last executing test programs: 3.699418926s ago: executing program 4 (id=511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg(r2, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="6bb55d5337a89278d2adc258be65c65eccbcdf59a4553fe8ae7eec1d2b475fb5fa7aae2a", 0x24}], 0x1}}], 0x1, 0x800) 3.699192446s ago: executing program 4 (id=512): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) mremap(&(0x7f00006c8000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000548000/0x4000)=nil) madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x18) 3.595342685s ago: executing program 4 (id=513): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e00010069703667726574617000"], 0x48}}, 0x0) 3.504043372s ago: executing program 4 (id=515): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f3, &(0x7f0000001180)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000010c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noquota}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfe, 0x576, &(0x7f00000024c0)="$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") unshare(0x28000600) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0xb4, 0x7f}, 0x48) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x24, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40013, r2, 0x52c23000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 3.401834191s ago: executing program 4 (id=517): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.17058676s ago: executing program 1 (id=520): r0 = open(0x0, 0x1459c2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x1a) mount$9p_rdma(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma,port=0x00']) ftruncate(r0, 0x2007ffd) r1 = open(0x0, 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6908, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80800) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.939429479s ago: executing program 1 (id=525): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r5, r4, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsopen(&(0x7f0000000080)='debugfs\x00', 0x1) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x2}, {0x2, 0x6, 0x4, 0xf1c0}, {0x80, 0x6, 0x40, 0x3a6}, {0x0, 0x8, 0x7, 0x3ff}]}) 2.6770367s ago: executing program 1 (id=531): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000304000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001000000028001280090001007665747a00000000000002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001f0000000000"], 0x50}}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) fchdir(0xffffffffffffffff) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001) (async, rerun: 64) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64) r3 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @private}}) (async) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private0, 0x0, r4}) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r6, 0x0) ftruncate(r6, 0x9e5d) (async) faccessat2(r0, &(0x7f0000000080)='./bus\x00', 0xf3, 0x1200) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) read(r7, &(0x7f0000002340)=""/4096, 0x1000) 2.55580373s ago: executing program 4 (id=533): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b00f45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd41503f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e00300000000000000b35faae176f98b745eda2967199cc93685bb537e8e487166737089df20618cd4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df08445e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5aed65201cc2c51944da8d7391d5b6b9741aa3b76600cd1aa0afe5f8f46df4c5124caf673374b371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf81109715b67ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87dc0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e0219ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa400d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82b04cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb9b5fe7f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b3bff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b011d193ba8075da1d1da9311a050000ab89524414cae922141f7baf17756c31559907a53581b6ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf0a74680bc9987d5aade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7dc26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f736c5867831c5d6eaa9ef1806fd95bbe00318000000000000259da51ff7517ace7361420a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfad36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405d86c"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg(r2, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="6bb55d5337a89278d2adc258be65c65eccbcdf59a4553fe8ae7eec1d2b475fb5fa7aae2a", 0x24}], 0x1}}], 0x1, 0x800) 2.491711735s ago: executing program 1 (id=536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001180)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth1_vlan\x00', {0x2}, 0x2}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES16], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x7c1496be2da30d9d, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) signalfd(r4, &(0x7f0000000280), 0x8) listen(0xffffffffffffffff, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x0, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000f10000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e"], 0x3c}}, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x300}}) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000000)="240000001e005f800240000000000000020000001fffffff0000080008000100000000ff", 0x24) 1.868102897s ago: executing program 0 (id=540): clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x800000000, 0x0, 0x0, 0x0, 0x2c43, 0x0, 0x0, 0xffc99a3b, 0x300, 0x0, 0x2902, 0x20, 0x100000001}) 1.862872677s ago: executing program 0 (id=542): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0x314000, 0x800}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006c8000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000548000/0x4000)=nil) madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x2, 0x1}, 0x20) r7 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)) syz_io_uring_setup(0x3, &(0x7f0000000300)={0x0, 0x100, 0x20, 0x0, 0x0, 0x0, r7}, 0x0, 0x0) 1.732467707s ago: executing program 2 (id=547): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x8000) pipe2(&(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x5, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xfffffffa, 0x2, 0x6c, 0x6}, 0x9c) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006c04000008000300", @ANYRES32=r7, @ANYBLOB="0800b7000400000008002600940900000800a00002000000050019010800000005001901040000000800"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80040, 0x0) (async) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80040, 0x0) 1.58497466s ago: executing program 1 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x44}}, 0x2000000) 1.051335983s ago: executing program 0 (id=551): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x214589c, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@grpjquota}]}, 0x1, 0x556, &(0x7f0000001100)="$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") sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 1.051095223s ago: executing program 2 (id=552): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x5f, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000030000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000028000c80080002400000000008000140000000001400030076657468315f09005f6873720000000014000000020a090100000000000000000000000014000000110001"], 0xb0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000500000005"], 0x104}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 928.119384ms ago: executing program 2 (id=553): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3525, 0x0, 0x0, 0x0, 0x58000000}}, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) 927.938783ms ago: executing program 2 (id=554): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000940)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x957}}, {@jqfmt_vfsold}, {@lazytime}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0x1, 0x565, &(0x7f0000000a00)="$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") setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x0, 0xffffffff, @empty}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0xfffffffffffffe94, &(0x7f00000002c0)={@remote, @link_local, @void, {@ipv4={0x800, @dccp={{0x12, 0x4, 0x3, 0x0, 0xca, 0x64, 0x0, 0x6, 0x21, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x10, 0x8b, 0x0, 0x5, [0x3b, 0x6, 0x3ff]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xc1, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}]}, @generic={0x89, 0xe, "4508a33d253cfc53e89b485e"}, @noop]}}, {{0x4e24, 0x4e24, 0x4, 0x1, 0xd, 0x0, 0x0, 0x7, 0x6, "68ad9b", 0x1, "8ef6f6"}, "0ad7d670042c8528a3b782356630f360e178de14478f208910e6efcae9eedff9d08145272082b77e23a9e308375fcb72040fd99709761de084278f99671e63e051ed52380255025877df12a29b36ec0248614631b10c86ca71886ef7e94633454557724a0cef429c7a022433b84b17219503"}}}}}, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) recvmsg(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x12000) 776.826046ms ago: executing program 2 (id=556): socket$pppl2tp(0x18, 0x1, 0x1) mount$nfs4(0x0, 0x0, 0x0, 0x8830, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2c2c736d6163eb662b007a1b2c3bd1ccd863c606b7a03d202cf065726d69745f646972656374696f2c737562653d002c004652e31d6f8138da7b9278f79d082e"]) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000007540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3525}}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) 774.205746ms ago: executing program 2 (id=557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x39}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7924001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4, 0x0, 0xa}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061149000000000007d000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000380)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee0050000ef0000300d815201f21b3a43465c6281d34953480740f2743fdcb3823bf7bb8690a9d5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 703.847682ms ago: executing program 0 (id=559): io_setup(0xeb0, &(0x7f0000000140)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x7, 0xa, 0x0, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x4000011) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000280)="0d0add0d773656f3c371fddc0a151b8463f10ac5ccd1fcb837adb77d58b00f66188895f3e97d478ef2db17ab99b9a570740ebe4b48fd5402b7160f8dd0519084c7057efe37593f0b70b2ec9de21401f96f", 0x51}]) io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200040) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="3c000000000000000000000007000000441454010000000000000000ac1414bb00000000004414000100000000000000f00000000000000000000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="ac1414"], 0x60}, 0x2000800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x3, 0x9, 0x7f, 0x0, 0x12}) 703.628942ms ago: executing program 1 (id=560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x8) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000dd4ff2bb0800000000000000020073797a7000000000"], 0x28}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) (async) r4 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x4008662c, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) 514.966207ms ago: executing program 0 (id=563): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x300}}], 0x4, 0xc080) (fail_nth: 6) 514.284278ms ago: executing program 3 (id=564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140), 0xee, 0x482, &(0x7f0000000980)="$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") (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89801) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@gid={'gid', 0x3d, 0xee00}}]}) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r1, 0x0, 0x100800001) (async) close(0xffffffffffffffff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) (async) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x12, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x40000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback={0x0, 0x460c6}}}) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f0000000080)={{0x0, @broadcast, 0x0, 0x0, 'wrr\x00'}}, 0x44) pipe(&(0x7f0000000240)) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x0, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$addseals(r0, 0x409, 0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x74, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0xa}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8d}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x10, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) 480.57091ms ago: executing program 3 (id=565): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x6000, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 301.465445ms ago: executing program 3 (id=566): socket$pppl2tp(0x18, 0x1, 0x1) mount$nfs4(0x0, 0x0, 0x0, 0x8830, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2c2c736d6163eb662b007a1b2c3bd1ccd863c606b7a03d202cf065726d69745f646972656374696f2c737562653d002c004652e31d6f8138da7b9278f79d082e"]) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000007540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3525}}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) 259.703018ms ago: executing program 0 (id=567): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB="6d06bed159e6f26707e5012018033cfb241266ea04b095bdfe88bffed287dfc72b6ca8560486bef6bffdf7c72014ca86f28b1dea93856a0fee094b0934"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x59c, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2810482, &(0x7f0000000280)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@permit_directio}]}, 0x45, 0x779, &(0x7f00000007c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) fallocate(r1, 0x0, 0x2000000, 0x2c2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='hrtimer_expire_entry\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt(r3, 0xfffffffa, 0xfffffffe, &(0x7f00000003c0), 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x4, 0x5, 0x54f6, 0x12b5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7000000010008105000000001100000000000000", @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x4004010) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 254.620809ms ago: executing program 3 (id=568): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xffff}, {0xffffffa6, 0x3}, {0x14}}}, 0x30}}, 0x0) 167.793986ms ago: executing program 3 (id=569): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001200)=@delchain={0x970, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x760, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_SEL={0x714, 0x5, {0xd, 0x0, 0x1, 0x8000, 0x3, 0x5, 0x4, 0x50, [{0x80, 0x3ff, 0x7, 0x1}, {0x9, 0x0, 0x7, 0xffff}, {0xf, 0x6, 0x0, 0x10000}, {0x737, 0x6, 0x5, 0x100}, {0x0, 0x80000001, 0xffff, 0x7}, {0x1ff, 0x1, 0x8, 0x1}, {0x8, 0x3, 0x7, 0x6}, {0x9, 0xfffff801, 0x1, 0x7f}, {0xea, 0xfff00000, 0x4, 0x9}, {0x4, 0x4, 0x2, 0x2}, {0x6, 0x20, 0x5, 0x2}, {0x1, 0x7fffffff, 0x9, 0x7}, {0x81, 0x4, 0xfffffffd, 0x101}, {0x7, 0x3, 0x101, 0xfffffffa}, {0x7, 0x8, 0x7f, 0xffffff81}, {0x8, 0x80000000, 0x4, 0x36d}, {0x9, 0xff, 0x8, 0x2}, {0x3, 0x9, 0x3, 0x5}, {0x4, 0x0, 0x83, 0x9c}, {0x6, 0x1, 0x401, 0x8}, {0xf6, 0x31, 0x0, 0x7}, {0xe84, 0xd89, 0x4, 0x87d}, {0x5ba, 0x81, 0xf, 0x6}, {0x7, 0x5, 0x1d5e2986, 0x9}, {0x5, 0xcd8, 0x9, 0x2}, {0xc0, 0xde, 0x9, 0x1}, {0x2, 0x3, 0x8, 0x7}, {0x8, 0x8, 0x400, 0x1}, {0xb, 0x0, 0x6, 0x9a}, {0x5, 0x6, 0x1, 0x8000}, {0x9df, 0xc, 0xfffffff0, 0x4}, {0xb3ef, 0x3, 0xd28, 0x6}, {0x6, 0x300, 0x3448, 0x9}, {0x7, 0x80000000, 0x7, 0x1}, {0xb9, 0x4, 0x35, 0x9}, {0x6, 0x7, 0x8, 0xf}, {0x2, 0xd, 0x7, 0x7}, {0x9, 0x2, 0x2, 0x5}, {0xffffff01, 0x8, 0x0, 0x8}, {0x6, 0x0, 0x9c, 0x8}, {0xfffffff8, 0x7f, 0x10001, 0x4a}, {0x3, 0xc, 0x9, 0x1}, {0x4, 0x0, 0x3, 0x4}, {0xffffffeb, 0xbe, 0x3, 0x7}, {0x9, 0x0, 0x9, 0x10}, {0x80000000, 0x221b, 0x6d41, 0x4}, {0xfffffffb, 0x6, 0x3, 0x80000000}, {0x3, 0xcab2, 0xcc0000, 0xe26}, {0x9, 0x8, 0x3, 0x7}, {0x4, 0x1, 0x4, 0x101}, {0x10001, 0x3, 0x4, 0x8}, {0x4, 0x2, 0xfff, 0x800}, {0x40, 0x6, 0x4, 0x8eff}, {0x7f000000, 0x9, 0x1, 0x9}, {0x75, 0x10, 0xb, 0x7}, {0x80000000, 0xf, 0x3, 0x2}, {0x28000000, 0x6, 0x80000001, 0x9f}, {0xfffffffe, 0x6, 0x5, 0x962c}, {0x80000001, 0x10, 0x6, 0x45}, {0x81, 0x3, 0x8000000, 0x4}, {0xe7c, 0x1, 0x3, 0x6}, {0x9dc5, 0xaa24, 0x0, 0x8}, {0x5, 0x3, 0x1, 0x565}, {0x8001, 0x5, 0xff, 0x1}, {0x860b646f, 0x145c, 0x7ff, 0x54ff}, {0xffff, 0x40, 0x1000, 0xdeef}, {0x2, 0x3, 0x3ff, 0x1}, {0x4, 0x8, 0x2, 0xf07}, {0x9, 0x8, 0x2, 0x7}, {0x3, 0x0, 0x382000, 0x10000}, {0xff, 0x2, 0x72cbaf72, 0x4}, {0x1, 0xd9, 0x9, 0x80}, {0x1, 0x9, 0x5, 0x2}, {0x4, 0x1, 0x510, 0x5}, {0xe, 0x3351, 0xfc, 0x7}, {0x27c3, 0x3, 0x3, 0x8}, {0x8, 0x1ff, 0x7f, 0x401}, {0xef, 0x4, 0xe24, 0x1}, {0x1, 0xd339, 0x8, 0xffffffff}, {0x6, 0x7, 0x7, 0x13e7}, {0x3, 0xb, 0x8, 0x8ab5}, {0x5, 0x3, 0x86, 0x1}, {0x6, 0x1, 0x9, 0x8}, {0x8, 0xfffffff6, 0x74f4, 0xddb}, {0x5, 0xdb5, 0x80000001, 0xfffffffd}, {0x1, 0x2, 0x5, 0x6}, {0x2007, 0x200, 0x7c, 0x8}, {0x8, 0x1, 0x4, 0x5}, {0xd55, 0x8, 0x37, 0x400}, {0x2, 0x4, 0xde5476d, 0x46c}, {0x8, 0xb5, 0xefa, 0x736}, {0xa, 0x3, 0x3, 0x8}, {0x8, 0xc, 0x4, 0x5}, {0x1, 0xe21e, 0x1, 0xd}, {0x3d2e, 0x6, 0x7fffffff, 0x7fff}, {0xfffffffc, 0x0, 0x3, 0x3}, {0x40000, 0x577f, 0x3, 0x1ff}, {0x3, 0xfffffff3, 0x7b, 0x6}, {0x101, 0x7f, 0x4, 0x7}, {0x5, 0x8000, 0xfffffffb, 0x4}, {0x3, 0xfff, 0x8, 0xd}, {0x7, 0x7, 0x400, 0x6}, {0x6, 0x6, 0x10000, 0xb9}, {0x6, 0x3e70b4ba, 0x4, 0x2}, {0x46, 0x3, 0x3, 0xdd}, {0x3d47, 0x9, 0xe3b3, 0x6}, {0x8, 0x3e, 0x401, 0xfffffffc}, {0xd309, 0x2, 0x8001, 0x1d7b5209}, {0xf, 0x0, 0x5, 0xc1}, {0xfffffffa, 0x8, 0xffff, 0x10001}, {0x5, 0x0, 0xffffffff, 0x4}, {0x5, 0xfffffffe, 0x3, 0x6}]}}, @TCA_U32_MARK={0x10}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0xf}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x1bc, 0x2, [@TCA_ROUTE4_ACT={0x1a8, 0x6, [@m_nat={0x50, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x25, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x128, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xfb, 0x6, "76f6f4fc16d8930e16bf83174f16842d7ac8d80e6637c6c02b0268a2d873f6f957db9ad4ff85cf2af3fe4009903573f4931dbbfe3a1726c6c0c2bd20408a6d1ddff7acc4b26667bc03ff408a6dc764098542e1eb2396b3826a3265db159cb21c160b5f7937766134ba0696ca6aa9cdb2346526ceb1222e0e2203490a17cf7f3344b789a8ec104af2ecbb5df28762345eeff679154f8cee12f29e18276b0c9b44845ee98203abfb9665a704df4adc4e5b8f1c2a9cc7d9d4acaf08fe46ff7a83d0ad02aabba4c0b97e825490d6260b87db3e86a1f7d07a94eba1903d3e21ccbc709087cbd2c5c6eabf4cf96946b4cc7e754266b47d62cae8"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x970}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000003300)="$eJzs3E+LHEUYB+A348bdbNw/aowmBy3w4qnJ7sGTIItsQHZAiVkhEYSO26vDtjPD9LAwIkZPXv0cnr0JfoO9+Bm87cVjDmJLurMmEyeRHLIDyfMcpl+q6kd1wTDQQ1Ufv/fT1wf7Vbafj6Nz5kx0hhHpTooUnTjx5k57vXFzZ6vb3b6W0tWt6xvvppRW3/rts28XI+L8p7+s/roYR+ufH/+5+cfRxaNLx39f/6pXpV6V+oNxytOtwWCc3yqLtNerDrKUPi6LvCpSr18Vo6n+/XIwHE5S3t9bWR6OiqpKeX+SDopJGg/SeDRJ+Zd5r5+yLEsry8Ejnf3/Ibs/36nrOqKuz8aLUdd1fS6W43y8FCuxGt9HxMvxSrwaF+K1uBivxxtxqRl1GrcPAAAAAAAAAAAAAAAAAAAAz4/Hnf9fi3Xn/wEAAAAAAAAAAAAAAAAAAOAUfHLj5s5Wt7t9LaWliPLHw93D3fba9m/tRy/KKOJKrMVf0Zz+b7X11Q+721dSYz1+KG/fy98+3H2hzd/9uJvfaF4ncC+/0PSd5DfafJrOL8byg/NvxlpcmD3/5sz8Urzz9gP5LNbi9y9iEGXsNXPfz3+3kdIHH3Ufyl9uxgEAAMCzIEv/mvn8nmWP6m/zT/D/wEPP1wtxeWG+ayeimnxzkHfKYtQU5Umx9J8WxWOKxemWzlOaqxNzX6niWS3OxXTLvH+ZOA33vwbzvhMAAAAAAAAAAACexFPeV7gQM3aWvT+fpQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAAAD///7lyMc=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x401, 0x80000000, 0x8, 0x3683, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x5, 0x4, 0x1, 0xfffffff6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0xf2, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000840)='r\xeb&G#\xcb\xca\xac\xa2\xa0\x03T\xe7\xa7\xfa\x05\x05;\xdf\xd6\x8e^\xba\xf1\xbcx\xa6n\x01\xf4\xb4%\x8c\xbc\xd0C\xca#\x0f\x1b\xe4\x14\xbf_\xc0\xb9 \xbf#1\x95\xea:r\'\xb7\xa7\x86\xb6\a\xc2\x88\x85\xab\x12\xbf\xe3N\xa0u\'\xc2\x9b\xf1\xa1C\xad\x8d\\^.\xbd\xda\x82\x14\x8bx9\x13k\xd2\xe1\xb0\b\x1e\x9c3\xf3\xe4.\x00N\xccBW\x9e\xdeJ?9Rh\xca\xc6t\xf1N\x00?~\xda\n\xee\xe8Y\x8fl\x90{\x95\xa8Ll?\xcf\xbeL]\x11+%\xab~\xd3q\xe8 \x97?\xde\x95\xban\xdbg_RZq)A\x80\xf7\xd2o)z\xae=\xb2*\xcf\x1d\xbdv9\xeb\vX\xfe,mp\x05\xde\x82\x83Pq\x03\x00\x00\x00\x85\xfd\x00\x00\x00\x10c\x00\x00\x00\x00\x1f\xf0\xa4\xc0\x1d\xf0&\x12\xfc\xae\xe6\xdb\xc0J\xea<\x92\xe7\xfe\xe0G\xb2\x1a\x8f\x9e\xa5\xfb\x89\n\x9ez\x11\xec\xc2\x8e\xf0\x8f\xfdAj9\'\f<\xf3576\xc1\xaaY\xa0q\x9c^&+\x8f\a\xf7!\xa7\xfeh\x15\xa3\xf1\t\xe0\xafU\xfdG\xd8@\x02\aO\x11\xaf\xbb\r\xeb\xf8\x93:\x00\x00\x00\x00\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0xd406f0ef715cd04f, 0x0, 0x2}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x1, 0x0, 0x5, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xa) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="63202a3a2a20fde6ad3548c350482f99eaf0ac7b07162f5eb7c8fe4b4aaf"], 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=570): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@noinit_itable}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@auto_da_alloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x8003, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) sendfile(r1, r3, 0x0, 0xd612) (fail_nth: 24) kernel console output (not intermixed with test programs): bread(block 73) failed [ 42.497130][ T3351] bridge_slave_1: left allmulticast mode [ 42.502891][ T3351] bridge_slave_1: left promiscuous mode [ 42.508747][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.520780][ T4003] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.533346][ T3351] bridge_slave_0: left allmulticast mode [ 42.539020][ T3351] bridge_slave_0: left promiscuous mode [ 42.545462][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.555955][ T4003] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.625911][ T4015] loop0: detected capacity change from 0 to 1024 [ 42.637570][ T4015] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 42.663563][ T3603] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.663755][ T4015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.717320][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.729122][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.739292][ T3351] bond0 (unregistering): Released all slaves [ 42.747505][ T4030] netlink: 156 bytes leftover after parsing attributes in process `syz.1.185'. [ 42.789511][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.838937][ T3351] hsr_slave_0: left promiscuous mode [ 42.844670][ T3351] hsr_slave_1: left promiscuous mode [ 42.850750][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.858157][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.866138][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.873644][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.903833][ T3351] veth1_macvtap: left promiscuous mode [ 42.909336][ T3351] veth0_macvtap: left promiscuous mode [ 42.914881][ T3351] veth1_vlan: left promiscuous mode [ 42.920180][ T3351] veth0_vlan: left promiscuous mode [ 43.026443][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 43.037964][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 43.108807][ T3993] chnl_net:caif_netlink_parms(): no params data found [ 43.144156][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.151986][ T3993] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.159273][ T3993] bridge_slave_0: entered allmulticast mode [ 43.165754][ T3993] bridge_slave_0: entered promiscuous mode [ 43.172906][ T3993] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.180738][ T3993] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.187813][ T3993] bridge_slave_1: entered allmulticast mode [ 43.194378][ T3993] bridge_slave_1: entered promiscuous mode [ 43.220895][ T3993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.238016][ T3993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.263424][ T4060] FAULT_INJECTION: forcing a failure. [ 43.263424][ T4060] name failslab, interval 1, probability 0, space 0, times 0 [ 43.276119][ T4060] CPU: 0 UID: 0 PID: 4060 Comm: syz.4.192 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 43.286722][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 43.296822][ T4060] Call Trace: [ 43.300120][ T4060] [ 43.303052][ T4060] dump_stack_lvl+0xf2/0x150 [ 43.306957][ T4058] xt_socket: unknown flags 0x2 [ 43.307648][ T4060] dump_stack+0x15/0x20 [ 43.316586][ T4060] should_fail_ex+0x229/0x230 [ 43.321290][ T4060] ? __vmalloc_node_range_noprof+0x44b/0xef0 [ 43.327267][ T4060] should_failslab+0x8f/0xb0 [ 43.331971][ T4060] __kmalloc_node_noprof+0xa8/0x380 [ 43.337263][ T4060] __vmalloc_node_range_noprof+0x44b/0xef0 [ 43.343070][ T4060] ? __mod_node_page_state+0x1c/0x80 [ 43.348357][ T4060] ? bpf_check+0xd3/0xa290 [ 43.352855][ T4060] vzalloc_noprof+0x5e/0x70 [ 43.357412][ T4060] ? bpf_check+0xd3/0xa290 [ 43.361827][ T4060] bpf_check+0xd3/0xa290 [ 43.366106][ T4060] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 43.372178][ T4060] ? cgroup_rstat_updated+0x99/0x550 [ 43.377500][ T4060] ? pcpu_chunk_relocate+0x183/0x280 [ 43.382796][ T4060] ? __mod_memcg_state+0x10d/0x200 [ 43.387955][ T4060] ? bpf_prog_alloc+0x59/0x150 [ 43.392724][ T4060] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 43.397924][ T4060] ? selinux_bpf_prog_load+0x35/0xe0 [ 43.403210][ T4060] ? __kmalloc_cache_noprof+0x20c/0x2a0 [ 43.408760][ T4060] ? selinux_bpf_prog_load+0xbb/0xe0 [ 43.414082][ T4060] bpf_prog_load+0xed4/0x1060 [ 43.418914][ T4060] __sys_bpf+0x463/0x7a0 [ 43.423185][ T4060] __x64_sys_bpf+0x43/0x50 [ 43.427609][ T4060] x64_sys_call+0x2625/0x2d60 [ 43.432346][ T4060] do_syscall_64+0xc9/0x1c0 [ 43.436899][ T4060] ? clear_bhb_loop+0x55/0xb0 [ 43.441589][ T4060] ? clear_bhb_loop+0x55/0xb0 [ 43.446323][ T4060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.452250][ T4060] RIP: 0033:0x7f1f6bfe9e79 [ 43.456747][ T4060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.476501][ T4060] RSP: 002b:00007f1f6ac61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.484965][ T4060] RAX: ffffffffffffffda RBX: 00007f1f6c185f80 RCX: 00007f1f6bfe9e79 [ 43.492993][ T4060] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 43.500977][ T4060] RBP: 00007f1f6ac61090 R08: 0000000000000000 R09: 0000000000000000 [ 43.508945][ T4060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.517030][ T4060] R13: 0000000000000001 R14: 00007f1f6c185f80 R15: 00007ffd928fa8a8 [ 43.524999][ T4060] [ 43.528584][ T4060] syz.4.192: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 43.546109][ T4060] CPU: 0 UID: 0 PID: 4060 Comm: syz.4.192 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 43.556795][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 43.566893][ T4060] Call Trace: [ 43.570184][ T4060] [ 43.573116][ T4060] dump_stack_lvl+0xf2/0x150 [ 43.577724][ T4060] dump_stack+0x15/0x20 [ 43.581958][ T4060] warn_alloc+0x145/0x1b0 [ 43.586306][ T4060] ? should_fail_ex+0x198/0x230 [ 43.591204][ T4060] ? __vmalloc_node_range_noprof+0x44b/0xef0 [ 43.597214][ T4060] __vmalloc_node_range_noprof+0x4df/0xef0 [ 43.603140][ T4060] ? __mod_node_page_state+0x1c/0x80 [ 43.608476][ T4060] ? bpf_check+0xd3/0xa290 [ 43.612960][ T4060] vzalloc_noprof+0x5e/0x70 [ 43.617545][ T4060] ? bpf_check+0xd3/0xa290 [ 43.621972][ T4060] bpf_check+0xd3/0xa290 [ 43.626263][ T4060] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 43.632342][ T4060] ? cgroup_rstat_updated+0x99/0x550 [ 43.637710][ T4060] ? pcpu_chunk_relocate+0x183/0x280 [ 43.643008][ T4060] ? __mod_memcg_state+0x10d/0x200 [ 43.648137][ T4060] ? bpf_prog_alloc+0x59/0x150 [ 43.652938][ T4060] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 43.658139][ T4060] ? selinux_bpf_prog_load+0x35/0xe0 [ 43.663454][ T4060] ? __kmalloc_cache_noprof+0x20c/0x2a0 [ 43.669036][ T4060] ? selinux_bpf_prog_load+0xbb/0xe0 [ 43.674330][ T4060] bpf_prog_load+0xed4/0x1060 [ 43.679044][ T4060] __sys_bpf+0x463/0x7a0 [ 43.683333][ T4060] __x64_sys_bpf+0x43/0x50 [ 43.687788][ T4060] x64_sys_call+0x2625/0x2d60 [ 43.692469][ T4060] do_syscall_64+0xc9/0x1c0 [ 43.696978][ T4060] ? clear_bhb_loop+0x55/0xb0 [ 43.701665][ T4060] ? clear_bhb_loop+0x55/0xb0 [ 43.706349][ T4060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.712250][ T4060] RIP: 0033:0x7f1f6bfe9e79 [ 43.716666][ T4060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.736337][ T4060] RSP: 002b:00007f1f6ac61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.744756][ T4060] RAX: ffffffffffffffda RBX: 00007f1f6c185f80 RCX: 00007f1f6bfe9e79 [ 43.752717][ T4060] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 43.760703][ T4060] RBP: 00007f1f6ac61090 R08: 0000000000000000 R09: 0000000000000000 [ 43.768731][ T4060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.776700][ T4060] R13: 0000000000000001 R14: 00007f1f6c185f80 R15: 00007ffd928fa8a8 [ 43.784673][ T4060] [ 43.787773][ T4060] Mem-Info: [ 43.791627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.801400][ T4060] active_anon:3657 inactive_anon:0 isolated_anon:0 [ 43.801400][ T4060] active_file:15095 inactive_file:1897 isolated_file:0 [ 43.801400][ T4060] unevictable:0 dirty:55 writeback:8 [ 43.801400][ T4060] slab_reclaimable:2538 slab_unreclaimable:13325 [ 43.801400][ T4060] mapped:20689 shmem:282 pagetables:694 [ 43.801400][ T4060] sec_pagetables:0 bounce:0 [ 43.801400][ T4060] kernel_misc_reclaimable:0 [ 43.801400][ T4060] free:1912962 free_pcp:4806 free_cma:0 [ 43.846378][ T4060] Node 0 active_anon:14628kB inactive_anon:0kB active_file:60380kB inactive_file:7588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82756kB dirty:220kB writeback:32kB shmem:1128kB writeback_tmp:0kB kernel_stack:2784kB pagetables:2776kB sec_pagetables:0kB all_unreclaimable? no [ 43.874350][ T4060] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 43.901654][ T4060] lowmem_reserve[]: 0 2866 7844 0 [ 43.907468][ T4060] Node 0 DMA32 free:2950412kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953944kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 43.936185][ T4060] lowmem_reserve[]: 0 0 4978 0 [ 43.941153][ T4060] Node 0 Normal free:4686076kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14860kB inactive_anon:0kB active_file:60380kB inactive_file:7588kB unevictable:0kB writepending:252kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:15084kB local_pcp:8868kB free_cma:0kB [ 43.971445][ T4060] lowmem_reserve[]: 0 0 0 0 [ 43.975978][ T4060] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 43.989088][ T4060] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 5*16kB (M) 5*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950412kB [ 44.005349][ T4060] Node 0 Normal: 601*4kB (UME) 323*8kB (UME) 180*16kB (UME) 392*32kB (ME) 363*64kB (ME) 65*128kB (UME) 38*256kB (UM) 20*512kB (UM) 10*1024kB (UME) 12*2048kB (UM) 1118*4096kB (M) = 4686076kB [ 44.024421][ T4060] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 44.033809][ T4060] 17274 total pagecache pages [ 44.038567][ T4060] 0 pages in swap cache [ 44.042717][ T4060] Free swap = 124460kB [ 44.046956][ T4060] Total swap = 124996kB [ 44.051168][ T4060] 2097051 pages RAM [ 44.054984][ T4060] 0 pages HighMem/MovableOnly [ 44.059789][ T4060] 80173 pages reserved [ 44.106202][ T3993] team0: Port device team_slave_0 added [ 44.112877][ T3993] team0: Port device team_slave_1 added [ 44.150147][ T4079] loop4: detected capacity change from 0 to 512 [ 44.165413][ T3993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.172584][ T3993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.198566][ T3993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.214258][ T4085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4085 comm=syz.0.199 [ 44.225805][ T3993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.234155][ T3993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.241628][ T4079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.260131][ T3993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.286675][ T4079] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.323428][ T3993] hsr_slave_0: entered promiscuous mode [ 44.332248][ T3993] hsr_slave_1: entered promiscuous mode [ 44.345548][ T3993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.362491][ T3993] Cannot create hsr debugfs directory [ 44.426061][ T4095] veth0: entered promiscuous mode [ 44.432991][ T4095] vlan2: entered promiscuous mode [ 44.440282][ T4095] veth0: left promiscuous mode [ 44.470091][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.480053][ T4089] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 44.622089][ T4107] loop1: detected capacity change from 0 to 4096 [ 44.642232][ T4107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.663791][ T3993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.689449][ T4118] loop4: detected capacity change from 0 to 512 [ 44.707277][ T4118] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.719535][ T4118] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 44.729666][ T4118] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.211: Corrupt directory, running e2fsck is recommended [ 44.751263][ T3993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.752430][ T4118] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 44.772671][ T3993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.783467][ T4118] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.211: corrupted in-inode xattr: invalid ea_ino [ 44.808725][ T3993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.820236][ T4118] EXT4-fs (loop4): Remounting filesystem read-only [ 44.850020][ T4118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.877211][ T4118] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 44.903895][ T4118] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.918333][ T3993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.938501][ T3993] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.968966][ T4131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.216'. [ 44.975139][ T4118] netlink: 300 bytes leftover after parsing attributes in process `syz.4.211'. [ 44.978583][ T4131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 45.004500][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.011600][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.025717][ T4132] loop0: detected capacity change from 0 to 256 [ 45.039548][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.046683][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.109964][ T4143] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 45.117668][ T4143] netlink: 76 bytes leftover after parsing attributes in process `syz.0.220'. [ 45.163397][ T4147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.219'. [ 45.196008][ T3993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.241080][ T3603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.290042][ T4163] loop0: detected capacity change from 0 to 128 [ 45.306768][ T4164] vlan2: entered promiscuous mode [ 45.312085][ T4164] dummy0: entered promiscuous mode [ 45.322102][ T4164] team0: Port device vlan2 added [ 45.371340][ T4171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.399807][ T4171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.430946][ T3993] veth0_vlan: entered promiscuous mode [ 45.443133][ T4179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 45.453366][ T3993] veth1_vlan: entered promiscuous mode [ 45.504791][ T3993] veth0_macvtap: entered promiscuous mode [ 45.514430][ T3993] veth1_macvtap: entered promiscuous mode [ 45.537506][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.547967][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.557791][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.568807][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.578631][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.589939][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.602615][ T3993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.614324][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.625438][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.635336][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.646513][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.656356][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.666827][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.680837][ T3993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.691243][ T3993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.700171][ T3993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.709535][ T3993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.718349][ T3993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.803518][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 45.803535][ T29] audit: type=1400 audit(1723924150.441:501): avc: denied { mount } for pid=4186 comm="syz.2.174" name="/" dev="configfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 46.147389][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 46.156327][ T4190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 46.185360][ T29] audit: type=1326 audit(1723924150.840:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 46.230430][ T4195] loop4: detected capacity change from 0 to 256 [ 46.237500][ T29] audit: type=1326 audit(1723924150.840:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 46.260792][ T29] audit: type=1326 audit(1723924150.840:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 46.284176][ T29] audit: type=1326 audit(1723924150.840:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 46.308359][ T29] audit: type=1326 audit(1723924150.840:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 46.332214][ T29] audit: type=1326 audit(1723924150.840:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 46.355449][ T29] audit: type=1326 audit(1723924150.840:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 46.363646][ T4197] netlink: 'syz.3.233': attribute type 49 has an invalid length. [ 46.379448][ T29] audit: type=1400 audit(1723924150.840:509): avc: denied { sqpoll } for pid=4191 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.406103][ T29] audit: type=1326 audit(1723924150.840:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87d9379eb3 code=0x7ffc0000 [ 46.451163][ T4201] netlink: 116 bytes leftover after parsing attributes in process `syz.3.234'. [ 46.564831][ T4208] loop3: detected capacity change from 0 to 512 [ 46.591817][ T4208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.611541][ T4208] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.639405][ T4208] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.236: bg 0: block 248: padding at end of block bitmap is not set [ 46.684423][ T4208] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.236: Failed to acquire dquot type 1 [ 46.724764][ T4208] EXT4-fs (loop3): 1 truncate cleaned up [ 46.734885][ T4214] loop4: detected capacity change from 0 to 164 [ 46.752593][ T4208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.789865][ T4208] syz.3.236 (4208) used greatest stack depth: 9408 bytes left [ 46.833131][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.842716][ T4214] syz.4.238 uses obsolete (PF_INET,SOCK_PACKET) [ 46.880519][ T4219] syz.3.240 (4219): /proc/4218/oom_adj is deprecated, please use /proc/4218/oom_score_adj instead. [ 47.118729][ T4242] FAULT_INJECTION: forcing a failure. [ 47.118729][ T4242] name failslab, interval 1, probability 0, space 0, times 0 [ 47.131439][ T4242] CPU: 1 UID: 0 PID: 4242 Comm: syz.3.251 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 47.142182][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.152265][ T4242] Call Trace: [ 47.155547][ T4242] [ 47.158476][ T4242] dump_stack_lvl+0xf2/0x150 [ 47.163127][ T4242] dump_stack+0x15/0x20 [ 47.167378][ T4242] should_fail_ex+0x229/0x230 [ 47.172061][ T4242] ? __alloc_skb+0x10b/0x310 [ 47.176646][ T4242] should_failslab+0x8f/0xb0 [ 47.181242][ T4242] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 47.187118][ T4242] __alloc_skb+0x10b/0x310 [ 47.191625][ T4242] tipc_nl_compat_dumpit+0xb4/0x400 [ 47.196835][ T4242] ? tipc_nl_compat_recv+0x4a2/0x850 [ 47.202184][ T4242] tipc_nl_compat_recv+0x729/0x850 [ 47.207461][ T4242] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 47.213174][ T4242] ? __pfx_tipc_nl_compat_bearer_dump+0x10/0x10 [ 47.219433][ T4242] genl_rcv_msg+0x61b/0x6c0 [ 47.224049][ T4242] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 47.229693][ T4242] netlink_rcv_skb+0x12c/0x230 [ 47.234508][ T4242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 47.239568][ T4242] genl_rcv+0x28/0x40 [ 47.243559][ T4242] netlink_unicast+0x599/0x670 [ 47.248404][ T4242] netlink_sendmsg+0x5cc/0x6e0 [ 47.253175][ T4242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.258454][ T4242] __sock_sendmsg+0x140/0x180 [ 47.263230][ T4242] ____sys_sendmsg+0x312/0x410 [ 47.268005][ T4242] __sys_sendmsg+0x1e9/0x280 [ 47.272618][ T4242] __x64_sys_sendmsg+0x46/0x50 [ 47.277419][ T4242] x64_sys_call+0x2689/0x2d60 [ 47.282162][ T4242] do_syscall_64+0xc9/0x1c0 [ 47.286682][ T4242] ? clear_bhb_loop+0x55/0xb0 [ 47.291411][ T4242] ? clear_bhb_loop+0x55/0xb0 [ 47.296104][ T4242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.302006][ T4242] RIP: 0033:0x7f87d9379e79 [ 47.306490][ T4242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.326090][ T4242] RSP: 002b:00007f87d7ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.334499][ T4242] RAX: ffffffffffffffda RBX: 00007f87d9515f80 RCX: 00007f87d9379e79 [ 47.342530][ T4242] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000007 [ 47.350491][ T4242] RBP: 00007f87d7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.358563][ T4242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.366584][ T4242] R13: 0000000000000000 R14: 00007f87d9515f80 R15: 00007ffe0cc0a1a8 [ 47.374609][ T4242] [ 47.386655][ T4242] tmpfs: Unknown parameter 'mpktic' [ 47.408572][ T4242] loop3: detected capacity change from 0 to 1024 [ 47.432418][ T4242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.489350][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.516960][ T4259] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 47.559152][ T4259] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 47.663386][ T4286] FAULT_INJECTION: forcing a failure. [ 47.663386][ T4286] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 47.668286][ T4284] __nla_validate_parse: 1 callbacks suppressed [ 47.668300][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 47.676761][ T4286] CPU: 0 UID: 0 PID: 4286 Comm: syz.3.265 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 47.702447][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.712607][ T4286] Call Trace: [ 47.712615][ T4286] [ 47.712658][ T4286] dump_stack_lvl+0xf2/0x150 [ 47.712698][ T4286] dump_stack+0x15/0x20 [ 47.712794][ T4286] should_fail_ex+0x229/0x230 [ 47.712908][ T4286] should_fail_alloc_page+0xfd/0x110 [ 47.712989][ T4286] __alloc_pages_noprof+0x109/0x360 [ 47.713049][ T4286] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 47.713075][ T4286] alloc_pages_noprof+0xe1/0x100 [ 47.713101][ T4286] pte_alloc_one+0x32/0xf0 [ 47.713162][ T4286] __pte_alloc+0x33/0x270 [ 47.713219][ T4286] handle_mm_fault+0x19e3/0x2940 [ 47.713246][ T4286] exc_page_fault+0x296/0x650 [ 47.713277][ T4286] asm_exc_page_fault+0x26/0x30 [ 47.713411][ T4286] RIP: 0010:iovec_from_user+0xf1/0x210 [ 47.713447][ T4286] Code: 48 89 df 4c 89 e6 e8 ce 06 75 ff 4c 01 e5 0f 88 d5 00 00 00 4c 39 e5 0f 82 cc 00 00 00 0f 01 cb 0f ae e8 49 ff ce 4c 8b 2c 24 <49> 8b 5c 24 08 49 8b 2c 24 31 ff 48 89 de e8 1c 09 75 ff 48 85 db [ 47.713475][ T4286] RSP: 0018:ffffc9000133fce8 EFLAGS: 00050202 [ 47.713495][ T4286] RAX: 0000000000000000 RBX: 0000000020002320 RCX: ffff88810471a100 [ 47.713511][ T4286] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000020002320 [ 47.713603][ T4286] RBP: 0000000020002320 R08: ffffffff81b9fb22 R09: 00000000ffffffff [ 47.713678][ T4286] R10: 0001ffffffffffff R11: 0000000000000003 R12: 0000000020000000 [ 47.713690][ T4286] R13: ffff888112838000 R14: 0000000000000231 R15: ffffc9000133fe20 [ 47.713707][ T4286] ? iovec_from_user+0xd2/0x210 [ 47.713748][ T4286] ? iovec_from_user+0xd2/0x210 [ 47.713782][ T4286] __import_iovec+0xd8/0x520 [ 47.713845][ T4286] import_iovec+0xbc/0xd0 [ 47.713885][ T4286] __se_sys_keyctl+0x621/0xbb0 [ 47.713919][ T4286] __x64_sys_keyctl+0x67/0x80 [ 47.714020][ T4286] x64_sys_call+0x971/0x2d60 [ 47.714049][ T4286] do_syscall_64+0xc9/0x1c0 [ 47.714128][ T4286] ? clear_bhb_loop+0x55/0xb0 [ 47.714162][ T4286] ? clear_bhb_loop+0x55/0xb0 [ 47.714191][ T4286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.714275][ T4286] RIP: 0033:0x7f87d9379e79 [ 47.714288][ T4286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.714305][ T4286] RSP: 002b:00007f87d7ff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 47.714327][ T4286] RAX: ffffffffffffffda RBX: 00007f87d9515f80 RCX: 00007f87d9379e79 [ 47.714342][ T4286] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000014 [ 47.714357][ T4286] RBP: 00007f87d7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.714369][ T4286] R10: 1000000000000232 R11: 0000000000000246 R12: 0000000000000001 [ 47.714381][ T4286] R13: 0000000000000001 R14: 00007f87d9515f80 R15: 00007ffe0cc0a1a8 [ 47.714398][ T4286] [ 47.754992][ T4292] netlink: 108 bytes leftover after parsing attributes in process `syz.3.268'. [ 48.037598][ T4297] loop1: detected capacity change from 0 to 2048 [ 48.043058][ T4299] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 48.053807][ T4299] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 48.071944][ T4297] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.269: bad orphan inode 8192 [ 48.104199][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.119104][ T4306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4306 comm=syz.3.273 [ 48.143637][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 48.153534][ T4297] bridge_slave_1: left allmulticast mode [ 48.159257][ T4297] bridge_slave_1: left promiscuous mode [ 48.164979][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.173239][ T4297] bridge_slave_0: left allmulticast mode [ 48.178882][ T4297] bridge_slave_0: left promiscuous mode [ 48.184808][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.195131][ T4315] process 'syz.1.269' launched './file1' with NULL argv: empty string added [ 48.254923][ T4317] loop0: detected capacity change from 0 to 512 [ 48.269893][ T4317] ext4: Unknown parameter 'obj_type' [ 48.314511][ T4317] netlink: 'syz.0.275': attribute type 21 has an invalid length. [ 48.324879][ T4317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.275'. [ 48.344169][ T4321] loop0: detected capacity change from 0 to 512 [ 48.358983][ T4321] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.275: bad orphan inode 15 [ 48.371040][ T4321] ext4_test_bit(bit=14, block=5) = 0 [ 48.376724][ T4321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.394617][ T4325] loop3: detected capacity change from 0 to 128 [ 48.408047][ T4325] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.421637][ T4325] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.828960][ T3603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.850501][ T4329] netlink: 104 bytes leftover after parsing attributes in process `syz.1.278'. [ 48.976443][ T4337] FAULT_INJECTION: forcing a failure. [ 48.976443][ T4337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.989517][ T4337] CPU: 0 UID: 0 PID: 4337 Comm: syz.1.282 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 49.000119][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 49.010160][ T4337] Call Trace: [ 49.013452][ T4337] [ 49.016371][ T4337] dump_stack_lvl+0xf2/0x150 [ 49.020961][ T4337] dump_stack+0x15/0x20 [ 49.025156][ T4337] should_fail_ex+0x229/0x230 [ 49.029848][ T4337] should_fail+0xb/0x10 [ 49.034209][ T4337] should_fail_usercopy+0x1a/0x20 [ 49.039239][ T4337] _copy_from_user+0x1e/0xd0 [ 49.043831][ T4337] ____sys_sendmsg+0x1a4/0x410 [ 49.048670][ T4337] __sys_sendmmsg+0x269/0x500 [ 49.053403][ T4337] __x64_sys_sendmmsg+0x57/0x70 [ 49.058385][ T4337] x64_sys_call+0xa49/0x2d60 [ 49.063047][ T4337] do_syscall_64+0xc9/0x1c0 [ 49.067572][ T4337] ? clear_bhb_loop+0x55/0xb0 [ 49.072249][ T4337] ? clear_bhb_loop+0x55/0xb0 [ 49.076967][ T4337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.082921][ T4337] RIP: 0033:0x7f8a94539e79 [ 49.087320][ T4337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.107123][ T4337] RSP: 002b:00007f8a931b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 49.115532][ T4337] RAX: ffffffffffffffda RBX: 00007f8a946d5f80 RCX: 00007f8a94539e79 [ 49.123578][ T4337] RDX: 0000000000000004 RSI: 0000000020005b40 RDI: 0000000000000004 [ 49.131546][ T4337] RBP: 00007f8a931b1090 R08: 0000000000000000 R09: 0000000000000000 [ 49.139694][ T4337] R10: 000000000000c080 R11: 0000000000000246 R12: 0000000000000001 [ 49.147658][ T4337] R13: 0000000000000000 R14: 00007f8a946d5f80 R15: 00007ffef73a3408 [ 49.155660][ T4337] [ 49.235379][ T3257] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.257575][ T4351] loop3: detected capacity change from 0 to 256 [ 49.286677][ T4351] FAT-fs (loop3): Directory bread(block 64) failed [ 49.293611][ T4351] FAT-fs (loop3): Directory bread(block 65) failed [ 49.300147][ T4351] FAT-fs (loop3): Directory bread(block 66) failed [ 49.307946][ T4351] FAT-fs (loop3): Directory bread(block 67) failed [ 49.316800][ T4351] FAT-fs (loop3): Directory bread(block 68) failed [ 49.317885][ T4357] netlink: 46 bytes leftover after parsing attributes in process `syz.1.292'. [ 49.323709][ T4351] FAT-fs (loop3): Directory bread(block 69) failed [ 49.339241][ T4351] FAT-fs (loop3): Directory bread(block 70) failed [ 49.346641][ T4351] FAT-fs (loop3): Directory bread(block 71) failed [ 49.353575][ T4351] FAT-fs (loop3): Directory bread(block 72) failed [ 49.356505][ T4358] FAULT_INJECTION: forcing a failure. [ 49.356505][ T4358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.360093][ T4351] FAT-fs (loop3): Directory bread(block 73) failed [ 49.373138][ T4358] CPU: 0 UID: 0 PID: 4358 Comm: syz.2.291 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 49.373200][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 49.373214][ T4358] Call Trace: [ 49.373222][ T4358] [ 49.373230][ T4358] dump_stack_lvl+0xf2/0x150 [ 49.373271][ T4358] dump_stack+0x15/0x20 [ 49.373383][ T4358] should_fail_ex+0x229/0x230 [ 49.373479][ T4358] should_fail+0xb/0x10 [ 49.373512][ T4358] should_fail_usercopy+0x1a/0x20 [ 49.373552][ T4358] _copy_to_user+0x1e/0xa0 [ 49.373642][ T4358] simple_read_from_buffer+0xa0/0x110 [ 49.373674][ T4358] proc_fail_nth_read+0xff/0x140 [ 49.373708][ T4358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.373741][ T4358] vfs_read+0x1a2/0x6e0 [ 49.373785][ T4358] ? __rcu_read_unlock+0x4e/0x70 [ 49.373809][ T4358] ? __fget_files+0x1da/0x210 [ 49.463730][ T4358] ksys_read+0xeb/0x1b0 [ 49.467910][ T4358] __x64_sys_read+0x42/0x50 [ 49.472419][ T4358] x64_sys_call+0x27d3/0x2d60 [ 49.477138][ T4358] do_syscall_64+0xc9/0x1c0 [ 49.481646][ T4358] ? clear_bhb_loop+0x55/0xb0 [ 49.486323][ T4358] ? clear_bhb_loop+0x55/0xb0 [ 49.491018][ T4358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.496923][ T4358] RIP: 0033:0x7fa435da88bc [ 49.501328][ T4358] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 49.520942][ T4358] RSP: 002b:00007fa434a06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.529348][ T4358] RAX: ffffffffffffffda RBX: 00007fa435f46058 RCX: 00007fa435da88bc [ 49.537332][ T4358] RDX: 000000000000000f RSI: 00007fa434a060a0 RDI: 0000000000000005 [ 49.545342][ T4358] RBP: 00007fa434a06090 R08: 0000000000000000 R09: 0000000000000000 [ 49.553319][ T4358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.561396][ T4358] R13: 0000000000000001 R14: 00007fa435f46058 R15: 00007ffde8edec08 [ 49.569371][ T4358] [ 49.652788][ T4367] sctp: [Deprecated]: syz.3.294 (pid 4367) Use of int in max_burst socket option. [ 49.652788][ T4367] Use struct sctp_assoc_value instead [ 49.718231][ T4373] loop2: detected capacity change from 0 to 512 [ 49.751549][ T4373] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.777145][ T4373] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.298: iget: bad extended attribute block 19 [ 49.793896][ T4373] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.298: couldn't read orphan inode 15 (err -117) [ 49.815875][ T4373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.831516][ T4382] loop1: detected capacity change from 0 to 128 [ 49.867516][ T3993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.951601][ T4389] netlink: 'syz.2.302': attribute type 10 has an invalid length. [ 49.987287][ T4389] team0: Port device netdevsim1 added [ 50.290728][ T4401] xt_socket: unknown flags 0x2 [ 50.356020][ T4407] loop2: detected capacity change from 0 to 1024 [ 50.363180][ T4407] EXT4-fs: Ignoring removed nobh option [ 50.372191][ T4407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.393854][ T3268] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 4 with error 28 [ 50.406992][ T3268] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.406992][ T3268] [ 50.416679][ T3268] EXT4-fs (loop2): Total free blocks count 0 [ 50.422687][ T3268] EXT4-fs (loop2): Free/Dirty block details [ 50.429258][ T3268] EXT4-fs (loop2): free_blocks=0 [ 50.434183][ T3268] EXT4-fs (loop2): dirty_blocks=0 [ 50.439236][ T3268] EXT4-fs (loop2): Block reservation details [ 50.445246][ T3268] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 50.452685][ T3993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.535532][ T4251] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 50.566449][ T4415] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 50.643373][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 50.657495][ T4430] loop2: detected capacity change from 0 to 256 [ 50.671980][ T4430] msdos: Bad value for 'umask' [ 50.688469][ T4427] veth0: entered promiscuous mode [ 50.693734][ T4427] vlan2: entered promiscuous mode [ 50.703652][ T4427] veth0: left promiscuous mode [ 50.861368][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 50.861381][ T29] audit: type=1400 audit(1723924155.745:607): avc: denied { write } for pid=4438 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.905799][ T4442] loop2: detected capacity change from 0 to 1024 [ 50.917222][ T4443] loop3: detected capacity change from 0 to 512 [ 50.923862][ T4443] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.930318][ T4443] EXT4-fs: quotafile must be on filesystem root [ 50.970812][ T29] audit: type=1400 audit(1723924155.776:608): avc: denied { getopt } for pid=4438 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.994119][ T4442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.018694][ T29] audit: type=1400 audit(1723924155.892:609): avc: denied { wake_alarm } for pid=4438 comm="syz.3.324" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.046687][ T4442] FAULT_INJECTION: forcing a failure. [ 51.046687][ T4442] name failslab, interval 1, probability 0, space 0, times 0 [ 51.060004][ T4442] CPU: 1 UID: 0 PID: 4442 Comm: syz.2.325 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 51.070589][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 51.080710][ T4442] Call Trace: [ 51.083991][ T4442] [ 51.087008][ T4442] dump_stack_lvl+0xf2/0x150 [ 51.091624][ T4442] dump_stack+0x15/0x20 [ 51.095837][ T4442] should_fail_ex+0x229/0x230 [ 51.100537][ T4442] ? ext4_alloc_inode+0x38/0x320 [ 51.105594][ T4442] should_failslab+0x8f/0xb0 [ 51.110202][ T4442] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 51.116036][ T4442] ext4_alloc_inode+0x38/0x320 [ 51.120845][ T4442] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 51.126239][ T4442] alloc_inode+0x3c/0x160 [ 51.130615][ T4442] iget_locked+0x10a/0x490 [ 51.135063][ T4442] __ext4_iget+0x17c/0x1e70 [ 51.139658][ T4442] ? d_alloc_parallel+0xbfe/0xc80 [ 51.142070][ T29] audit: type=1326 audit(1723924155.934:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435da9e79 code=0x7ffc0000 [ 51.144846][ T4442] ext4_lookup+0x15b/0x390 [ 51.168074][ T29] audit: type=1326 audit(1723924155.944:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa435da8810 code=0x7ffc0000 [ 51.172468][ T4442] __lookup_slow+0x184/0x250 [ 51.195662][ T29] audit: type=1326 audit(1723924155.944:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa435da895f code=0x7ffc0000 [ 51.195690][ T29] audit: type=1326 audit(1723924155.944:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fa435da9e79 code=0x7ffc0000 [ 51.200269][ T4442] lookup_slow+0x3c/0x60 [ 51.250844][ T4442] walk_component+0x1f5/0x230 [ 51.255689][ T4442] ? path_lookupat+0xfd/0x2b0 [ 51.260389][ T4442] path_lookupat+0x10a/0x2b0 [ 51.265073][ T4442] filename_lookup+0x127/0x300 [ 51.269878][ T4442] user_path_at+0x3c/0x110 [ 51.274389][ T4442] path_removexattr+0xc5/0x290 [ 51.279240][ T4442] __x64_sys_lremovexattr+0x33/0x40 [ 51.284460][ T4442] x64_sys_call+0x1bbe/0x2d60 [ 51.289239][ T4442] do_syscall_64+0xc9/0x1c0 [ 51.293798][ T4442] ? clear_bhb_loop+0x55/0xb0 [ 51.298502][ T4442] ? clear_bhb_loop+0x55/0xb0 [ 51.303289][ T4442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.309215][ T4442] RIP: 0033:0x7fa435da9e79 [ 51.313641][ T4442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.333269][ T4442] RSP: 002b:00007fa434a27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 51.341723][ T4442] RAX: ffffffffffffffda RBX: 00007fa435f45f80 RCX: 00007fa435da9e79 [ 51.350907][ T4442] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000000 [ 51.358919][ T4442] RBP: 00007fa434a27090 R08: 0000000000000000 R09: 0000000000000000 [ 51.366942][ T4442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.374939][ T4442] R13: 0000000000000000 R14: 00007fa435f45f80 R15: 00007ffde8edec08 [ 51.382994][ T4442] [ 51.394249][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.416619][ T29] audit: type=1326 audit(1723924156.312:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa435da88bc code=0x7ffc0000 [ 51.439818][ T29] audit: type=1326 audit(1723924156.312:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa435da895f code=0x7ffc0000 [ 51.462915][ T29] audit: type=1326 audit(1723924156.312:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa435da8b0a code=0x7ffc0000 [ 51.507382][ T3993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.573351][ T4459] Illegal XDP return value 4294967274 on prog (id 76) dev N/A, expect packet loss! [ 51.642803][ T4464] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 51.752434][ T11] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 51.934585][ T4486] veth0_vlan: left promiscuous mode [ 51.940307][ T4486] veth0_vlan: entered promiscuous mode [ 52.150585][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.194321][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.231255][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.268323][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.312721][ T4491] chnl_net:caif_netlink_parms(): no params data found [ 52.351416][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.358611][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.365996][ T4491] bridge_slave_0: entered allmulticast mode [ 52.372334][ T4491] bridge_slave_0: entered promiscuous mode [ 52.379202][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.386337][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.393881][ T4491] bridge_slave_1: entered allmulticast mode [ 52.400460][ T4491] bridge_slave_1: entered promiscuous mode [ 52.426665][ T4506] vlan2: entered promiscuous mode [ 52.433151][ T4506] dummy0: entered promiscuous mode [ 52.440460][ T4506] team0: Port device vlan2 added [ 52.470070][ T4491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.484268][ T4491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.501571][ T41] bridge_slave_1: left allmulticast mode [ 52.507341][ T41] bridge_slave_1: left promiscuous mode [ 52.513050][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.562369][ T41] bridge_slave_0: left allmulticast mode [ 52.568090][ T41] bridge_slave_0: left promiscuous mode [ 52.573589][ T4513] loop2: detected capacity change from 0 to 128 [ 52.573845][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.593405][ T4510] loop3: detected capacity change from 0 to 512 [ 52.602671][ T4510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 52.630901][ T4518] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 52.650733][ T4518] SELinux: failed to load policy [ 52.686976][ T4513] syz.2.345: attempt to access beyond end of device [ 52.686976][ T4513] loop2: rw=2049, sector=260, nr_sectors = 104 limit=128 [ 52.706596][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.718046][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.725122][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.740197][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.756627][ T41] bond0 (unregistering): Released all slaves [ 52.782647][ T4524] sctp: [Deprecated]: syz.3.347 (pid 4524) Use of int in max_burst socket option. [ 52.782647][ T4524] Use struct sctp_assoc_value instead [ 52.800895][ T4525] sctp: [Deprecated]: syz.3.347 (pid 4525) Use of int in max_burst socket option. [ 52.800895][ T4525] Use struct sctp_assoc_value instead [ 52.801431][ T4491] team0: Port device team_slave_0 added [ 52.830127][ T4491] team0: Port device team_slave_1 added [ 52.840741][ T41] hsr_slave_0: left promiscuous mode [ 52.848214][ T41] hsr_slave_1: left promiscuous mode [ 52.853992][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.861429][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.871655][ T4524] loop3: detected capacity change from 0 to 2048 [ 52.881885][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.889404][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.899797][ T41] veth1_macvtap: left promiscuous mode [ 52.905480][ T41] veth0_macvtap: left promiscuous mode [ 52.910970][ T41] veth1_vlan: left promiscuous mode [ 52.916409][ T41] veth0_vlan: left promiscuous mode [ 52.916820][ T4524] loop3: p3 < > p4 < > [ 52.926013][ T4524] loop3: partition table partially beyond EOD, truncated [ 52.933887][ T4524] loop3: p3 start 4284289 is beyond EOD, truncated [ 52.943202][ T2959] loop3: p3 < > p4 < > [ 52.947369][ T2959] loop3: partition table partially beyond EOD, truncated [ 52.954763][ T2959] loop3: p3 start 4284289 is beyond EOD, truncated [ 52.978069][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.347'. [ 52.987057][ T4524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.347'. [ 52.998275][ T4525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.347'. [ 53.035259][ T41] team0 (unregistering): Port device team_slave_1 removed [ 53.045705][ T41] team0 (unregistering): Port device team_slave_0 removed [ 53.088672][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 53.102824][ T4534] ip6erspan0: entered promiscuous mode [ 53.118363][ T4491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.125332][ T4491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.151809][ T4491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.172315][ T4491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.179341][ T4491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.206177][ T4491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.285953][ T4491] hsr_slave_0: entered promiscuous mode [ 53.292525][ T4491] hsr_slave_1: entered promiscuous mode [ 53.300562][ T4491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.308228][ T4491] Cannot create hsr debugfs directory [ 53.375444][ T4568] loop3: detected capacity change from 0 to 1024 [ 53.383727][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 53.392643][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 53.440650][ T4568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.462065][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 53.470923][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 53.494301][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 53.522880][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.550864][ T4579] loop1: detected capacity change from 0 to 256 [ 53.611005][ T4582] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 53.621868][ T4582] FAT-fs (loop1): Filesystem has been set read-only [ 53.632603][ T4585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.366'. [ 53.633693][ T4582] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 53.652769][ T4579] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 53.663783][ T4579] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 53.684125][ T3603] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 53.692756][ T3603] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 53.741539][ T3284] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 54.108468][ T3284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.135798][ T3284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.204903][ T3284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.278900][ T3284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.302396][ T4603] chnl_net:caif_netlink_parms(): no params data found [ 54.369156][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.376313][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.401941][ T4603] bridge_slave_0: entered allmulticast mode [ 54.415184][ T4603] bridge_slave_0: entered promiscuous mode [ 54.431268][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.439254][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.449788][ T4603] bridge_slave_1: entered allmulticast mode [ 54.462796][ T4603] bridge_slave_1: entered promiscuous mode [ 54.495973][ T4491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.524589][ T4603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.534517][ T4491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.543252][ T4491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.557811][ T4603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.570331][ T4491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.575066][ T4618] loop3: detected capacity change from 0 to 8192 [ 54.651459][ T3284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.662749][ T3284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.673833][ T3284] bond0 (unregistering): Released all slaves [ 54.683702][ T4603] team0: Port device team_slave_0 added [ 54.690422][ T4603] team0: Port device team_slave_1 added [ 54.696899][ T4623] netlink: 'syz.3.372': attribute type 17 has an invalid length. [ 54.744289][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.751336][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.778173][ T4603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.812886][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.819918][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.846564][ T4603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.867950][ T4491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.887720][ T4603] hsr_slave_0: entered promiscuous mode [ 54.893866][ T4603] hsr_slave_1: entered promiscuous mode [ 54.896109][ T4632] loop2: detected capacity change from 0 to 512 [ 54.905753][ T4603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.914585][ T4632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.918280][ T4603] Cannot create hsr debugfs directory [ 54.929079][ T4632] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.937100][ T3284] hsr_slave_0: left promiscuous mode [ 54.950239][ T4632] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.377: bg 0: block 248: padding at end of block bitmap is not set [ 54.965310][ T4632] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.377: Failed to acquire dquot type 1 [ 54.978538][ T3284] hsr_slave_1: left promiscuous mode [ 54.985009][ T4632] EXT4-fs (loop2): 1 truncate cleaned up [ 54.989667][ T3284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.998112][ T3284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.007016][ T3284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.014572][ T3284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.022291][ T4632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.038603][ T3284] dummy0: left promiscuous mode [ 55.043722][ T3284] veth1_macvtap: left promiscuous mode [ 55.049273][ T3284] veth0_macvtap: left promiscuous mode [ 55.063545][ T3993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.105476][ T4646] FAULT_INJECTION: forcing a failure. [ 55.105476][ T4646] name failslab, interval 1, probability 0, space 0, times 0 [ 55.118169][ T4646] CPU: 1 UID: 0 PID: 4646 Comm: syz.3.381 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 55.128859][ T4646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.138924][ T4646] Call Trace: [ 55.142301][ T4646] [ 55.145357][ T4646] dump_stack_lvl+0xf2/0x150 [ 55.149953][ T4646] dump_stack+0x15/0x20 [ 55.154235][ T4646] should_fail_ex+0x229/0x230 [ 55.158921][ T4646] ? snd_seq_pool_new+0x32/0xd0 [ 55.163042][ T3268] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 55.163762][ T4646] should_failslab+0x8f/0xb0 [ 55.174592][ T4646] __kmalloc_cache_noprof+0x4b/0x2a0 [ 55.174679][ T4646] snd_seq_pool_new+0x32/0xd0 [ 55.174703][ T4646] snd_seq_fifo_resize+0x4c/0x1d0 [ 55.174790][ T4646] snd_seq_ioctl_set_client_pool+0x23f/0x4b0 [ 55.174817][ T4646] snd_seq_ioctl+0x16f/0x2a0 [ 55.174846][ T4646] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 55.174871][ T4646] __se_sys_ioctl+0xd3/0x150 [ 55.174951][ T4646] __x64_sys_ioctl+0x43/0x50 [ 55.174980][ T4646] x64_sys_call+0x15cc/0x2d60 [ 55.175008][ T4646] do_syscall_64+0xc9/0x1c0 [ 55.175051][ T4646] ? clear_bhb_loop+0x55/0xb0 [ 55.175087][ T4646] ? clear_bhb_loop+0x55/0xb0 [ 55.175116][ T4646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.175172][ T4646] RIP: 0033:0x7f87d9379e79 [ 55.175188][ T4646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.175208][ T4646] RSP: 002b:00007f87d7ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.175293][ T4646] RAX: ffffffffffffffda RBX: 00007f87d9515f80 RCX: 00007f87d9379e79 [ 55.175308][ T4646] RDX: 0000000020000040 RSI: 000000004058534c RDI: 0000000000000004 [ 55.175401][ T4646] RBP: 00007f87d7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.175417][ T4646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.175508][ T4646] R13: 0000000000000000 R14: 00007f87d9515f80 R15: 00007ffe0cc0a1a8 [ 55.175530][ T4646] [ 55.190108][ T3284] team0 (unregistering): Port device vlan2 removed [ 55.353554][ T4651] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 55.366042][ T3284] team0 (unregistering): Port device team_slave_1 removed [ 55.377099][ T3284] team0 (unregistering): Port device team_slave_0 removed [ 55.452864][ T4491] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.471198][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.478313][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.489056][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.496292][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.534481][ T4661] loop3: detected capacity change from 0 to 512 [ 55.540977][ T4661] EXT4-fs: Ignoring removed bh option [ 55.552664][ T4661] EXT4-fs error (device loop3): __ext4_iget:4985: inode #15: block 1803188595: comm syz.3.387: invalid block [ 55.565312][ T4661] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.387: couldn't read orphan inode 15 (err -117) [ 55.577955][ T4661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.603120][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.619535][ T4491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.692711][ T4491] veth0_vlan: entered promiscuous mode [ 55.700600][ T4679] tmpfs: Unknown parameter 'mpktic' [ 55.700882][ T4491] veth1_vlan: entered promiscuous mode [ 55.712787][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 55.712799][ T29] audit: type=1326 audit(1723924160.842:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 55.719270][ T4679] loop3: detected capacity change from 0 to 1024 [ 55.742374][ T29] audit: type=1326 audit(1723924160.842:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 55.742408][ T29] audit: type=1326 audit(1723924160.842:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 55.742515][ T29] audit: type=1326 audit(1723924160.842:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 55.742544][ T29] audit: type=1326 audit(1723924160.842:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 55.742689][ T29] audit: type=1326 audit(1723924160.842:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f87d9379e79 code=0x7ffc0000 [ 55.742777][ T29] audit: type=1326 audit(1723924160.842:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87d9379eb3 code=0x7ffc0000 [ 55.754110][ T4491] veth0_macvtap: entered promiscuous mode [ 55.799545][ T29] audit: type=1326 audit(1723924160.842:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87d937895f code=0x7ffc0000 [ 55.833562][ T4679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.842780][ T29] audit: type=1326 audit(1723924160.842:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f87d9379f07 code=0x7ffc0000 [ 55.842814][ T29] audit: type=1326 audit(1723924160.842:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4671 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87d9378810 code=0x7ffc0000 [ 55.986438][ T4491] veth1_macvtap: entered promiscuous mode [ 55.999047][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.010420][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.020373][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.030903][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.042384][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.064496][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.074984][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.084787][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.095240][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.108764][ T4679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.119134][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.150885][ T4603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.169145][ T4491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.178021][ T4491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.186981][ T4491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.195852][ T4491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.212501][ T4603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.224095][ T4603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.234995][ T4603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.258613][ T4686] tmpfs: Unknown parameter 'mpktic' [ 56.297737][ T4686] loop3: detected capacity change from 0 to 1024 [ 56.324940][ T4686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.330984][ T4603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.352699][ T4603] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.362322][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.369538][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.397489][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.404652][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.445692][ T4603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.448218][ T4682] loop2: detected capacity change from 0 to 512 [ 56.456775][ T4603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.488910][ T4686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.531394][ T4706] FAULT_INJECTION: forcing a failure. [ 56.531394][ T4706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.544657][ T4706] CPU: 1 UID: 0 PID: 4706 Comm: syz.3.396 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 56.555290][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.565396][ T4706] Call Trace: [ 56.568691][ T4706] [ 56.571636][ T4706] dump_stack_lvl+0xf2/0x150 [ 56.573187][ T4682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.576253][ T4706] dump_stack+0x15/0x20 [ 56.576336][ T4706] should_fail_ex+0x229/0x230 [ 56.576374][ T4706] should_fail+0xb/0x10 [ 56.576409][ T4706] should_fail_usercopy+0x1a/0x20 [ 56.576491][ T4706] _copy_to_user+0x1e/0xa0 [ 56.592641][ T4682] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.593055][ T4706] simple_read_from_buffer+0xa0/0x110 [ 56.627074][ T4706] proc_fail_nth_read+0xff/0x140 [ 56.627106][ T4706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.627133][ T4706] vfs_read+0x1a2/0x6e0 [ 56.627196][ T4706] ? __rcu_read_unlock+0x4e/0x70 [ 56.627277][ T4706] ? __fget_files+0x1da/0x210 [ 56.627390][ T4706] ksys_read+0xeb/0x1b0 [ 56.627442][ T4706] __x64_sys_read+0x42/0x50 [ 56.627522][ T4706] x64_sys_call+0x27d3/0x2d60 [ 56.627623][ T4706] do_syscall_64+0xc9/0x1c0 [ 56.627659][ T4706] ? clear_bhb_loop+0x55/0xb0 [ 56.627694][ T4706] ? clear_bhb_loop+0x55/0xb0 [ 56.627798][ T4706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.627828][ T4706] RIP: 0033:0x7f87d93788bc [ 56.627894][ T4706] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 56.627915][ T4706] RSP: 002b:00007f87d7ff7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.627938][ T4706] RAX: ffffffffffffffda RBX: 00007f87d9515f80 RCX: 00007f87d93788bc [ 56.627966][ T4706] RDX: 000000000000000f RSI: 00007f87d7ff70a0 RDI: 0000000000000003 [ 56.627977][ T4706] RBP: 00007f87d7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.627988][ T4706] R10: 1000000000000232 R11: 0000000000000246 R12: 0000000000000001 [ 56.627999][ T4706] R13: 0000000000000001 R14: 00007f87d9515f80 R15: 00007ffe0cc0a1a8 [ 56.628076][ T4706] [ 56.668582][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.798933][ T4603] veth0_vlan: entered promiscuous mode [ 56.805458][ T4603] veth1_vlan: entered promiscuous mode [ 56.917022][ T4603] veth0_macvtap: entered promiscuous mode [ 56.927291][ T4603] veth1_macvtap: entered promiscuous mode [ 56.939218][ T4732] team0: Device ip6gre1 is of different type [ 56.958732][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.969260][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.979127][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.989642][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.999465][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.010304][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.022477][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.032817][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.043509][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.053397][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.063848][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.073689][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.084117][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.095793][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.109081][ T4603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.117946][ T4603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.125904][ T4734] loop0: detected capacity change from 0 to 512 [ 57.126676][ T4603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.141564][ T4603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.182708][ T4734] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.402: casefold flag without casefold feature [ 57.197212][ T4734] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.402: couldn't read orphan inode 15 (err -117) [ 57.218774][ T4734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.550514][ T4762] ebtables: ebtables: counters copy to user failed while replacing table [ 57.566945][ T4738] chnl_net:caif_netlink_parms(): no params data found [ 57.682041][ T4771] xt_socket: unknown flags 0x2 [ 57.817163][ T41] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 57.829707][ T4778] __nla_validate_parse: 4 callbacks suppressed [ 57.829719][ T4778] netlink: 92 bytes leftover after parsing attributes in process `syz.1.411'. [ 57.890960][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.898646][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.908686][ T4738] bridge_slave_0: entered allmulticast mode [ 57.915240][ T4738] bridge_slave_0: entered promiscuous mode [ 57.945622][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.952875][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.965942][ T4738] bridge_slave_1: entered allmulticast mode [ 57.977281][ T4738] bridge_slave_1: entered promiscuous mode [ 58.003270][ T4738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.015414][ T4738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.035817][ T4738] team0: Port device team_slave_0 added [ 58.042505][ T4738] team0: Port device team_slave_1 added [ 58.058756][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.065752][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.091669][ T4738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.106203][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.113154][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.139735][ T4738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.172303][ T4738] hsr_slave_0: entered promiscuous mode [ 58.178535][ T4738] hsr_slave_1: entered promiscuous mode [ 58.190583][ T4738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.198156][ T4738] Cannot create hsr debugfs directory [ 58.258701][ T4738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.297996][ T4738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.345097][ T4738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.393379][ T4738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.520607][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 58.525889][ T4738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.555974][ T4738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.571598][ T4738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.582195][ T4738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.603883][ T4807] loop3: detected capacity change from 0 to 256 [ 58.634220][ T4811] loop2: detected capacity change from 0 to 512 [ 58.650885][ T4811] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.672091][ T4807] FAT-fs (loop3): Directory bread(block 64) failed [ 58.680886][ T4807] FAT-fs (loop3): Directory bread(block 65) failed [ 58.683887][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.698019][ T4807] FAT-fs (loop3): Directory bread(block 66) failed [ 58.701265][ T4738] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.715957][ T4811] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.422: iget: bad extended attribute block 19 [ 58.731244][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.732922][ T4811] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.422: couldn't read orphan inode 15 (err -117) [ 58.738336][ T3268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.750784][ T4807] FAT-fs (loop3): Directory bread(block 67) failed [ 58.759414][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.766938][ T4807] FAT-fs (loop3): Directory bread(block 68) failed [ 58.770788][ T3268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.789048][ T4807] FAT-fs (loop3): Directory bread(block 69) failed [ 58.796158][ T4807] FAT-fs (loop3): Directory bread(block 70) failed [ 58.814165][ T4807] FAT-fs (loop3): Directory bread(block 71) failed [ 58.821344][ T4807] FAT-fs (loop3): Directory bread(block 72) failed [ 58.824943][ T4818] loop1: detected capacity change from 0 to 512 [ 58.834697][ T4807] FAT-fs (loop3): Directory bread(block 73) failed [ 58.846695][ T4818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.865879][ T4818] EXT4-fs (loop1): 1 truncate cleaned up [ 58.908699][ T4738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.060816][ T4844] loop3: detected capacity change from 0 to 512 [ 59.088409][ T4833] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 59.161056][ T4856] tmpfs: Unknown parameter 'nr&²á5Q‰ôí_blocks' [ 59.213769][ T4858] loop3: detected capacity change from 0 to 4096 [ 59.235199][ T4738] veth0_vlan: entered promiscuous mode [ 59.247388][ T4856] xt_NFQUEUE: number of queues (65530) out of range (got 66985) [ 59.260459][ T4738] veth1_vlan: entered promiscuous mode [ 59.299983][ T4738] veth0_macvtap: entered promiscuous mode [ 59.309434][ T4738] veth1_macvtap: entered promiscuous mode [ 59.321409][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.331884][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.341763][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.352274][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.362791][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.363018][ T3351] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 59.373220][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.373236][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.373249][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.392065][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.421097][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.432062][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.441884][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.452702][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.463409][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.473863][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.483703][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.494793][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.505960][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.516480][ T4738] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.526047][ T4738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.534781][ T4738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.543563][ T4738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.651804][ T4884] 9pnet_fd: Insufficient options for proto=fd [ 59.662245][ T4884] loop2: detected capacity change from 0 to 512 [ 59.687101][ T4884] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.160589][ T4895] xt_socket: unknown flags 0x2 [ 60.219062][ T4907] loop2: detected capacity change from 0 to 1024 [ 60.219159][ T4893] netlink: 'syz.3.441': attribute type 4 has an invalid length. [ 60.234242][ T4908] netlink: 'syz.3.441': attribute type 4 has an invalid length. [ 60.243795][ T4907] EXT4-fs: Ignoring removed nobh option [ 60.290457][ T3351] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 4 with error 28 [ 60.302785][ T3351] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.302785][ T3351] [ 60.312452][ T3351] EXT4-fs (loop2): Total free blocks count 0 [ 60.318498][ T3351] EXT4-fs (loop2): Free/Dirty block details [ 60.324427][ T3351] EXT4-fs (loop2): free_blocks=0 [ 60.329398][ T3351] EXT4-fs (loop2): dirty_blocks=0 [ 60.334524][ T3351] EXT4-fs (loop2): Block reservation details [ 60.340514][ T3351] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 60.532130][ T40] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 60.950607][ T4937] FAULT_INJECTION: forcing a failure. [ 60.950607][ T4937] name failslab, interval 1, probability 0, space 0, times 0 [ 60.963925][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: syz.3.453 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 60.974526][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.984607][ T4937] Call Trace: [ 60.987998][ T4937] [ 60.990991][ T4937] dump_stack_lvl+0xf2/0x150 [ 60.995612][ T4937] dump_stack+0x15/0x20 [ 60.999910][ T4937] should_fail_ex+0x229/0x230 [ 61.004654][ T4937] ? bitmap_zalloc+0x29/0x30 [ 61.009258][ T4937] should_failslab+0x8f/0xb0 [ 61.013896][ T4937] __kmalloc_noprof+0xa5/0x370 [ 61.018737][ T4937] bitmap_zalloc+0x29/0x30 [ 61.023268][ T4937] dev_prep_valid_name+0x2b5/0x640 [ 61.028380][ T4937] ? alloc_netdev_mqs+0x7a5/0x8d0 [ 61.033413][ T4937] register_netdevice+0x1c1/0xe30 [ 61.038554][ T4937] ? alloc_netdev_mqs+0x8b7/0x8d0 [ 61.043654][ T4937] ? validate_linkmsg+0x526/0x5a0 [ 61.048680][ T4937] br_dev_newlink+0x25/0xe0 [ 61.053201][ T4937] ? __pfx_br_dev_newlink+0x10/0x10 [ 61.058406][ T4937] rtnl_newlink+0xeff/0x1690 [ 61.063017][ T4937] ? security_capable+0x64/0x80 [ 61.067895][ T4937] ? ns_capable+0x7d/0xb0 [ 61.072235][ T4937] ? __pfx_rtnl_newlink+0x10/0x10 [ 61.077262][ T4937] rtnetlink_rcv_msg+0x6aa/0x710 [ 61.082268][ T4937] ? ref_tracker_free+0x3a5/0x410 [ 61.087347][ T4937] ? __dev_queue_xmit+0x161/0x1fe0 [ 61.092485][ T4937] netlink_rcv_skb+0x12c/0x230 [ 61.097294][ T4937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.102812][ T4937] rtnetlink_rcv+0x1c/0x30 [ 61.107227][ T4937] netlink_unicast+0x599/0x670 [ 61.111985][ T4937] netlink_sendmsg+0x5cc/0x6e0 [ 61.116777][ T4937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.122060][ T4937] __sock_sendmsg+0x140/0x180 [ 61.126792][ T4937] ____sys_sendmsg+0x312/0x410 [ 61.131605][ T4937] __sys_sendmsg+0x1e9/0x280 [ 61.136208][ T4937] __x64_sys_sendmsg+0x46/0x50 [ 61.140985][ T4937] x64_sys_call+0x2689/0x2d60 [ 61.145745][ T4937] do_syscall_64+0xc9/0x1c0 [ 61.150336][ T4937] ? clear_bhb_loop+0x55/0xb0 [ 61.155021][ T4937] ? clear_bhb_loop+0x55/0xb0 [ 61.159769][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.165663][ T4937] RIP: 0033:0x7f87d9379e79 [ 61.170094][ T4937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.189713][ T4937] RSP: 002b:00007f87d7ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.198142][ T4937] RAX: ffffffffffffffda RBX: 00007f87d9515f80 RCX: 00007f87d9379e79 [ 61.206175][ T4937] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 61.214147][ T4937] RBP: 00007f87d7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.222150][ T4937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.230181][ T4937] R13: 0000000000000000 R14: 00007f87d9515f80 R15: 00007ffe0cc0a1a8 [ 61.238151][ T4937] [ 61.356458][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 61.376954][ T4943] loop3: detected capacity change from 0 to 512 [ 61.390782][ T4943] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 61.407995][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 61.408009][ T29] audit: type=1326 audit(1723932358.814:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.425660][ T4948] netlink: 156 bytes leftover after parsing attributes in process `syz.2.456'. [ 61.446338][ T4946] loop4: detected capacity change from 0 to 512 [ 61.453295][ T4946] EXT4-fs: Ignoring removed oldalloc option [ 61.461181][ T4946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.469965][ T29] audit: type=1326 audit(1723932358.856:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.494254][ T29] audit: type=1326 audit(1723932358.856:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.517503][ T29] audit: type=1326 audit(1723932358.856:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.521705][ T4951] xt_socket: unknown flags 0x2 [ 61.541202][ T29] audit: type=1326 audit(1723932358.856:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.541285][ T29] audit: type=1326 audit(1723932358.856:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.541312][ T29] audit: type=1326 audit(1723932358.856:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.541342][ T29] audit: type=1326 audit(1723932358.856:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.541372][ T29] audit: type=1326 audit(1723932358.856:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.541432][ T29] audit: type=1326 audit(1723932358.856:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe27ea29e79 code=0x7ffc0000 [ 61.551444][ T4946] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 61.618543][ T4953] loop2: detected capacity change from 0 to 128 [ 61.642224][ T4946] EXT4-fs (loop4): 1 truncate cleaned up [ 61.717845][ T4953] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.767979][ T4953] Process accounting resumed [ 61.792263][ T4956] loop3: detected capacity change from 0 to 256 [ 61.832822][ T4956] FAT-fs (loop3): codepage cp866 not found [ 62.004381][ T4980] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 62.012966][ T4980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.468'. [ 62.023915][ T4980] ipvlan0: entered promiscuous mode [ 62.029196][ T4980] ipvlan0: entered allmulticast mode [ 62.034513][ T4980] veth0_vlan: entered allmulticast mode [ 62.039731][ T3351] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 62.044019][ T4980] bridge0: port 1(ipvlan0) entered blocking state [ 62.052931][ T4980] bridge0: port 1(ipvlan0) entered disabled state [ 62.060360][ T4980] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 62.246165][ T4987] chnl_net:caif_netlink_parms(): no params data found [ 62.288132][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.299473][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.306804][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.314162][ T4987] bridge_slave_0: entered allmulticast mode [ 62.320631][ T4987] bridge_slave_0: entered promiscuous mode [ 62.328359][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.335421][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.343361][ T4987] bridge_slave_1: entered allmulticast mode [ 62.350078][ T4987] bridge_slave_1: entered promiscuous mode [ 62.359394][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.382041][ T4987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.392633][ T4987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.410060][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.426981][ T4987] team0: Port device team_slave_0 added [ 62.433795][ T4987] team0: Port device team_slave_1 added [ 62.450441][ T4987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.457543][ T4987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.484173][ T4987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.500664][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.512585][ T4987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.519950][ T4987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.545961][ T4987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.571866][ T4987] hsr_slave_0: entered promiscuous mode [ 62.577954][ T4987] hsr_slave_1: entered promiscuous mode [ 62.584210][ T4987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.591872][ T4987] Cannot create hsr debugfs directory [ 62.652113][ T40] bridge_slave_1: left allmulticast mode [ 62.657909][ T40] bridge_slave_1: left promiscuous mode [ 62.663648][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.671735][ T40] bridge_slave_0: left allmulticast mode [ 62.678011][ T40] bridge_slave_0: left promiscuous mode [ 62.683781][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.787698][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.826444][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.851081][ T40] bond0 (unregistering): Released all slaves [ 62.963707][ T40] hsr_slave_0: left promiscuous mode [ 62.983162][ T40] hsr_slave_1: left promiscuous mode [ 62.992271][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.000389][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.008106][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.015689][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.024935][ T40] veth1_macvtap: left promiscuous mode [ 63.030511][ T40] veth0_macvtap: left promiscuous mode [ 63.036080][ T40] veth1_vlan: left promiscuous mode [ 63.041424][ T40] veth0_vlan: left promiscuous mode [ 63.127571][ T40] team0 (unregistering): Port device team_slave_1 removed [ 63.137838][ T40] team0 (unregistering): Port device team_slave_0 removed [ 63.181695][ T5032] veth0: entered promiscuous mode [ 63.188022][ T5032] vlan2: entered promiscuous mode [ 63.195930][ T5032] veth0: left promiscuous mode [ 63.303369][ T5046] geneve2: entered promiscuous mode [ 63.309570][ T5046] geneve2: entered allmulticast mode [ 63.363887][ T5020] chnl_net:caif_netlink_parms(): no params data found [ 63.410138][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.413863][ T5057] loop3: detected capacity change from 0 to 1024 [ 63.417256][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.434697][ T5020] bridge_slave_0: entered allmulticast mode [ 63.442166][ T5020] bridge_slave_0: entered promiscuous mode [ 63.449577][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.456667][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.465220][ T5020] bridge_slave_1: entered allmulticast mode [ 63.473268][ T5020] bridge_slave_1: entered promiscuous mode [ 63.485848][ T5057] FAULT_INJECTION: forcing a failure. [ 63.485848][ T5057] name failslab, interval 1, probability 0, space 0, times 0 [ 63.499279][ T5057] CPU: 1 UID: 0 PID: 5057 Comm: syz.3.488 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 63.509959][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.520090][ T5057] Call Trace: [ 63.523373][ T5057] [ 63.526379][ T5057] dump_stack_lvl+0xf2/0x150 [ 63.530996][ T5057] dump_stack+0x15/0x20 [ 63.535181][ T5057] should_fail_ex+0x229/0x230 [ 63.539866][ T5057] ? security_inode_alloc+0x32/0xd0 [ 63.545156][ T5057] should_failslab+0x8f/0xb0 [ 63.549802][ T5057] kmem_cache_alloc_noprof+0x4c/0x290 [ 63.555239][ T5057] security_inode_alloc+0x32/0xd0 [ 63.560409][ T5057] inode_init_always+0x439/0x480 [ 63.565362][ T5057] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 63.570747][ T5057] alloc_inode+0x7d/0x160 [ 63.575136][ T5057] iget_locked+0x10a/0x490 [ 63.579552][ T5057] __ext4_iget+0x17c/0x1e70 [ 63.584111][ T5057] ? d_alloc_parallel+0xbfe/0xc80 [ 63.589147][ T5057] ext4_lookup+0x15b/0x390 [ 63.593614][ T5057] __lookup_slow+0x184/0x250 [ 63.598254][ T5057] lookup_slow+0x3c/0x60 [ 63.602551][ T5057] walk_component+0x1f5/0x230 [ 63.607235][ T5057] ? path_lookupat+0xfd/0x2b0 [ 63.611940][ T5057] path_lookupat+0x10a/0x2b0 [ 63.616537][ T5057] filename_lookup+0x127/0x300 [ 63.621314][ T5057] user_path_at+0x3c/0x110 [ 63.625751][ T5057] path_removexattr+0xc5/0x290 [ 63.630533][ T5057] __x64_sys_lremovexattr+0x33/0x40 [ 63.635746][ T5057] x64_sys_call+0x1bbe/0x2d60 [ 63.640449][ T5057] do_syscall_64+0xc9/0x1c0 [ 63.645050][ T5057] ? clear_bhb_loop+0x55/0xb0 [ 63.649761][ T5057] ? clear_bhb_loop+0x55/0xb0 [ 63.654473][ T5057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.660409][ T5057] RIP: 0033:0x7f87d9379e79 [ 63.664851][ T5057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.684574][ T5057] RSP: 002b:00007f87d7ff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 63.693067][ T5057] RAX: ffffffffffffffda RBX: 00007f87d9515f80 RCX: 00007f87d9379e79 [ 63.701115][ T5057] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000000 [ 63.709095][ T5057] RBP: 00007f87d7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.717071][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.725143][ T5057] R13: 0000000000000000 R14: 00007f87d9515f80 R15: 00007ffe0cc0a1a8 [ 63.733179][ T5057] [ 63.756602][ T5020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.779865][ T5020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.789609][ T4987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.806285][ T4987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.824012][ T5072] 9pnet_fd: Insufficient options for proto=fd [ 63.835872][ T4987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.850684][ T4987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.860432][ T5020] team0: Port device team_slave_0 added [ 63.873519][ T5020] team0: Port device team_slave_1 added [ 63.888474][ T3351] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 63.889336][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.911630][ T5020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.918631][ T5020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.945135][ T5020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.959798][ T5020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.966776][ T5020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.993300][ T5020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.010441][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.037344][ T5020] hsr_slave_0: entered promiscuous mode [ 64.043704][ T5020] hsr_slave_1: entered promiscuous mode [ 64.049745][ T5020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.057366][ T5020] Cannot create hsr debugfs directory [ 64.072476][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.117535][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.193554][ T41] bridge_slave_1: left allmulticast mode [ 64.199270][ T41] bridge_slave_1: left promiscuous mode [ 64.205044][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.212894][ T41] bridge_slave_0: left allmulticast mode [ 64.218535][ T41] bridge_slave_0: left promiscuous mode [ 64.224882][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.308678][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.320145][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.331261][ T41] bond0 (unregistering): Released all slaves [ 64.450407][ T41] hsr_slave_0: left promiscuous mode [ 64.456162][ T41] hsr_slave_1: left promiscuous mode [ 64.462092][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.469685][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.477861][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.485269][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.495257][ T41] veth1_macvtap: left promiscuous mode [ 64.500727][ T41] veth0_macvtap: left promiscuous mode [ 64.507127][ T41] veth1_vlan: left promiscuous mode [ 64.512359][ T41] veth0_vlan: left promiscuous mode [ 64.594643][ T41] team0 (unregistering): Port device team_slave_1 removed [ 64.606709][ T41] team0 (unregistering): Port device team_slave_0 removed [ 64.653162][ T5094] loop3: detected capacity change from 0 to 128 [ 64.662412][ T5094] EXT4-fs: Ignoring removed nobh option [ 64.675183][ T5094] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.711581][ T4987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.725126][ T4987] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.735657][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.742749][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.760408][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.767484][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.797308][ T5101] vlan2: entered promiscuous mode [ 64.802788][ T5101] dummy0: entered promiscuous mode [ 64.809685][ T5101] team0: Port device vlan2 added [ 64.869899][ T5020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.875037][ T5107] loop4: detected capacity change from 0 to 1024 [ 64.889016][ T5020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.907462][ T5107] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.918401][ T5020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.919639][ T5107] vhci_hcd: invalid port number 0 [ 64.937502][ T5020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.955109][ T4987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.977390][ T5113] netlink: 32 bytes leftover after parsing attributes in process `syz.3.503'. [ 65.040122][ T5020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.054668][ T5020] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.065101][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.072222][ T3268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.091082][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.098198][ T3268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.153581][ T4987] veth0_vlan: entered promiscuous mode [ 65.164920][ T5128] loop4: detected capacity change from 0 to 512 [ 65.177526][ T4987] veth1_vlan: entered promiscuous mode [ 65.190031][ T5128] EXT4-fs: inline encryption not supported [ 65.195368][ T5020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.205437][ T5128] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 65.225528][ T4987] veth0_macvtap: entered promiscuous mode [ 65.233563][ T4987] veth1_macvtap: entered promiscuous mode [ 65.251280][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.261923][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.271844][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.282785][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.292622][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.303142][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.315100][ T4987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.323067][ T5128] netlink: 674 bytes leftover after parsing attributes in process `syz.4.507'. [ 65.334922][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.343734][ T5131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=5131 comm=syz.4.507 [ 65.345453][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.359475][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=5128 comm=syz.4.507 [ 65.368535][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.391357][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.401253][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.411740][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.424867][ T4987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.433514][ T4987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.442402][ T4987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.451818][ T4987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.460647][ T4987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.509898][ T5020] veth0_vlan: entered promiscuous mode [ 65.518921][ T5020] veth1_vlan: entered promiscuous mode [ 65.537444][ T41] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 65.549540][ T5020] veth0_macvtap: entered promiscuous mode [ 65.557354][ T5020] veth1_macvtap: entered promiscuous mode [ 65.568799][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.579330][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.589232][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.599861][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.609852][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.616062][ T5152] loop0: detected capacity change from 0 to 512 [ 65.620322][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.629194][ T5152] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.636436][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.656752][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.664452][ T5152] EXT4-fs (loop0): 1 truncate cleaned up [ 65.668513][ T5020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.673015][ T5152] EXT4-fs mount: 24 callbacks suppressed [ 65.673031][ T5152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.680647][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.708410][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.718285][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.728720][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.738610][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.749171][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.759073][ T5020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.769575][ T5020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.781905][ T5157] EXT4-fs (loop0): shut down requested (0) [ 65.783291][ T5020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.805603][ T5020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.814472][ T5020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.823332][ T5020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.832194][ T5020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.974004][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 65.979519][ T4987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.982831][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 66.010705][ T5170] loop4: detected capacity change from 0 to 512 [ 66.022758][ T5170] EXT4-fs error (device loop4): ext4_quota_enable:7018: comm syz.4.515: Bad quota inum: 196608, type: 0 [ 66.034316][ T5170] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=196608). Please run e2fsck to fix. [ 66.051400][ T5170] EXT4-fs (loop4): mount failed [ 66.065055][ T5170] loop4: detected capacity change from 0 to 1024 [ 66.072070][ T5170] EXT4-fs: Ignoring removed nobh option [ 66.098661][ T5170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.127692][ T5170] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.135182][ T5170] vhci_hcd: invalid port number 23 [ 66.150239][ T4738] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /38/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.173076][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 66.173093][ T29] audit: type=1400 audit(1723932363.833:897): avc: denied { remove_name } for pid=4738 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.173104][ T4738] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.173272][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.179201][ T29] audit: type=1400 audit(1723932363.833:898): avc: denied { rmdir } for pid=4738 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.209240][ T4738] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /38/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.278899][ T4738] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.298928][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.299042][ T4738] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /38/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.299350][ T4738] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.299470][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.299550][ T4738] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /38/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.299770][ T4738] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.299893][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.299986][ T4738] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /38/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.300202][ T4738] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 66.312873][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.335441][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.339106][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.339533][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.339869][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.342603][ T4738] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 66.418825][ T5190] ip6erspan0: entered promiscuous mode [ 66.519890][ T5195] netlink: 116 bytes leftover after parsing attributes in process `syz.0.523'. [ 66.605730][ T29] audit: type=1326 audit(1723932364.274:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435da9e79 code=0x7ffc0000 [ 66.629563][ T29] audit: type=1326 audit(1723932364.274:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa435da9e79 code=0x7ffc0000 [ 66.652768][ T29] audit: type=1326 audit(1723932364.274:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435da9e79 code=0x7ffc0000 [ 66.676078][ T29] audit: type=1326 audit(1723932364.274:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa435da9e79 code=0x7ffc0000 [ 66.700108][ T29] audit: type=1326 audit(1723932364.274:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa435da9e79 code=0x7ffc0000 [ 66.723982][ T29] audit: type=1326 audit(1723932364.274:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa435da9e79 code=0x7ffc0000 [ 66.747367][ T29] audit: type=1326 audit(1723932364.274:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa435da9eb3 code=0x7ffc0000 [ 66.771204][ T29] audit: type=1326 audit(1723932364.274:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa435da9eb3 code=0x7ffc0000 [ 66.823477][ T5207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.887272][ T5215] loop1: detected capacity change from 0 to 512 [ 66.902810][ T5215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.920164][ T5215] EXT4-fs (loop1): 1 truncate cleaned up [ 66.928246][ T5215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.950275][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.961483][ T4738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.996829][ T5215] netlink: 48 bytes leftover after parsing attributes in process `syz.1.531'. [ 67.037570][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.058955][ T5020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.081140][ T5227] tmpfs: Unknown parameter 'mpktic' [ 67.111543][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.129690][ T5227] loop2: detected capacity change from 0 to 1024 [ 67.236031][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.260609][ T5247] loop0: detected capacity change from 0 to 512 [ 67.260873][ T5227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.269672][ T5247] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 67.280237][ T5247] EXT4-fs: failed to create workqueue [ 67.295237][ T5247] EXT4-fs (loop0): mount failed [ 67.351400][ T5253] netlink: 'syz.1.536': attribute type 30 has an invalid length. [ 67.407483][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 67.515917][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.523231][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.545934][ T5228] bridge_slave_0: entered allmulticast mode [ 67.553152][ T5228] bridge_slave_0: entered promiscuous mode [ 67.578692][ T41] bridge_slave_1: left allmulticast mode [ 67.584483][ T41] bridge_slave_1: left promiscuous mode [ 67.590166][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.602837][ T41] bridge_slave_0: left allmulticast mode [ 67.608613][ T41] bridge_slave_0: left promiscuous mode [ 67.614394][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.649551][ T5227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.720818][ T5265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.543'. [ 67.729863][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 67.772800][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.796001][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.814965][ T41] bond0 (unregistering): Released all slaves [ 67.840023][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.847804][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.869315][ T5228] bridge_slave_1: entered allmulticast mode [ 67.884378][ T5228] bridge_slave_1: entered promiscuous mode [ 68.047485][ T41] hsr_slave_0: left promiscuous mode [ 68.053426][ T41] hsr_slave_1: left promiscuous mode [ 68.124662][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.132139][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.147978][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.155566][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.176817][ T41] dummy0: left promiscuous mode [ 68.181894][ T41] veth1_macvtap: left promiscuous mode [ 68.187390][ T41] veth0_macvtap: left promiscuous mode [ 68.193657][ T41] veth1_vlan: left promiscuous mode [ 68.198896][ T41] veth0_vlan: left promiscuous mode [ 68.400370][ T41] team0 (unregistering): Port device vlan2 removed [ 68.539645][ T5295] loop0: detected capacity change from 0 to 1024 [ 68.657631][ T41] team0 (unregistering): Port device team_slave_1 removed [ 68.657720][ T5301] loop2: detected capacity change from 0 to 1024 [ 68.671532][ T41] team0 (unregistering): Port device team_slave_0 removed [ 68.671538][ T5301] EXT4-fs: Ignoring removed oldalloc option [ 68.671865][ T5301] EXT4-fs (loop2): bad geometry: block count 1792 exceeds size of device (512 blocks) [ 68.703252][ T5301] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.735477][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.753118][ T5302] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 68.763046][ T5302] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 68.784879][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.831106][ T5308] ebtables: ebtables: counters copy to user failed while replacing table [ 68.854499][ T5228] team0: Port device team_slave_0 added [ 68.862689][ T5228] team0: Port device team_slave_1 added [ 68.901417][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.908526][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.934601][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.957407][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.964459][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.991063][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.007525][ T5328] FAULT_INJECTION: forcing a failure. [ 69.007525][ T5328] name failslab, interval 1, probability 0, space 0, times 0 [ 69.020198][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.563 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 69.030810][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.040865][ T5328] Call Trace: [ 69.044162][ T5328] [ 69.047225][ T5328] dump_stack_lvl+0xf2/0x150 [ 69.051895][ T5328] dump_stack+0x15/0x20 [ 69.056068][ T5328] should_fail_ex+0x229/0x230 [ 69.060782][ T5328] ? dst_alloc+0xc0/0x100 [ 69.065133][ T5328] should_failslab+0x8f/0xb0 [ 69.069733][ T5328] kmem_cache_alloc_noprof+0x4c/0x290 [ 69.075113][ T5328] dst_alloc+0xc0/0x100 [ 69.079260][ T5328] ip_route_output_key_hash_rcu+0xb90/0x12d0 [ 69.085239][ T5328] ip_route_output_flow+0x76/0x120 [ 69.090452][ T5328] udp_sendmsg+0xe5d/0x12f0 [ 69.094957][ T5328] ? __pfx_udplite_getfrag+0x10/0x10 [ 69.100361][ T5328] ? __pfx_udp_sendmsg+0x10/0x10 [ 69.105313][ T5328] inet_sendmsg+0xaf/0xd0 [ 69.109720][ T5328] __sock_sendmsg+0x102/0x180 [ 69.114418][ T5328] ____sys_sendmsg+0x312/0x410 [ 69.119196][ T5328] __sys_sendmmsg+0x269/0x500 [ 69.123891][ T5328] __x64_sys_sendmmsg+0x57/0x70 [ 69.128764][ T5328] x64_sys_call+0xa49/0x2d60 [ 69.133495][ T5328] do_syscall_64+0xc9/0x1c0 [ 69.138096][ T5328] ? clear_bhb_loop+0x55/0xb0 [ 69.142852][ T5328] ? clear_bhb_loop+0x55/0xb0 [ 69.147546][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.153530][ T5328] RIP: 0033:0x7f7b98939e79 [ 69.157986][ T5328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.177700][ T5328] RSP: 002b:00007f7b975b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.186136][ T5328] RAX: ffffffffffffffda RBX: 00007f7b98ad5f80 RCX: 00007f7b98939e79 [ 69.194119][ T5328] RDX: 0000000000000004 RSI: 0000000020005b40 RDI: 0000000000000004 [ 69.202087][ T5328] RBP: 00007f7b975b7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.210050][ T5328] R10: 000000000000c080 R11: 0000000000000246 R12: 0000000000000001 [ 69.218053][ T5328] R13: 0000000000000000 R14: 00007f7b98ad5f80 R15: 00007fffe533b278 [ 69.226022][ T5328] [ 69.251789][ T5228] hsr_slave_0: entered promiscuous mode [ 69.269355][ T5228] hsr_slave_1: entered promiscuous mode [ 69.282808][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.291825][ T5228] Cannot create hsr debugfs directory [ 69.346356][ T5334] loop0: detected capacity change from 0 to 2048 [ 69.366310][ T5334] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 69.436940][ T5340] loop3: detected capacity change from 0 to 8192 [ 69.451413][ T5340] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.586044][ C1] ================================================================== [ 69.594210][ C1] BUG: KCSAN: data-race in fasync_remove_entry / kill_fasync [ 69.601606][ C1] [ 69.603926][ C1] write to 0xffff888115b7d470 of 8 bytes by task 5305 on cpu 0: [ 69.611697][ C1] fasync_remove_entry+0xd2/0x130 [ 69.616727][ C1] fasync_helper+0x96/0xc0 [ 69.621145][ C1] perf_fasync+0x64/0x90 [ 69.625390][ C1] __fput+0x68e/0x6f0 [ 69.629380][ C1] ____fput+0x15/0x20 [ 69.633373][ C1] task_work_run+0x13a/0x1a0 [ 69.637985][ C1] syscall_exit_to_user_mode+0xbe/0x130 [ 69.643541][ C1] do_syscall_64+0xd6/0x1c0 [ 69.648062][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.653962][ C1] [ 69.656280][ C1] read to 0xffff888115b7d470 of 8 bytes by interrupt on cpu 1: [ 69.663820][ C1] kill_fasync+0x24/0x150 [ 69.668161][ C1] perf_pending_irq+0x1ed/0x260 [ 69.673018][ C1] irq_work_run+0xdf/0x2c0 [ 69.677453][ C1] __sysvec_irq_work+0x23/0x1a0 [ 69.682306][ C1] sysvec_irq_work+0x66/0x80 [ 69.686900][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 69.691842][ C1] task_work_add+0x5/0x2e0 [ 69.696269][ C1] fput+0xdc/0x180 [ 69.700004][ C1] __sys_recvmsg+0x239/0x280 [ 69.704605][ C1] __x64_sys_recvmsg+0x46/0x50 [ 69.709380][ C1] x64_sys_call+0xb84/0x2d60 [ 69.713979][ C1] do_syscall_64+0xc9/0x1c0 [ 69.718495][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.724400][ C1] [ 69.726720][ C1] value changed: 0xffff88810ed363c0 -> 0x0000000000000000 [ 69.733829][ C1] [ 69.736153][ C1] Reported by Kernel Concurrency Sanitizer on: [ 69.742292][ C1] CPU: 1 UID: 0 PID: 5306 Comm: syz.2.557 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 69.752882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.762939][ C1] ================================================================== [ 69.778909][ T5345] loop3: detected capacity change from 0 to 1024 [ 69.795331][ T5345] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 69.820238][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.849089][ T5345] FAULT_INJECTION: forcing a failure. [ 69.849089][ T5345] name failslab, interval 1, probability 0, space 0, times 0 [ 69.861858][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.3.570 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 69.872558][ T5345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.882620][ T5345] Call Trace: [ 69.885919][ T5345] [ 69.888861][ T5345] dump_stack_lvl+0xf2/0x150 [ 69.893462][ T5345] dump_stack+0x15/0x20 [ 69.897626][ T5345] should_fail_ex+0x229/0x230 [ 69.902316][ T5345] ? iter_file_splice_write+0x108/0x970 [ 69.907855][ T5345] should_failslab+0x8f/0xb0 [ 69.912466][ T5345] __kmalloc_noprof+0xa5/0x370 [ 69.917300][ T5345] iter_file_splice_write+0x108/0x970 [ 69.922676][ T5345] ? __pfx_iter_file_splice_write+0x10/0x10 [ 69.928621][ T5345] direct_splice_actor+0x16c/0x2c0 [ 69.933863][ T5345] splice_direct_to_actor+0x305/0x670 [ 69.939238][ T5345] ? __pfx_direct_splice_actor+0x10/0x10 [ 69.944875][ T5345] do_splice_direct+0xd7/0x150 [ 69.949723][ T5345] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 69.955629][ T5345] do_sendfile+0x3ab/0x950 [ 69.960045][ T5345] __x64_sys_sendfile64+0x110/0x150 [ 69.965303][ T5345] x64_sys_call+0xed5/0x2d60 [ 69.969991][ T5345] do_syscall_64+0xc9/0x1c0 [ 69.974550][ T5345] ? clear_bhb_loop+0x55/0xb0 [ 69.979258][ T5345] ? clear_bhb_loop+0x55/0xb0 [ 69.983938][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.989858][ T5345] RIP: 0033:0x7f87d9379e79 [ 69.994264][ T5345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.013967][ T5345] RSP: 002b:00007f87d7ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 70.022526][ T5345] RAX: ffffffffffffffda RBX: 00007f87d9515f80 RCX: 00007f87d9379e79 [ 70.030489][ T5345] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 70.038450][ T5345] RBP: 00007f87d7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.046530][ T5345] R10: 000000000000d612 R11: 0000000000000246 R12: 0000000000000002 [ 70.054569][ T5345] R13: 0000000000000000 R14: 00007f87d9515f80 R15: 00007ffe0cc0a1a8 [ 70.062553][ T5345] [ 70.077179][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.087457][ T5228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.098377][ T5228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.110227][ T5228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.119738][ T5228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.201386][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.215313][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.224905][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.231991][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.242744][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.249809][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.317969][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.427229][ T5228] veth0_vlan: entered promiscuous mode [ 70.436017][ T5228] veth1_vlan: entered promiscuous mode [ 70.452727][ T5228] veth0_macvtap: entered promiscuous mode [ 70.460096][ T5228] veth1_macvtap: entered promiscuous mode [ 70.471846][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.483170][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.493213][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.503720][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.514131][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.524607][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.535037][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.545562][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.556567][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.567585][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.578650][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.588632][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.599122][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.609515][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.620080][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.630807][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.641470][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.652286][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.662471][ T5228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.671744][ T5228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.680540][ T5228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.689262][ T5228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0