmulticast mode [ 424.933898][T31377] bridge0: entered allmulticast mode [ 424.949503][T31377] macvlan2: left allmulticast mode [ 424.954724][T31377] bridge0: left allmulticast mode [ 424.961119][T31377] bridge0: left promiscuous mode [ 424.971651][T31381] __nla_validate_parse: 8 callbacks suppressed [ 424.971668][T31381] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 424.986489][T31381] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 425.212194][T31393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9981'. [ 425.274156][T31399] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9985'. [ 425.346534][T31405] bridge0: entered promiscuous mode [ 425.353769][T31405] macvlan2: entered promiscuous mode [ 425.360893][T31405] bridge0: port 3(macvlan2) entered blocking state [ 425.367605][T31405] bridge0: port 3(macvlan2) entered disabled state [ 425.378451][T31405] macvlan2: entered allmulticast mode [ 425.383985][T31405] bridge0: entered allmulticast mode [ 425.390351][T31405] macvlan2: left allmulticast mode [ 425.395700][T31405] bridge0: left allmulticast mode [ 425.408631][T31405] bridge0: left promiscuous mode [ 425.521220][T31420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9994'. [ 425.713044][T31439] bridge0: entered promiscuous mode [ 425.718378][T31439] macvlan2: entered promiscuous mode [ 425.727349][T31439] bridge0: port 3(macvlan2) entered blocking state [ 425.734086][T31439] bridge0: port 3(macvlan2) entered disabled state [ 425.741472][T31439] macvlan2: entered allmulticast mode [ 425.746899][T31439] bridge0: entered allmulticast mode [ 425.747927][T31434] loop5: detected capacity change from 0 to 8192 [ 425.758975][T31439] macvlan2: left allmulticast mode [ 425.764222][T31439] bridge0: left allmulticast mode [ 425.770762][T31439] bridge0: left promiscuous mode [ 425.821897][T31442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10003'. [ 425.905478][T31451] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10008'. [ 426.367628][T31485] netlink: 140 bytes leftover after parsing attributes in process `syz.6.10021'. [ 426.490569][T31500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10029'. [ 426.508224][T31498] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10028'. [ 426.803437][T31526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.867223][T31526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.880553][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 426.880569][ T29] audit: type=1326 audit(1736545232.471:19626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 426.910565][ T29] audit: type=1326 audit(1736545232.471:19627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 426.934534][ T29] audit: type=1326 audit(1736545232.471:19628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 426.958409][ T29] audit: type=1326 audit(1736545232.471:19629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 426.982399][ T29] audit: type=1326 audit(1736545232.471:19630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 427.006263][ T29] audit: type=1326 audit(1736545232.471:19631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 427.030397][ T29] audit: type=1326 audit(1736545232.471:19632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 427.054127][ T29] audit: type=1326 audit(1736545232.471:19633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 427.077731][ T29] audit: type=1326 audit(1736545232.491:19634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 427.101482][ T29] audit: type=1326 audit(1736545232.491:19635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31533 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b5f5d29 code=0x7ffc0000 [ 427.155213][T31526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.204645][T31526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.270463][T31526] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.294539][T31526] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.327272][T31526] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.353064][T31526] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.521804][T31584] bridge0: entered promiscuous mode [ 427.530403][ T3376] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 427.542010][T31584] macvlan2: entered promiscuous mode [ 427.557093][T31584] bridge0: port 3(macvlan2) entered blocking state [ 427.563764][T31584] bridge0: port 3(macvlan2) entered disabled state [ 427.602587][T31584] macvlan2: entered allmulticast mode [ 427.608093][T31584] bridge0: entered allmulticast mode [ 427.629719][T31584] macvlan2: left allmulticast mode [ 427.634942][T31584] bridge0: left allmulticast mode [ 427.652758][T31584] bridge0: left promiscuous mode [ 427.869193][T31606] FAULT_INJECTION: forcing a failure. [ 427.869193][T31606] name failslab, interval 1, probability 0, space 0, times 0 [ 427.882070][T31606] CPU: 1 UID: 0 PID: 31606 Comm: syz.6.10070 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 427.892950][T31606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.903028][T31606] Call Trace: [ 427.906330][T31606] [ 427.909354][T31606] dump_stack_lvl+0xf2/0x150 [ 427.914056][T31606] dump_stack+0x15/0x1a [ 427.918242][T31606] should_fail_ex+0x223/0x230 [ 427.922945][T31606] should_failslab+0x8f/0xb0 [ 427.927614][T31606] kmem_cache_alloc_node_noprof+0x59/0x320 [ 427.933565][T31606] ? __alloc_skb+0x10b/0x310 [ 427.938163][T31606] __alloc_skb+0x10b/0x310 [ 427.942633][T31606] netlink_alloc_large_skb+0xad/0xe0 [ 427.947932][T31606] netlink_sendmsg+0x3b4/0x6e0 [ 427.952726][T31606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.958030][T31606] __sock_sendmsg+0x140/0x180 [ 427.962797][T31606] ____sys_sendmsg+0x312/0x410 [ 427.967576][T31606] __sys_sendmsg+0x19d/0x230 [ 427.972272][T31606] __x64_sys_sendmsg+0x46/0x50 [ 427.977089][T31606] x64_sys_call+0x2734/0x2dc0 [ 427.981811][T31606] do_syscall_64+0xc9/0x1c0 [ 427.986324][T31606] ? clear_bhb_loop+0x55/0xb0 [ 427.991072][T31606] ? clear_bhb_loop+0x55/0xb0 [ 427.995826][T31606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.001838][T31606] RIP: 0033:0x7f5a16c95d29 [ 428.006256][T31606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.025909][T31606] RSP: 002b:00007f5a15301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.034332][T31606] RAX: ffffffffffffffda RBX: 00007f5a16e85fa0 RCX: 00007f5a16c95d29 [ 428.042320][T31606] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000004 [ 428.050318][T31606] RBP: 00007f5a15301090 R08: 0000000000000000 R09: 0000000000000000 [ 428.058296][T31606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.066272][T31606] R13: 0000000000000000 R14: 00007f5a16e85fa0 R15: 00007ffd2c658c68 [ 428.074327][T31606] [ 428.112242][T31611] loop0: detected capacity change from 0 to 512 [ 428.143199][T31611] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 428.463954][T31649] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.581024][T31656] loop5: detected capacity change from 0 to 512 [ 428.609442][T31656] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 428.937321][T31700] loop0: detected capacity change from 0 to 512 [ 428.951272][T31700] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 429.218776][T31741] loop6: detected capacity change from 0 to 512 [ 429.226251][T31741] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 429.304714][T31745] loop0: detected capacity change from 0 to 8192 [ 429.470027][T31768] serio: Serial port ptm0 [ 429.523501][T31768] netlink: 'syz.0.10134': attribute type 1 has an invalid length. [ 429.546422][T31782] netlink: 'syz.4.10142': attribute type 1 has an invalid length. [ 429.616296][T31789] loop6: detected capacity change from 0 to 2048 [ 429.944577][T31832] loop0: detected capacity change from 0 to 512 [ 429.961001][T31832] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 429.974733][T31832] EXT4-fs (loop0): invalid journal inode [ 429.981202][T31832] EXT4-fs (loop0): can't get journal size [ 430.009269][T31832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 430.037980][T31832] System zones: 1-12, 13-13 [ 430.038515][T31840] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.060023][T31832] EXT4-fs (loop0): 1 truncate cleaned up [ 430.080019][T31832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.086179][T31842] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.165129][T30583] EXT4-fs error (device loop0): __ext4_iget:4984: inode #11: block 1828716567: comm syz-executor: invalid block [ 430.187581][T30583] EXT4-fs error (device loop0): __ext4_iget:4984: inode #11: block 1828716567: comm syz-executor: invalid block [ 430.200267][T31839] loop5: detected capacity change from 0 to 2048 [ 430.203072][T31848] __nla_validate_parse: 26 callbacks suppressed [ 430.203140][T31848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10173'. [ 430.268173][T31850] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10174'. [ 430.422221][T30583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.426219][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.448319][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10179'. [ 430.493585][T31862] netlink: 'syz.1.10179': attribute type 1 has an invalid length. [ 430.501611][T31862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10179'. [ 430.514053][T31860] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.552681][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.614997][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.666812][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.786303][ T50] bridge_slave_1: left allmulticast mode [ 430.792121][ T50] bridge_slave_1: left promiscuous mode [ 430.797935][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.824607][ T50] bridge_slave_0: left allmulticast mode [ 430.830349][ T50] bridge_slave_0: left promiscuous mode [ 430.836160][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.923812][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.934315][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.944783][ T50] bond0 (unregistering): Released all slaves [ 431.053949][ T50] hsr_slave_0: left promiscuous mode [ 431.064379][ T50] hsr_slave_1: left promiscuous mode [ 431.074778][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.082439][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.096439][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.103960][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.112452][T31910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10196'. [ 431.136027][ T50] veth1_macvtap: left promiscuous mode [ 431.141689][ T50] veth0_macvtap: left promiscuous mode [ 431.147301][ T50] veth1_vlan: left promiscuous mode [ 431.152838][ T50] veth0_vlan: left promiscuous mode [ 431.171834][T31918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10197'. [ 431.288697][ T50] team0 (unregistering): Port device team_slave_1 removed [ 431.312656][ T50] team0 (unregistering): Port device team_slave_0 removed [ 431.384947][T31930] bridge0: entered promiscuous mode [ 431.390428][T31930] macvlan2: entered promiscuous mode [ 431.414377][T31930] bridge0: port 3(macvlan2) entered blocking state [ 431.420969][T31930] bridge0: port 3(macvlan2) entered disabled state [ 431.437943][T31930] macvlan2: entered allmulticast mode [ 431.443407][T31930] bridge0: entered allmulticast mode [ 431.464526][T31930] macvlan2: left allmulticast mode [ 431.469718][T31930] bridge0: left allmulticast mode [ 431.475837][T31930] bridge0: left promiscuous mode [ 431.487212][T31877] chnl_net:caif_netlink_parms(): no params data found [ 431.578114][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10201'. [ 431.588969][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10201'. [ 431.644682][T31944] loop6: detected capacity change from 0 to 128 [ 431.666102][T31944] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.683349][T31944] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.014637][T31877] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.022048][T31877] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.212525][T31877] bridge_slave_0: entered allmulticast mode [ 432.219284][T31877] bridge_slave_0: entered promiscuous mode [ 432.226377][T31877] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.233482][T31877] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.240805][T31877] bridge_slave_1: entered allmulticast mode [ 432.301183][T31877] bridge_slave_1: entered promiscuous mode [ 432.321025][T30187] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.351496][T31959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10207'. [ 432.382764][T31877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.411713][T31877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.424433][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10211'. [ 432.477965][T31966] netlink: 'syz.5.10211': attribute type 1 has an invalid length. [ 432.486024][T31966] netlink: 'syz.5.10211': attribute type 2 has an invalid length. [ 432.519443][T31877] team0: Port device team_slave_0 added [ 432.536201][T31877] team0: Port device team_slave_1 added [ 432.588990][ T29] kauditd_printk_skb: 687 callbacks suppressed [ 432.589008][ T29] audit: type=1326 audit(1736545238.191:20323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31986 comm="syz.4.10216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 432.620485][T31877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.627622][T31877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.632392][T31994] loop5: detected capacity change from 0 to 128 [ 432.653610][T31877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.676284][ T29] audit: type=1326 audit(1736545238.281:20324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.700180][ T29] audit: type=1326 audit(1736545238.281:20325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.705290][T31994] vfat: Unknown parameter 'xlate' [ 432.723951][ T29] audit: type=1326 audit(1736545238.281:20326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.723991][ T29] audit: type=1326 audit(1736545238.281:20327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.724025][ T29] audit: type=1326 audit(1736545238.281:20328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.724081][ T29] audit: type=1326 audit(1736545238.281:20329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.823626][ T29] audit: type=1326 audit(1736545238.281:20330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.847337][ T29] audit: type=1326 audit(1736545238.281:20331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.872008][T31877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.879031][T31877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.881191][ T29] audit: type=1326 audit(1736545238.341:20332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.6.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a16c95d29 code=0x7ffc0000 [ 432.905033][T31877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.947084][T31994] ucma_write: process 91 (syz.5.10219) changed security contexts after opening file descriptor, this is not allowed. [ 432.973051][ T50] bridge_slave_1: left allmulticast mode [ 432.978737][ T50] bridge_slave_1: left promiscuous mode [ 432.984755][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.029258][ T50] bridge_slave_0: left allmulticast mode [ 433.035128][ T50] bridge_slave_0: left promiscuous mode [ 433.040953][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.884640][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.894727][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.904555][ T50] bond0 (unregistering): Released all slaves [ 433.920216][T32028] netlink: 'syz.5.10230': attribute type 1 has an invalid length. [ 433.928174][T32028] netlink: 'syz.5.10230': attribute type 2 has an invalid length. [ 434.014425][ T50] IPVS: stopping backup sync thread 22011 ... [ 434.043377][T31877] hsr_slave_0: entered promiscuous mode [ 434.069847][T31877] hsr_slave_1: entered promiscuous mode [ 434.094437][T31877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.104766][T31877] Cannot create hsr debugfs directory [ 434.300980][T32059] loop5: detected capacity change from 0 to 2048 [ 434.323045][ T50] hsr_slave_0: left promiscuous mode [ 434.329181][ T50] hsr_slave_1: left promiscuous mode [ 434.335863][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.343440][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.360906][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.368616][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.385748][ T50] veth1_macvtap: left promiscuous mode [ 434.391383][ T50] veth0_macvtap: left promiscuous mode [ 434.397071][ T50] veth1_vlan: left promiscuous mode [ 434.402479][ T50] veth0_vlan: left promiscuous mode [ 434.481820][ T50] team0 (unregistering): Port device team_slave_1 removed [ 434.491646][ T50] team0 (unregistering): Port device team_slave_0 removed [ 434.606817][T31877] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 434.617247][T31877] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 434.629194][T31877] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 434.647947][T32095] bridge0: entered promiscuous mode [ 434.662238][T32095] macvlan3: entered promiscuous mode [ 434.671740][T32095] bridge0: port 3(macvlan3) entered blocking state [ 434.678627][T32095] bridge0: port 3(macvlan3) entered disabled state [ 434.686604][T32095] macvlan3: entered allmulticast mode [ 434.692177][T32095] bridge0: entered allmulticast mode [ 434.698573][T32095] macvlan3: left allmulticast mode [ 434.703777][T32095] bridge0: left allmulticast mode [ 434.712849][T32095] bridge0: left promiscuous mode [ 434.727042][T31877] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 434.831133][T31877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.854440][T31877] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.861663][T32112] netlink: 'syz.5.10256': attribute type 1 has an invalid length. [ 434.869563][T32112] netlink: 'syz.5.10256': attribute type 2 has an invalid length. [ 434.895188][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.902315][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.912229][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.919370][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.149947][T31877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.278465][T32162] __nla_validate_parse: 9 callbacks suppressed [ 435.278484][T32162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10267'. [ 435.401549][T32164] loop6: detected capacity change from 0 to 8192 [ 435.416278][T32179] netlink: 'syz.1.10270': attribute type 1 has an invalid length. [ 435.424332][T32179] netlink: 'syz.1.10270': attribute type 2 has an invalid length. [ 435.502758][T32164] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 435.510408][T32164] FAT-fs (loop6): Filesystem has been set read-only [ 435.529654][T31877] veth0_vlan: entered promiscuous mode [ 435.545984][T32191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10273'. [ 435.556281][T31877] veth1_vlan: entered promiscuous mode [ 435.573897][T32192] netlink: 5948 bytes leftover after parsing attributes in process `syz.1.10274'. [ 435.580258][T31877] veth0_macvtap: entered promiscuous mode [ 435.603951][T31877] veth1_macvtap: entered promiscuous mode [ 435.657130][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.667686][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.677555][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.688112][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.697979][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.708635][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.719006][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.729680][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.739559][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.750110][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.760103][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.770623][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.780626][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.791189][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.801303][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.811879][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.821889][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.832444][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.842534][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.853005][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.866702][T31877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.875387][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.885902][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.895747][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.906270][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.916211][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.926676][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.936538][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.947047][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.956946][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.967533][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.977432][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.987888][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.997809][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.008262][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.018114][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.028573][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.038433][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.048943][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.058947][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.069430][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.082963][T31877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.108833][T32215] bridge0: entered promiscuous mode [ 436.127075][T32215] macvlan3: entered promiscuous mode [ 436.134789][T32215] bridge0: port 3(macvlan3) entered blocking state [ 436.141504][T32215] bridge0: port 3(macvlan3) entered disabled state [ 436.148264][T32215] macvlan3: entered allmulticast mode [ 436.153763][T32215] bridge0: entered allmulticast mode [ 436.159965][T32215] macvlan3: left allmulticast mode [ 436.165181][T32215] bridge0: left allmulticast mode [ 436.172022][T32215] bridge0: left promiscuous mode [ 436.190434][T31877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.199292][T31877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.208054][T31877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.216810][T31877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.229992][T32229] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 436.284464][T32235] bridge0: entered promiscuous mode [ 436.290005][T32235] macvlan2: entered promiscuous mode [ 436.302644][T32235] bridge0: port 3(macvlan2) entered blocking state [ 436.309233][T32235] bridge0: port 3(macvlan2) entered disabled state [ 436.322703][T32235] macvlan2: entered allmulticast mode [ 436.328134][T32235] bridge0: entered allmulticast mode [ 436.335836][T32235] macvlan2: left allmulticast mode [ 436.340992][T32235] bridge0: left allmulticast mode [ 436.348025][T32235] bridge0: left promiscuous mode [ 436.387153][T32247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10297'. [ 436.497985][T32264] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.548530][T32271] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 436.570000][T32264] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.610729][T32282] netlink: 'syz.1.10304': attribute type 1 has an invalid length. [ 436.618765][T32282] netlink: 'syz.1.10304': attribute type 2 has an invalid length. [ 436.646360][T32264] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.706411][T32264] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.800692][T32264] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.820307][T32264] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.845201][T32264] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.859784][T32264] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.939367][T32312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10310'. [ 436.949013][T32312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10310'. [ 437.556211][T32329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10320'. [ 437.636690][T32335] bridge0: entered promiscuous mode [ 437.642373][T32335] macvlan3: entered promiscuous mode [ 437.651146][T32335] bridge0: port 3(macvlan3) entered blocking state [ 437.657858][T32335] bridge0: port 3(macvlan3) entered disabled state [ 437.664957][T32335] macvlan3: entered allmulticast mode [ 437.670673][T32335] bridge0: entered allmulticast mode [ 437.686703][T32335] macvlan3: left allmulticast mode [ 437.691927][T32335] bridge0: left allmulticast mode [ 437.697911][T32335] bridge0: left promiscuous mode [ 437.723993][T32339] loop5: detected capacity change from 0 to 2048 [ 437.732259][T32340] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 437.756402][T32347] loop7: detected capacity change from 0 to 512 [ 437.772456][T32347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 437.814072][T32353] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10330'. [ 437.824970][T32347] EXT4-fs (loop7): orphan cleanup on readonly fs [ 437.838981][T32347] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10328: bg 0: block 248: padding at end of block bitmap is not set [ 437.857653][T32347] __quota_error: 249 callbacks suppressed [ 437.857674][T32347] Quota error (device loop7): write_blk: dquota write failed [ 437.870991][T32347] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 437.881108][T32347] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.10328: Failed to acquire dquot type 1 [ 437.895056][T32347] EXT4-fs (loop7): 1 truncate cleaned up [ 437.908349][T32347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.921039][T32366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10333'. [ 437.951514][T32347] macvlan0: entered promiscuous mode [ 437.958825][T32347] ipvlan0: entered promiscuous mode [ 437.964891][T32347] ipvlan0: left promiscuous mode [ 437.975548][T32347] macvlan0: left promiscuous mode [ 437.995596][ T29] audit: type=1326 audit(1736545243.601:20582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32371 comm="syz.4.10335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 438.023532][ T29] audit: type=1326 audit(1736545243.601:20583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32371 comm="syz.4.10335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 438.047181][ T29] audit: type=1326 audit(1736545243.601:20584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32371 comm="syz.4.10335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 438.070965][ T29] audit: type=1326 audit(1736545243.601:20585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32371 comm="syz.4.10335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 438.094654][ T29] audit: type=1326 audit(1736545243.601:20586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32371 comm="syz.4.10335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 438.118830][ T29] audit: type=1326 audit(1736545243.601:20587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32371 comm="syz.4.10335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 438.142751][ T29] audit: type=1326 audit(1736545243.601:20588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32371 comm="syz.4.10335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 438.166445][ T29] audit: type=1326 audit(1736545243.601:20589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32371 comm="syz.4.10335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 438.200855][T31877] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.318926][T32387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10341'. [ 438.485527][T32407] tipc: Started in network mode [ 438.490462][T32407] tipc: Node identity ac14140f, cluster identity 4711 [ 438.498213][T32407] tipc: New replicast peer: 255.255.255.255 [ 438.504530][T32407] tipc: Enabled bearer , priority 10 [ 438.537661][T32400] loop7: detected capacity change from 0 to 8192 [ 438.742056][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 438.748919][ C1] dccp_v6_rcv: dropped packet with invalid checksum [ 438.755282][T32436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32436 comm=syz.5.10364 [ 438.774776][T32436] loop5: detected capacity change from 0 to 512 [ 438.813859][T32436] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 438.944843][T32459] loop5: detected capacity change from 0 to 512 [ 438.972554][T32459] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.047418][T32464] loop7: detected capacity change from 0 to 8192 [ 439.352169][T32493] loop7: detected capacity change from 0 to 512 [ 439.359571][T32493] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.397452][T32495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32495 comm=syz.7.10388 [ 439.586912][T32513] bridge0: entered promiscuous mode [ 439.592914][T32513] macvlan2: entered promiscuous mode [ 439.602898][T32513] bridge0: port 3(macvlan2) entered blocking state [ 439.609442][T32513] bridge0: port 3(macvlan2) entered disabled state [ 439.618249][T32513] macvlan2: entered allmulticast mode [ 439.621389][ T1036] tipc: Node number set to 2886997007 [ 439.623733][T32513] bridge0: entered allmulticast mode [ 439.637435][T32513] macvlan2: left allmulticast mode [ 439.642670][T32513] bridge0: left allmulticast mode [ 439.650726][T32513] bridge0: left promiscuous mode [ 439.661164][T32517] loop6: detected capacity change from 0 to 512 [ 439.680050][T32517] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.776116][T32529] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.824531][T32537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32537 comm=syz.6.10409 [ 439.847594][T32539] bridge0: entered promiscuous mode [ 439.863370][T32539] macvlan3: entered promiscuous mode [ 439.882786][T32539] bridge0: port 3(macvlan3) entered blocking state [ 439.889416][T32539] bridge0: port 3(macvlan3) entered disabled state [ 439.898314][T32539] macvlan3: entered allmulticast mode [ 439.903799][T32539] bridge0: entered allmulticast mode [ 439.915395][T32539] macvlan3: left allmulticast mode [ 439.920640][T32539] bridge0: left allmulticast mode [ 439.930993][T32539] bridge0: left promiscuous mode [ 440.004994][T32554] FAULT_INJECTION: forcing a failure. [ 440.004994][T32554] name failslab, interval 1, probability 0, space 0, times 0 [ 440.017776][T32554] CPU: 1 UID: 0 PID: 32554 Comm: syz.5.10417 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 440.028655][T32554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 440.038738][T32554] Call Trace: [ 440.042033][T32554] [ 440.044983][T32554] dump_stack_lvl+0xf2/0x150 [ 440.049607][T32554] dump_stack+0x15/0x1a [ 440.053853][T32554] should_fail_ex+0x223/0x230 [ 440.058554][T32554] should_failslab+0x8f/0xb0 [ 440.063266][T32554] kmem_cache_alloc_noprof+0x52/0x320 [ 440.068688][T32554] ? audit_log_start+0x34c/0x6b0 [ 440.073643][T32554] audit_log_start+0x34c/0x6b0 [ 440.078429][T32554] audit_seccomp+0x4b/0x130 [ 440.082991][T32554] __seccomp_filter+0x6fa/0x1180 [ 440.087982][T32554] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 440.093755][T32554] ? vfs_write+0x596/0x920 [ 440.098230][T32554] ? putname+0xcf/0xf0 [ 440.102312][T32554] __secure_computing+0x9f/0x1c0 [ 440.107268][T32554] syscall_trace_enter+0xd1/0x1f0 [ 440.112467][T32554] ? fpregs_assert_state_consistent+0x83/0xa0 [ 440.118553][T32554] do_syscall_64+0xaa/0x1c0 [ 440.123072][T32554] ? clear_bhb_loop+0x55/0xb0 [ 440.127760][T32554] ? clear_bhb_loop+0x55/0xb0 [ 440.132446][T32554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.138426][T32554] RIP: 0033:0x7fe572aa5d29 [ 440.142847][T32554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.162492][T32554] RSP: 002b:00007fe571117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 440.170979][T32554] RAX: ffffffffffffffda RBX: 00007fe572c95fa0 RCX: 00007fe572aa5d29 [ 440.178955][T32554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 440.186935][T32554] RBP: 00007fe571117090 R08: 0000000000000000 R09: 0000000000000000 [ 440.194908][T32554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.202919][T32554] R13: 0000000000000000 R14: 00007fe572c95fa0 R15: 00007ffd61ecf088 [ 440.210988][T32554] [ 440.327416][T32568] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 440.432024][T32582] __nla_validate_parse: 12 callbacks suppressed [ 440.432043][T32582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10423'. [ 440.465700][T32585] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10428'. [ 440.478272][T32579] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10428'. [ 440.591785][T32594] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10433'. [ 440.850183][T32613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10441'. [ 440.870088][T32609] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10439'. [ 440.925714][T32618] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10442'. [ 440.928136][T32617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10443'. [ 440.936250][T32615] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10442'. [ 441.018962][T32626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10445'. [ 441.053328][T32625] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.085027][T32625] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.109452][T32628] loop7: detected capacity change from 0 to 2048 [ 441.144860][T32625] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.177667][T32639] macvlan0: entered promiscuous mode [ 441.187797][T32639] ipvlan0: entered promiscuous mode [ 441.196513][T32639] ipvlan0: left promiscuous mode [ 441.204878][T32639] macvlan0: left promiscuous mode [ 441.216359][T32637] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 441.229091][T32625] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.294973][T32625] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.322615][T32625] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.334459][T32625] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.370418][T32625] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.395933][T32656] tipc: Started in network mode [ 441.400877][T32656] tipc: Node identity ac14140f, cluster identity 4711 [ 441.417851][T32658] loop5: detected capacity change from 0 to 2048 [ 441.441766][T32656] tipc: New replicast peer: 255.255.255.255 [ 441.442628][T32658] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.447972][T32656] tipc: Enabled bearer , priority 10 [ 441.503732][T32660] tipc: Started in network mode [ 441.508658][T32660] tipc: Node identity ac14140f, cluster identity 4711 [ 441.522123][T32660] tipc: New replicast peer: 255.255.255.255 [ 441.528266][T32660] tipc: Enabled bearer , priority 10 [ 441.550093][T32669] bridge0: entered promiscuous mode [ 441.567690][T32669] macvlan2: entered promiscuous mode [ 441.578635][T32669] bridge0: port 3(macvlan2) entered blocking state [ 441.585244][T32669] bridge0: port 3(macvlan2) entered disabled state [ 441.595775][T32669] macvlan2: entered allmulticast mode [ 441.601202][T32669] bridge0: entered allmulticast mode [ 441.607104][T32658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.668282][T32669] macvlan2: left allmulticast mode [ 441.673521][T32669] bridge0: left allmulticast mode [ 441.681698][T32669] bridge0: left promiscuous mode [ 441.725267][T32678] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10462: bg 0: block 234: padding at end of block bitmap is not set [ 441.750119][T32678] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 441.762767][T32678] EXT4-fs (loop5): This should not happen!! Data will be lost [ 441.762767][T32678] [ 441.772640][T32678] EXT4-fs (loop5): Total free blocks count 0 [ 441.778669][T32678] EXT4-fs (loop5): Free/Dirty block details [ 441.784636][T32678] EXT4-fs (loop5): free_blocks=0 [ 441.789598][T32678] EXT4-fs (loop5): dirty_blocks=3600 [ 441.795014][T32678] EXT4-fs (loop5): Block reservation details [ 441.801117][T32678] EXT4-fs (loop5): i_reserved_data_blocks=225 [ 441.829237][ T3387] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1542 with error 28 [ 442.133367][T32720] FAULT_INJECTION: forcing a failure. [ 442.133367][T32720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.146605][T32720] CPU: 0 UID: 0 PID: 32720 Comm: syz.7.10487 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 442.157486][T32720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.167569][T32720] Call Trace: [ 442.170860][T32720] [ 442.173868][T32720] dump_stack_lvl+0xf2/0x150 [ 442.178504][T32720] dump_stack+0x15/0x1a [ 442.182693][T32720] should_fail_ex+0x223/0x230 [ 442.187413][T32720] should_fail+0xb/0x10 [ 442.191615][T32720] should_fail_usercopy+0x1a/0x20 [ 442.194697][T32722] loop5: detected capacity change from 0 to 8192 [ 442.196715][T32720] _copy_from_iter+0xd5/0xd00 [ 442.207757][T32720] ? kmalloc_reserve+0x16e/0x190 [ 442.212799][T32720] ? __build_skb_around+0x196/0x1f0 [ 442.218057][T32720] ? __alloc_skb+0x21f/0x310 [ 442.222724][T32720] ? __virt_addr_valid+0x1ed/0x250 [ 442.227922][T32720] ? __check_object_size+0x364/0x520 [ 442.233311][T32720] netlink_sendmsg+0x460/0x6e0 [ 442.238157][T32720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.243466][T32720] __sock_sendmsg+0x140/0x180 [ 442.248238][T32720] ____sys_sendmsg+0x312/0x410 [ 442.253072][T32720] __sys_sendmsg+0x19d/0x230 [ 442.257692][T32720] __x64_sys_sendmsg+0x46/0x50 [ 442.262471][T32720] x64_sys_call+0x2734/0x2dc0 [ 442.267238][T32720] do_syscall_64+0xc9/0x1c0 [ 442.271838][T32720] ? clear_bhb_loop+0x55/0xb0 [ 442.276593][T32720] ? clear_bhb_loop+0x55/0xb0 [ 442.281533][T32720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.287498][T32720] RIP: 0033:0x7f613dd05d29 [ 442.291930][T32720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.311650][T32720] RSP: 002b:00007f613c377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.320105][T32720] RAX: ffffffffffffffda RBX: 00007f613def5fa0 RCX: 00007f613dd05d29 [ 442.328153][T32720] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000004 [ 442.336141][T32720] RBP: 00007f613c377090 R08: 0000000000000000 R09: 0000000000000000 [ 442.344160][T32720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.352140][T32720] R13: 0000000000000000 R14: 00007f613def5fa0 R15: 00007ffe598f5fa8 [ 442.360205][T32720] [ 442.441400][ T2962] tipc: Node number set to 2886997007 [ 442.478932][T32722] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 442.486154][T32722] FAT-fs (loop5): Filesystem has been set read-only [ 442.503278][T32734] loop7: detected capacity change from 0 to 512 [ 442.516700][T32734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.529535][T32734] EXT4-fs (loop7): orphan cleanup on readonly fs [ 442.537562][T32734] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10493: bg 0: block 248: padding at end of block bitmap is not set [ 442.552347][T32734] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.10493: Failed to acquire dquot type 1 [ 442.577894][T32734] EXT4-fs (loop7): 1 truncate cleaned up [ 442.587978][T32734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.600251][T32743] macvlan0: entered promiscuous mode [ 442.610809][T32743] ipvlan0: entered promiscuous mode [ 442.616705][T32743] ipvlan0: left promiscuous mode [ 442.624709][T32743] macvlan0: left promiscuous mode [ 442.641376][T14002] tipc: Node number set to 2886997007 [ 442.648961][T31877] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.658300][T32745] bridge0: entered promiscuous mode [ 442.669198][T32745] macvlan2: entered promiscuous mode [ 442.678851][T32745] bridge0: port 3(macvlan2) entered blocking state [ 442.685535][T32745] bridge0: port 3(macvlan2) entered disabled state [ 442.704583][T32745] macvlan2: entered allmulticast mode [ 442.710030][T32745] bridge0: entered allmulticast mode [ 442.718626][T32745] macvlan2: left allmulticast mode [ 442.723871][T32745] bridge0: left allmulticast mode [ 442.732079][T32745] bridge0: left promiscuous mode [ 442.827525][ T302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.872438][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 442.872455][ T29] audit: type=1326 audit(1736545248.481:21095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 442.903561][ T29] audit: type=1326 audit(1736545248.481:21096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 442.906467][ T302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.927128][ T29] audit: type=1326 audit(1736545248.481:21097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 442.927170][ T29] audit: type=1326 audit(1736545248.481:21098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 442.984646][ T29] audit: type=1326 audit(1736545248.481:21099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 443.008234][ T29] audit: type=1326 audit(1736545248.481:21100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 443.031916][ T29] audit: type=1326 audit(1736545248.481:21101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 443.055566][ T29] audit: type=1326 audit(1736545248.481:21102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 443.079222][ T29] audit: type=1326 audit(1736545248.481:21103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 443.102852][ T29] audit: type=1326 audit(1736545248.481:21104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=306 comm="syz.5.10510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe572aa5d29 code=0x7ffc0000 [ 443.167177][ T302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.196372][ T302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.287633][ T336] loop5: detected capacity change from 0 to 512 [ 443.302737][ T336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 443.401433][ T336] EXT4-fs (loop5): orphan cleanup on readonly fs [ 443.416908][ T336] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10521: bg 0: block 248: padding at end of block bitmap is not set [ 443.444911][ T302] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.454785][ T336] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.10521: Failed to acquire dquot type 1 [ 443.479656][ T302] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.494943][ T302] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.505031][ T336] EXT4-fs (loop5): 1 truncate cleaned up [ 443.507177][ T302] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.554600][ T336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.619311][T30917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.779542][ T365] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.868431][ T365] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.883367][ T3387] bridge_slave_1: left allmulticast mode [ 443.889062][ T3387] bridge_slave_1: left promiscuous mode [ 443.894816][ T3387] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.910496][ T3387] bridge_slave_0: left allmulticast mode [ 443.916329][ T3387] bridge_slave_0: left promiscuous mode [ 443.922091][ T3387] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.026680][ T3387] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 444.483764][ T3387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.497424][ T3387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.509667][ T3387] bond0 (unregistering): Released all slaves [ 444.535961][ T365] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.595419][ T3387] IPVS: stopping backup sync thread 22123 ... [ 444.625862][ T365] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.754475][ T365] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.810532][ T365] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.860607][ T3387] hsr_slave_0: left promiscuous mode [ 444.885238][ T3387] hsr_slave_1: left promiscuous mode [ 444.905651][ T409] loop6: detected capacity change from 0 to 2048 [ 444.916970][ T3387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.924635][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.963653][ T3387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.971180][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.018653][ T3387] veth1_macvtap: left promiscuous mode [ 445.024518][ T3387] veth0_macvtap: left promiscuous mode [ 445.030074][ T3387] veth1_vlan: left promiscuous mode [ 445.035386][ T3387] veth0_vlan: left promiscuous mode [ 445.271854][ T3387] team0 (unregistering): Port device team_slave_1 removed [ 445.292156][ T3387] team0 (unregistering): Port device team_slave_0 removed [ 445.361439][ T365] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.395199][ T365] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.459609][ T426] bridge0: entered promiscuous mode [ 445.467825][ T426] macvlan3: entered promiscuous mode [ 445.483910][ T426] bridge0: port 3(macvlan3) entered blocking state [ 445.490667][ T426] bridge0: port 3(macvlan3) entered disabled state [ 445.505024][ T432] __nla_validate_parse: 16 callbacks suppressed [ 445.505039][ T432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10560'. [ 445.507099][ T426] macvlan3: entered allmulticast mode [ 445.525861][ T426] bridge0: entered allmulticast mode [ 445.550863][ T426] macvlan3: left allmulticast mode [ 445.556141][ T426] bridge0: left allmulticast mode [ 445.594261][ T440] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10563'. [ 445.622863][ T426] bridge0: left promiscuous mode [ 445.646712][ T439] loop5: detected capacity change from 0 to 512 [ 445.683597][ T439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 445.696453][ T439] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.728166][ T449] loop7: detected capacity change from 0 to 8192 [ 445.872592][T30917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 445.977948][ T470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10573'. [ 445.988576][ T473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10575'. [ 446.067386][ T466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 446.196995][ T494] loop7: detected capacity change from 0 to 512 [ 446.252115][ T494] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 446.291019][ T508] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10591'. [ 446.303230][ T507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10590'. [ 446.426061][ T527] netlink: 140 bytes leftover after parsing attributes in process `syz.6.10598'. [ 446.434039][ T528] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10599'. [ 446.466492][ T520] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.497936][ T533] FAULT_INJECTION: forcing a failure. [ 446.497936][ T533] name failslab, interval 1, probability 0, space 0, times 0 [ 446.510768][ T533] CPU: 0 UID: 0 PID: 533 Comm: syz.5.10601 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 446.521466][ T533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 446.531552][ T533] Call Trace: [ 446.534880][ T533] [ 446.537837][ T533] dump_stack_lvl+0xf2/0x150 [ 446.542482][ T533] dump_stack+0x15/0x1a [ 446.546840][ T533] should_fail_ex+0x223/0x230 [ 446.551610][ T533] should_failslab+0x8f/0xb0 [ 446.556325][ T533] __kmalloc_noprof+0xab/0x3f0 [ 446.561159][ T533] ? kernfs_fop_write_iter+0xe1/0x2c0 [ 446.566668][ T533] ? selinux_file_permission+0x22a/0x360 [ 446.572362][ T533] kernfs_fop_write_iter+0xe1/0x2c0 [ 446.577614][ T533] vfs_write+0x77f/0x920 [ 446.581947][ T533] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 446.587860][ T533] ksys_write+0xe8/0x1b0 [ 446.592214][ T533] __x64_sys_write+0x42/0x50 [ 446.596861][ T533] x64_sys_call+0x287e/0x2dc0 [ 446.601583][ T533] do_syscall_64+0xc9/0x1c0 [ 446.606117][ T533] ? clear_bhb_loop+0x55/0xb0 [ 446.610894][ T533] ? clear_bhb_loop+0x55/0xb0 [ 446.615609][ T533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.621572][ T533] RIP: 0033:0x7fe572aa5d29 [ 446.626007][ T533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.645667][ T533] RSP: 002b:00007fe571117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.654111][ T533] RAX: ffffffffffffffda RBX: 00007fe572c95fa0 RCX: 00007fe572aa5d29 [ 446.662097][ T533] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000003 [ 446.670161][ T533] RBP: 00007fe571117090 R08: 0000000000000000 R09: 0000000000000000 [ 446.678141][ T533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.686129][ T533] R13: 0000000000000000 R14: 00007fe572c95fa0 R15: 00007ffd61ecf088 [ 446.694119][ T533] [ 446.722918][ T520] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.764238][ T520] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.801195][ T557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10608'. [ 446.843673][ T552] loop5: detected capacity change from 0 to 512 [ 446.860342][ T552] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 446.870588][ T568] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10611'. [ 446.893709][ T565] cgroup: release_agent respecified [ 446.914155][ T520] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.013335][ T578] loop6: detected capacity change from 0 to 2048 [ 447.037576][ T578] ext4: Unknown parameter 'euid' [ 447.220808][ T597] bridge0: entered promiscuous mode [ 447.235850][ T597] macvlan2: entered promiscuous mode [ 447.253984][ T597] bridge0: port 3(macvlan2) entered blocking state [ 447.260575][ T597] bridge0: port 3(macvlan2) entered disabled state [ 447.267614][ T597] macvlan2: entered allmulticast mode [ 447.273083][ T597] bridge0: entered allmulticast mode [ 447.279320][ T597] macvlan2: left allmulticast mode [ 447.284510][ T597] bridge0: left allmulticast mode [ 447.291699][ T597] bridge0: left promiscuous mode [ 447.348497][ T604] loop5: detected capacity change from 0 to 512 [ 447.356070][ T604] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 447.703218][ T631] loop6: detected capacity change from 0 to 8192 [ 447.768838][ T631] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 447.777599][ T631] FAT-fs (loop6): Filesystem has been set read-only [ 447.816235][ T661] FAULT_INJECTION: forcing a failure. [ 447.816235][ T661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.829476][ T661] CPU: 0 UID: 0 PID: 661 Comm: syz.5.10644 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 447.840292][ T661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 447.850520][ T661] Call Trace: [ 447.853817][ T661] [ 447.856776][ T661] dump_stack_lvl+0xf2/0x150 [ 447.861407][ T661] dump_stack+0x15/0x1a [ 447.865668][ T661] should_fail_ex+0x223/0x230 [ 447.870383][ T661] should_fail+0xb/0x10 [ 447.874728][ T661] should_fail_usercopy+0x1a/0x20 [ 447.879795][ T661] _copy_from_user+0x1e/0xb0 [ 447.884434][ T661] copy_msghdr_from_user+0x54/0x2a0 [ 447.889682][ T661] ? __fget_files+0x17c/0x1c0 [ 447.894468][ T661] __sys_sendmsg+0x13e/0x230 [ 447.899101][ T661] __x64_sys_sendmsg+0x46/0x50 [ 447.903972][ T661] x64_sys_call+0x2734/0x2dc0 [ 447.908693][ T661] do_syscall_64+0xc9/0x1c0 [ 447.913297][ T661] ? clear_bhb_loop+0x55/0xb0 [ 447.918081][ T661] ? clear_bhb_loop+0x55/0xb0 [ 447.922788][ T661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.928856][ T661] RIP: 0033:0x7fe572aa5d29 [ 447.933301][ T661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.953014][ T661] RSP: 002b:00007fe571117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.961429][ T661] RAX: ffffffffffffffda RBX: 00007fe572c95fa0 RCX: 00007fe572aa5d29 [ 447.969480][ T661] RDX: 0000000000000000 RSI: 00000000200018c0 RDI: 0000000000000003 [ 447.977586][ T661] RBP: 00007fe571117090 R08: 0000000000000000 R09: 0000000000000000 [ 447.985651][ T661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.993650][ T661] R13: 0000000000000000 R14: 00007fe572c95fa0 R15: 00007ffd61ecf088 [ 448.001742][ T661] [ 448.129730][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 448.129747][ T29] audit: type=1326 audit(1736545253.731:21551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.164480][ T29] audit: type=1326 audit(1736545253.771:21552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.188042][ T29] audit: type=1326 audit(1736545253.771:21553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.211650][ T29] audit: type=1326 audit(1736545253.771:21554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.235101][ T29] audit: type=1326 audit(1736545253.771:21555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.258611][ T29] audit: type=1326 audit(1736545253.771:21556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.290136][ T29] audit: type=1326 audit(1736545253.771:21557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.313859][ T29] audit: type=1326 audit(1736545253.771:21558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.337423][ T29] audit: type=1326 audit(1736545253.771:21559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.361210][ T29] audit: type=1326 audit(1736545253.771:21560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.4.10651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832a615d29 code=0x7ffc0000 [ 448.510690][ T708] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.598869][ T720] loop5: detected capacity change from 0 to 8192 [ 448.628284][ T720] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 448.635532][ T720] FAT-fs (loop5): Filesystem has been set read-only [ 448.770644][ T744] bridge0: entered promiscuous mode [ 448.777496][ T744] macvlan2: entered promiscuous mode [ 448.787404][ T744] bridge0: port 3(macvlan2) entered blocking state [ 448.794066][ T744] bridge0: port 3(macvlan2) entered disabled state [ 448.801005][ T744] macvlan2: entered allmulticast mode [ 448.806606][ T744] bridge0: entered allmulticast mode [ 448.815204][ T744] macvlan2: left allmulticast mode [ 448.820387][ T744] bridge0: left allmulticast mode [ 448.827065][ T744] bridge0: left promiscuous mode [ 448.937194][ T756] loop7: detected capacity change from 0 to 512 [ 448.954349][ T756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 448.970660][ T756] EXT4-fs (loop7): orphan cleanup on readonly fs [ 448.986331][ T756] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10674: bg 0: block 248: padding at end of block bitmap is not set [ 449.008369][ T756] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.10674: Failed to acquire dquot type 1 [ 449.059380][ T756] EXT4-fs (loop7): 1 truncate cleaned up [ 449.064469][ T759] loop5: detected capacity change from 0 to 8192 [ 449.081521][ T756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.083600][ T520] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.106980][ T759] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 449.114208][ T759] FAT-fs (loop5): Filesystem has been set read-only [ 449.115492][ T520] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.135392][ T520] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.159840][ T520] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.214947][T31877] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.629790][ T806] loop6: detected capacity change from 0 to 8192 [ 449.684856][ T806] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 449.692259][ T806] FAT-fs (loop6): Filesystem has been set read-only [ 449.708817][ T819] FAULT_INJECTION: forcing a failure. [ 449.708817][ T819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.722035][ T819] CPU: 0 UID: 0 PID: 819 Comm: syz.5.10693 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 449.732747][ T819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 449.742842][ T819] Call Trace: [ 449.746128][ T819] [ 449.749089][ T819] dump_stack_lvl+0xf2/0x150 [ 449.753722][ T819] dump_stack+0x15/0x1a [ 449.757985][ T819] should_fail_ex+0x223/0x230 [ 449.762753][ T819] should_fail+0xb/0x10 [ 449.766935][ T819] should_fail_usercopy+0x1a/0x20 [ 449.772048][ T819] _copy_from_user+0x1e/0xb0 [ 449.776753][ T819] copy_msghdr_from_user+0x54/0x2a0 [ 449.782007][ T819] ? __fget_files+0x17c/0x1c0 [ 449.786804][ T819] __sys_sendmsg+0x13e/0x230 [ 449.791488][ T819] __x64_sys_sendmsg+0x46/0x50 [ 449.796284][ T819] x64_sys_call+0x2734/0x2dc0 [ 449.801043][ T819] do_syscall_64+0xc9/0x1c0 [ 449.805566][ T819] ? clear_bhb_loop+0x55/0xb0 [ 449.810276][ T819] ? clear_bhb_loop+0x55/0xb0 [ 449.815055][ T819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.821035][ T819] RIP: 0033:0x7fe572aa5d29 [ 449.825537][ T819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.845192][ T819] RSP: 002b:00007fe571117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.853682][ T819] RAX: ffffffffffffffda RBX: 00007fe572c95fa0 RCX: 00007fe572aa5d29 [ 449.861680][ T819] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000004 [ 449.869694][ T819] RBP: 00007fe571117090 R08: 0000000000000000 R09: 0000000000000000 [ 449.877693][ T819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.885679][ T819] R13: 0000000000000000 R14: 00007fe572c95fa0 R15: 00007ffd61ecf088 [ 449.893677][ T819] [ 450.129677][ T850] loop7: detected capacity change from 0 to 2048 [ 450.155065][ T850] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.197473][ T850] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.284252][ T866] bridge0: entered promiscuous mode [ 450.289661][ T866] macvlan3: entered promiscuous mode [ 450.296005][T31877] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.307039][ T866] bridge0: port 3(macvlan3) entered blocking state [ 450.313648][ T866] bridge0: port 3(macvlan3) entered disabled state [ 450.333236][ T866] macvlan3: entered allmulticast mode [ 450.338693][ T866] bridge0: entered allmulticast mode [ 450.347658][ T866] macvlan3: left allmulticast mode [ 450.352890][ T866] bridge0: left allmulticast mode [ 450.377548][ T866] bridge0: left promiscuous mode [ 450.400785][ T874] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.464581][ T874] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.506206][ T874] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.586311][ T874] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.670351][ T874] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.682460][ T874] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.694009][ T874] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.706017][ T874] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.777838][ T894] ================================================================== [ 450.786079][ T894] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 450.794446][ T894] [ 450.796766][ T894] write to 0xffffea00042d2358 of 8 bytes by task 895 on cpu 1: [ 450.804315][ T894] delete_from_page_cache_batch+0x308/0x700 [ 450.810246][ T894] truncate_inode_pages_range+0x1c5/0x6b0 [ 450.815971][ T894] truncate_inode_pages_final+0x55/0x60 [ 450.821533][ T894] evict+0x305/0x570 [ 450.825435][ T894] iput+0x42a/0x5b0 [ 450.829235][ T894] dentry_unlink_inode+0x24f/0x260 [ 450.834344][ T894] __dentry_kill+0x18b/0x4c0 [ 450.838947][ T894] shrink_dentry_list+0x1bc/0x3e0 [ 450.843983][ T894] shrink_dcache_parent+0x43/0x1b0 [ 450.849093][ T894] do_one_tree+0x16/0xb0 [ 450.853334][ T894] shrink_dcache_for_umount+0x58/0xe0 [ 450.858724][ T894] generic_shutdown_super+0x3e/0x220 [ 450.864011][ T894] kill_anon_super+0x2b/0x140 [ 450.868686][ T894] kill_litter_super+0x3d/0x50 [ 450.873626][ T894] ramfs_kill_sb+0x2d/0x40 [ 450.878047][ T894] deactivate_locked_super+0x7d/0x1c0 [ 450.883418][ T894] deactivate_super+0x9f/0xb0 [ 450.888094][ T894] cleanup_mnt+0x268/0x2e0 [ 450.892510][ T894] __cleanup_mnt+0x19/0x20 [ 450.896923][ T894] task_work_run+0x13a/0x1a0 [ 450.901526][ T894] syscall_exit_to_user_mode+0xa8/0x120 [ 450.907079][ T894] do_syscall_64+0xd6/0x1c0 [ 450.911579][ T894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.917481][ T894] [ 450.919810][ T894] read to 0xffffea00042d2358 of 8 bytes by task 894 on cpu 0: [ 450.927260][ T894] folio_mapping+0xa0/0x120 [ 450.931772][ T894] lru_add+0x89/0x440 [ 450.935751][ T894] folio_batch_move_lru+0x15f/0x230 [ 450.940947][ T894] lru_add_drain_cpu+0x7c/0x260 [ 450.945795][ T894] lru_add_drain+0x26/0x80 [ 450.950229][ T894] relocate_vma_down+0x1f7/0x330 [ 450.955162][ T894] setup_arg_pages+0x3e7/0x730 [ 450.959940][ T894] load_elf_binary+0x7da/0x1a10 [ 450.964798][ T894] bprm_execve+0x4e6/0xc60 [ 450.969224][ T894] do_execveat_common+0x793/0x800 [ 450.974255][ T894] __x64_sys_execve+0x5a/0x70 [ 450.978934][ T894] x64_sys_call+0x1333/0x2dc0 [ 450.983616][ T894] do_syscall_64+0xc9/0x1c0 [ 450.988132][ T894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.994055][ T894] [ 450.996370][ T894] value changed: 0xffff88810631a170 -> 0x0000000000000000 [ 451.003481][ T894] [ 451.005799][ T894] Reported by Kernel Concurrency Sanitizer on: [ 451.011941][ T894] CPU: 0 UID: 0 PID: 894 Comm: sed Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 451.021926][ T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 451.031999][ T894] ==================================================================