last executing test programs: 15.90728792s ago: executing program 4 (id=1212): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@caif, 0x80, &(0x7f0000001480)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000080)="6430a0cefd46343c992646566c89fe777c019e6d87938d1384f87176d9fa9e9f318cc08d7e22546321a5cc1b104ef4839cea6f713bf11e2921", 0x39}, {&(0x7f0000000180)="386068652cc570f42793a5ebb9e2f800bcb0bba56315f1fbd930cf9e8e118a05ed", 0x21}, {&(0x7f0000001200)="fbd7306f6dfd2757df95d6442948ba257ad3e80edcdd6c148c39fbfc1707d9650d", 0x21}, {&(0x7f0000001240)="52cf7395cbac1bdb59cad5a64ca9f60311b576", 0x13}, {&(0x7f0000001280)="83aeb81f9b17b6e3ac27335b24eb65f8ffdf4f7b6f39b84639fb892319502874f6c96dc880721166fcff", 0x2a}, {&(0x7f00000012c0)="16abc08a9a2d0927c2fd0c25538e7828b6cc4212c431d7d952c1d725751ad59d475c3f41f77e151fcc89794abae7217a372ae2836c80590bc49187235aa4e6ecf4b69f7aadb7f21f3ab882bad4dd41337a5bbbb661f4f659259b80a9fad55071ba56eaba2737435e9c8b77a05c797c422c344eb625fe14a94e0deeefa4209a535e2a7b1771113b75f871b767879b7c4dd3d149191c2184909c381f85", 0x9c}, {&(0x7f0000001380)="55e3f7628095881b5fb8ec754764a563757cc4f3f2ef442a5393bba8b080fba751d053346bee8d0cbf01794dd9b1ec005aa07705f301bf33b6d16eb70f10db7d9e691ae9f1def6387f212c70f7ffaade7b0bea465d51babb69c7b41ad7a5854e74bfbb50210e087398dbb6bfe0d7b7f7a5b3ba1c5289a2d11050102be98183f268839dd3481437d5c1295da685f6f033d781400c2018adbff432fed9c1ba26c762cac7cb1efc1b42394b3cb577d66328f5d42affbc50c693c4acd3c266383f45a40d173914c6faa628d43f86d89547c14b14287506f9bf21ea1a5bb91b31df8cbbb6ad427455", 0xe6}], 0x8, &(0x7f0000001500)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xa768}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xc0}, 0x4014) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) 15.834828518s ago: executing program 4 (id=1214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1f42}, {0xc}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffee7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x54}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000200)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) 15.770002744s ago: executing program 4 (id=1216): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000003044c49200010020000900010073797a310000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000050900010073797a310000000034000000050a010200000000000000000100ffff0c000240000000000000000108000b40000000000900010073797a3100000000140000001100010000000000000000"], 0xbc}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = eventfd(0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 11.57466576s ago: executing program 3 (id=1273): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_unlink(&(0x7f0000000200)='\x00') 11.558305401s ago: executing program 3 (id=1274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1f42}, {0xc}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffee7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x54}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) 11.420940724s ago: executing program 3 (id=1278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3, 0xffffff7f}, 0x10) 11.36524345s ago: executing program 3 (id=1280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) 11.335733183s ago: executing program 3 (id=1282): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) close(r0) 11.253590561s ago: executing program 3 (id=1285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x0, @none}, &(0x7f00000006c0)=0xe, 0x100000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000700)={0x4, "a61838"}, 0x6) socket$packet(0x11, 0x3, 0x300) inotify_init1(0x80000) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000001300)=""/252, 0xfc}], 0x1, 0x0, 0xc) 6.09817432s ago: executing program 0 (id=1318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msync(&(0x7f00009f7000/0x2000)=nil, 0x2000, 0x0) 6.09808018s ago: executing program 0 (id=1319): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000600)) 6.042907535s ago: executing program 0 (id=1320): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7ae, &(0x7f0000001e80)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x30, 0x12, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x100000}}, 0x40) 6.012534368s ago: executing program 0 (id=1321): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000000300)='q', 0x1}], 0x1, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000008400"/24], 0x18}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x4000000, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x0, 0x34}, 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000180100002800c0001800800010000000000"], 0x28}}, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600e3ff10a9ffff030000000700000000000000635f2caaed49e57a441689c6baa1675117519477fe8e1cc19a916cd6b938f50f1d719fa2c3537e90f99ef48fd14de5fae8dbc9063d85c80fa0e207705bc9b8938e72cd10ce437fe88ce0c27bcafa408f29a0dc49df06e41fbd1d5812e7309321d8c7cf3e5486a300aa29f25e7797cfa61660a21489a1e7dec397a37cb00c8d596648079fb44f2e222888c7ca", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x14000) setsockopt$inet6_int(r8, 0x10d, 0x10, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r7, @ANYRES32=r0, @ANYBLOB="0000000000001000b7080000000000007b8af8ff00000000bfa20000004bdf89322560f6fee9d16c50ca4000000007020000f8ffffffb70300000800004e705d9913b16e132a79360f5ad41c9d688fee0f78d9e463bb19f70e88f5111742ada66878cc65"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000004, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 5.143772202s ago: executing program 0 (id=1331): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000600)) 5.085131697s ago: executing program 0 (id=1333): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000003044c49200010020000900010073797a310000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000050900010073797a310000000034000000050a010200000000000000000100ffff0c000240000000000000000108000b40000000000900010073797a31000000001400000011000100"/186], 0xbc}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = eventfd(0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 4.270826787s ago: executing program 1 (id=1338): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000180)={0x2b}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0) r7 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r7) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x93b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e002400028008000100"], 0x54}}, 0x0) 3.882478184s ago: executing program 1 (id=1342): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000180)={0x2b}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0) r7 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r7) (fail_nth: 1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x93b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e002400028008000100"], 0x54}}, 0x0) 3.434680787s ago: executing program 1 (id=1345): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100003a00000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3031600000000000000000000000200090040000000e900000000000000020006000000000002"], 0xb0}, 0x1, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xfc, 0x2dd, &(0x7f0000000500)="$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") (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = syz_io_uring_setup(0x448d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) open(0x0, 0x40c5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fdatasync(0xffffffffffffffff) (async) r6 = syz_open_dev$loop(0x0, 0x3, 0x800) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_TEST(r7, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) modify_ldt$read(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000044b95375a0f000005000000000000002b37bbdae3ff4354c5f1f4e1326da67317093aff968d4ce332e86eb1a7fc1b37de1a028ce91f9be0dc1d5d4cf12de603d4ecc7a6dc16aa615dad2dde0ce4e082d20569", @ANYRES16=r6, @ANYRES64=r3, @ANYRES8=r1, @ANYBLOB="996e2733dc84de9661efae294fe92b4b5b195ad45bf845", @ANYBLOB="b45a503600"/28], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) 2.055938991s ago: executing program 2 (id=1348): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.895428276s ago: executing program 2 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.054850918s ago: executing program 4 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1609000000000000000000010000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = creat(0x0, 0xd931d3864d39dcca) write$binfmt_elf32(r7, 0x0, 0x69) execve(0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x199) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 978.866135ms ago: executing program 2 (id=1351): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, 0x0, 0x0, 0x10001, 0x0, 0x0) (fail_nth: 7) 946.142908ms ago: executing program 4 (id=1352): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2200010, &(0x7f0000000300), 0xfd, 0x58f, &(0x7f0000000c80)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x7ffffb, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) mount_setattr(r0, &(0x7f00000001c0)='./file1/file0\x00', 0x1100, &(0x7f0000000200)={0x100070, 0x6, 0xa0000, {r5}}, 0x20) lseek(r5, 0x200, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x2, 0xa) sendfile(r5, r6, 0x0, 0xf800) 677.542744ms ago: executing program 1 (id=1353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) io_uring_setup(0x4b6b, &(0x7f0000000400)={0x0, 0xb00c, 0x10, 0x1, 0x2c3}) r1 = io_uring_setup(0x7d8, &(0x7f0000000180)={0x0, 0x0, 0x200}) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getpid() rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000600)) 677.005754ms ago: executing program 2 (id=1354): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2200010, &(0x7f0000000300), 0xfd, 0x58f, &(0x7f0000000c80)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x7ffffb, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) mount_setattr(r0, &(0x7f00000001c0)='./file1/file0\x00', 0x1100, &(0x7f0000000200)={0x100070, 0x6, 0xa0000, {r5}}, 0x20) lseek(r5, 0x200, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x2, 0xa) sendfile(r5, r6, 0x0, 0xf800) 593.258782ms ago: executing program 1 (id=1355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000ff0f0000050000000000000017a24f2eeaaca3140c21d27113c5d09b07bf0ed109fe1a8a1a6c37ae712a76d12d02ae7ebc61e71211ed36453d140e7cd4bde86a5a1379dafcd0be10", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000030000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x2, 0xf, 0x3, 0x400, 0xffffffffffffffff, 0xb85, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x9, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) pwrite64(r1, &(0x7f0000000880)="4bc708595c5a561e8e7cfbaba9a9f12a9a1221f4d2cf56d27468eab6d78ecf8593a024b0da12529fc1d290087b9e7b09c6bd857243bf35895fb0185be21b1c1d93fd431362297f42bbbf364961503277639b4e9486f5e0ffd4fba2f60ef9969706a5b3059ce5aa02b20bb397ead8107e2b0d33afa02df8b3837f7d43ee16647e26ac42c1f198f40787cc8d2672a660eea971001f0336ad10e198f4de818bf11b8f71eaf85b4a6929e5298f9679e2d0aeac7d67", 0xb3, 0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=Md,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',msize=0x0000000000001000,k']) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='ext4_discard_blocks\x00', r7, 0x0, 0x800000000000f7}, 0x18) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r8 = io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x9094, 0x1000, 0x0, 0x1, 0x0, r6}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000011c0)={r9}, &(0x7f0000001200)=0x8) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000004c0)={r9, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x84) (async) r10 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r10, &(0x7f000047b000)={0xa, 0x404e20, 0x5, @empty, 0xfffffffe}, 0x1c) (async) listen(r10, 0x400000001ffffffd) (async) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r12 = accept4(r10, 0x0, 0x0, 0x0) (async) r13 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r13, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=[@ip_retopts={{0x10}}], 0x10}, 0x0) (async) close_range(r8, r12, 0x0) 561.617645ms ago: executing program 1 (id=1356): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6000001f}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003b000900000000000000000001000000180004"], 0x2c}}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 419.797349ms ago: executing program 2 (id=1357): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x5, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) sendmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10060) recvmsg$unix(r6, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062) bind$netlink(r5, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r11, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x9}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) 259.979275ms ago: executing program 4 (id=1358): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x545d, &(0x7f0000000200)=0x3) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001c000000000000001c0000001c00000007010000000000000200000d0000000001000000000000000600740013cd45b9848518e9a600000000005f5f61000000"], 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x80010, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) syz_usbip_server_init(0x5) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r6) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000003f8c7ce606be1ef7af00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r5, 0x700, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x2, &(0x7f0000000040), &(0x7f0000000080), 0x8) 0s ago: executing program 2 (id=1359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="b78c6f9095517ced8eb372c001be", 0xe}, {0x0}], 0x2, 0xfffff800, 0x0) kernel console output (not intermixed with test programs): entered disabled state [ 163.725198][ T28] bridge_slave_0: left allmulticast mode [ 163.730998][ T28] bridge_slave_0: left promiscuous mode [ 163.736653][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.871335][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.882086][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.892654][ T28] bond0 (unregistering): Released all slaves [ 163.941675][ T28] hsr_slave_0: left promiscuous mode [ 163.947769][ T28] hsr_slave_1: left promiscuous mode [ 163.953696][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.961325][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.969344][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.976808][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.986093][ T28] veth1_macvtap: left promiscuous mode [ 163.991807][ T28] veth0_macvtap: left promiscuous mode [ 163.997480][ T28] veth1_vlan: left promiscuous mode [ 164.002749][ T28] veth0_vlan: left promiscuous mode [ 164.093539][ T28] team0 (unregistering): Port device team_slave_1 removed [ 164.104072][ T28] team0 (unregistering): Port device team_slave_0 removed [ 164.222081][ T9127] loop1: detected capacity change from 0 to 2048 [ 164.299960][ T9138] loop1: detected capacity change from 0 to 764 [ 164.406727][ T9081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.426768][ T9081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.440610][ T9081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.450907][ T9081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.514866][ T9081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.527162][ T9081] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.549228][ T9081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.559871][ T9081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.566606][ T9156] loop0: detected capacity change from 0 to 2048 [ 164.634771][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.641903][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.653294][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.660563][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.755960][ T9156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.971896][ T9156] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 164.979179][ T9081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.029204][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 165.029224][ T29] audit: type=1400 audit(1728396018.600:5644): avc: denied { mount } for pid=9154 comm="syz.0.936" name="/" dev="rpc_pipefs" ino=31859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 165.130800][ T8278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.208984][ T29] audit: type=1326 audit(1728396018.780:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.212543][ T9081] veth0_vlan: entered promiscuous mode [ 165.235895][ T29] audit: type=1326 audit(1728396018.780:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.242755][ T9081] veth1_vlan: entered promiscuous mode [ 165.261339][ T29] audit: type=1326 audit(1728396018.780:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.279723][ T9081] veth0_macvtap: entered promiscuous mode [ 165.290111][ T29] audit: type=1326 audit(1728396018.780:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.306947][ T9081] veth1_macvtap: entered promiscuous mode [ 165.319174][ T29] audit: type=1326 audit(1728396018.780:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.332238][ T9081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.348225][ T29] audit: type=1326 audit(1728396018.780:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.358674][ T9081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.358689][ T9081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.358707][ T9081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.358724][ T9081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.382090][ T29] audit: type=1326 audit(1728396018.780:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.391843][ T9081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.391865][ T9081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.391884][ T9081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.393293][ T8] usb usb6-port1: unable to enumerate USB device [ 165.402560][ T29] audit: type=1326 audit(1728396018.780:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.417678][ T9057] hub 6-0:1.0: USB hub found [ 165.427949][ T29] audit: type=1326 audit(1728396018.840:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 165.450384][ T9081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.467465][ T9057] hub 6-0:1.0: 8 ports detected [ 165.550189][ T9081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.560876][ T9081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.570764][ T9081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.581311][ T9081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.591371][ T9081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.601829][ T9081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.611778][ T9081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.622308][ T9081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.633238][ T9081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.643037][ T9081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.651824][ T9081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.660579][ T9081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.665902][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.669416][ T9081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.689125][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.229257][ T9235] FAULT_INJECTION: forcing a failure. [ 166.229257][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.242456][ T9235] CPU: 1 UID: 0 PID: 9235 Comm: syz.4.947 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 166.253508][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.263678][ T9235] Call Trace: [ 166.267021][ T9235] [ 166.269972][ T9235] dump_stack_lvl+0xf2/0x150 [ 166.274636][ T9235] dump_stack+0x15/0x20 [ 166.279076][ T9235] should_fail_ex+0x223/0x230 [ 166.283841][ T9235] should_fail+0xb/0x10 [ 166.288081][ T9235] should_fail_usercopy+0x1a/0x20 [ 166.293166][ T9235] _copy_from_user+0x1e/0xd0 [ 166.297851][ T9235] copy_msghdr_from_user+0x54/0x2a0 [ 166.303364][ T9235] __sys_sendmsg+0x171/0x270 [ 166.307982][ T9235] __x64_sys_sendmsg+0x46/0x50 [ 166.312765][ T9235] x64_sys_call+0x2689/0x2d60 [ 166.317467][ T9235] do_syscall_64+0xc9/0x1c0 [ 166.322146][ T9235] ? clear_bhb_loop+0x55/0xb0 [ 166.326834][ T9235] ? clear_bhb_loop+0x55/0xb0 [ 166.331587][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.337497][ T9235] RIP: 0033:0x7f38587cdff9 [ 166.341911][ T9235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.361528][ T9235] RSP: 002b:00007f3857447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.369945][ T9235] RAX: ffffffffffffffda RBX: 00007f3858985f80 RCX: 00007f38587cdff9 [ 166.377916][ T9235] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 166.386027][ T9235] RBP: 00007f3857447090 R08: 0000000000000000 R09: 0000000000000000 [ 166.394027][ T9235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.402003][ T9235] R13: 0000000000000000 R14: 00007f3858985f80 R15: 00007ffcd6a64408 [ 166.410015][ T9235] [ 167.467345][ T8] usb usb6-port1: attempt power cycle [ 169.327283][ T8] usb usb6-port1: unable to enumerate USB device [ 169.451315][ T9266] loop2: detected capacity change from 0 to 764 [ 170.029546][ T9281] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 170.037344][ T9281] EXT4-fs warning (device sda1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 170.081196][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 170.081211][ T29] audit: type=1326 audit(1728396023.650:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.110880][ T29] audit: type=1326 audit(1728396023.650:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.134715][ T29] audit: type=1326 audit(1728396023.650:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.142906][ T9283] loop0: detected capacity change from 0 to 1024 [ 170.158155][ T29] audit: type=1326 audit(1728396023.650:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.187869][ T29] audit: type=1326 audit(1728396023.650:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.211323][ T29] audit: type=1326 audit(1728396023.650:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.234737][ T29] audit: type=1326 audit(1728396023.650:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.258577][ T29] audit: type=1326 audit(1728396023.840:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.282167][ T29] audit: type=1326 audit(1728396023.840:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.644456][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.684868][ T29] audit: type=1326 audit(1728396024.250:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9300 comm="syz.0.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 170.748643][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.790910][ T9303] loop0: detected capacity change from 0 to 764 [ 170.801989][ T9287] chnl_net:caif_netlink_parms(): no params data found [ 170.859714][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.924046][ T9310] syz.0.973[9310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.924164][ T9310] syz.0.973[9310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.935680][ T9310] syz.0.973[9310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.969388][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.991902][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.999036][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.006206][ T9287] bridge_slave_0: entered allmulticast mode [ 171.013026][ T9287] bridge_slave_0: entered promiscuous mode [ 171.019906][ T9310] netlink: 272 bytes leftover after parsing attributes in process `syz.0.973'. [ 171.030687][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.037796][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.045268][ T9287] bridge_slave_1: entered allmulticast mode [ 171.052841][ T9287] bridge_slave_1: entered promiscuous mode [ 171.073977][ T9287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.074562][ T9312] loop0: detected capacity change from 0 to 512 [ 171.085507][ T9287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.109880][ T9312] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.974: corrupted in-inode xattr: invalid ea_ino [ 171.123724][ T9312] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.974: couldn't read orphan inode 15 (err -117) [ 171.136445][ T9312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.167543][ T9287] team0: Port device team_slave_0 added [ 171.173496][ T36] bridge_slave_1: left allmulticast mode [ 171.177647][ T8278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.179187][ T36] bridge_slave_1: left promiscuous mode [ 171.193717][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.205258][ T36] bridge_slave_0: left allmulticast mode [ 171.211093][ T36] bridge_slave_0: left promiscuous mode [ 171.216837][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.337685][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.348164][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.358901][ T36] bond0 (unregistering): Released all slaves [ 171.367516][ T9287] team0: Port device team_slave_1 added [ 171.390662][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.397721][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.419867][ T9332] loop0: detected capacity change from 0 to 764 [ 171.423694][ T9287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.443325][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.450362][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.476665][ T9287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.495025][ T36] hsr_slave_0: left promiscuous mode [ 171.501238][ T36] hsr_slave_1: left promiscuous mode [ 171.507265][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.514734][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.522468][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.529910][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.539940][ T36] veth1_macvtap: left promiscuous mode [ 171.545540][ T36] veth0_macvtap: left promiscuous mode [ 171.551122][ T36] veth1_vlan: left promiscuous mode [ 171.556586][ T36] veth0_vlan: left promiscuous mode [ 171.641797][ T36] team0 (unregistering): Port device team_slave_1 removed [ 171.652326][ T36] team0 (unregistering): Port device team_slave_0 removed [ 171.718540][ T9338] loop0: detected capacity change from 0 to 512 [ 171.721514][ T9287] hsr_slave_0: entered promiscuous mode [ 171.730776][ T9338] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.740361][ T9287] hsr_slave_1: entered promiscuous mode [ 171.743486][ T9338] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.983: iget: special inode unallocated [ 171.764004][ T9338] EXT4-fs (loop0): get root inode failed [ 171.769752][ T9338] EXT4-fs (loop0): mount failed [ 172.158368][ T9287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.190782][ T9287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.200761][ T9287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.210895][ T9287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.262354][ T9287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.274492][ T9287] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.284060][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.291205][ T7296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.366651][ T9287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.377271][ T9287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.392437][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.399634][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.640450][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.685227][ T9412] loop2: detected capacity change from 0 to 764 [ 172.791991][ T9287] veth0_vlan: entered promiscuous mode [ 172.800531][ T9287] veth1_vlan: entered promiscuous mode [ 172.902734][ T9287] veth0_macvtap: entered promiscuous mode [ 172.912193][ T9287] veth1_macvtap: entered promiscuous mode [ 172.923545][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.934109][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.943992][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.954491][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.964372][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.974915][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.984884][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.995494][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.087785][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.096595][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.107114][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.117037][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.127599][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.137804][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.148290][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.158136][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.168586][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.226562][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.263165][ T9456] loop0: detected capacity change from 0 to 256 [ 173.270024][ T9456] msdos: Bad value for 'fmask' [ 173.469765][ T9287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.478742][ T9287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.487570][ T9287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.496425][ T9287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.566809][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 173.579506][ T9461] ip6gretap0: entered promiscuous mode [ 173.588969][ T9461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9461 comm=syz.0.993 [ 173.625800][ T9461] loop0: detected capacity change from 0 to 2048 [ 173.789451][ T9461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.024980][ T9483] pimreg: entered allmulticast mode [ 174.096908][ T8278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.123248][ T9488] hub 9-0:1.0: USB hub found [ 174.128284][ T9488] hub 9-0:1.0: 8 ports detected [ 175.064640][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 175.073736][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'. [ 175.088758][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 175.088776][ T29] audit: type=1400 audit(1728396028.660:6066): avc: denied { relabelfrom } for pid=9506 comm="syz.0.1009" name="" dev="pipefs" ino=31590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 175.130350][ T29] audit: type=1326 audit(1728396028.700:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235294dff9 code=0x7ffc0000 [ 175.148701][ T9514] loop3: detected capacity change from 0 to 764 [ 175.156993][ T29] audit: type=1326 audit(1728396028.700:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235294dff9 code=0x7ffc0000 [ 175.183479][ T29] audit: type=1326 audit(1728396028.710:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235294dff9 code=0x7ffc0000 [ 175.183507][ T29] audit: type=1326 audit(1728396028.710:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235294dff9 code=0x7ffc0000 [ 175.183531][ T29] audit: type=1326 audit(1728396028.710:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235294dff9 code=0x7ffc0000 [ 175.254583][ T29] audit: type=1326 audit(1728396028.710:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235294dff9 code=0x7ffc0000 [ 175.254632][ T29] audit: type=1326 audit(1728396028.710:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f235294dff9 code=0x7ffc0000 [ 175.254675][ T29] audit: type=1326 audit(1728396028.710:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f235294e033 code=0x7ffc0000 [ 175.254700][ T29] audit: type=1326 audit(1728396028.710:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9513 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f235294cadf code=0x7ffc0000 [ 175.375003][ T9522] hub 9-0:1.0: USB hub found [ 175.379960][ T9522] hub 9-0:1.0: 8 ports detected [ 175.410212][ T9524] loop0: detected capacity change from 0 to 128 [ 175.421751][ T9524] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 175.436857][ T9524] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.449974][ T9524] ext2 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.491144][ T9524] sctp: [Deprecated]: syz.0.1015 (pid 9524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.491144][ T9524] Use struct sctp_sack_info instead [ 175.867377][ T2136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.953149][ T2136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.012049][ T2136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.062626][ T2136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.086032][ T9536] chnl_net:caif_netlink_parms(): no params data found [ 176.142472][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.149711][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.156905][ T9536] bridge_slave_0: entered allmulticast mode [ 176.163426][ T9536] bridge_slave_0: entered promiscuous mode [ 176.170367][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.177474][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.184858][ T9536] bridge_slave_1: entered allmulticast mode [ 176.191293][ T9536] bridge_slave_1: entered promiscuous mode [ 176.215943][ T9536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.233838][ T9536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.250470][ T2136] bridge_slave_1: left allmulticast mode [ 176.256254][ T2136] bridge_slave_1: left promiscuous mode [ 176.261996][ T2136] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.270213][ T2136] bridge_slave_0: left allmulticast mode [ 176.270298][ T8278] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.275869][ T2136] bridge_slave_0: left promiscuous mode [ 176.275959][ T2136] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.435757][ T2136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.447391][ T2136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.456466][ T9562] hub 9-0:1.0: USB hub found [ 176.461412][ T9562] hub 9-0:1.0: 8 ports detected [ 176.468076][ T2136] bond0 (unregistering): Released all slaves [ 176.528396][ T9536] team0: Port device team_slave_0 added [ 176.535329][ T9536] team0: Port device team_slave_1 added [ 176.562768][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.569938][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.596220][ T9536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.606963][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.616645][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.617242][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.631529][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.657602][ T9536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.674953][ T2136] hsr_slave_0: left promiscuous mode [ 176.680763][ T2136] hsr_slave_1: left promiscuous mode [ 176.686415][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.693903][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.701943][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.709402][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.721515][ T2136] veth1_macvtap: left promiscuous mode [ 176.727031][ T2136] veth0_macvtap: left promiscuous mode [ 176.732605][ T2136] veth1_vlan: left promiscuous mode [ 176.737869][ T2136] veth0_vlan: left promiscuous mode [ 176.832758][ T2136] team0 (unregistering): Port device team_slave_1 removed [ 176.843575][ T2136] team0 (unregistering): Port device team_slave_0 removed [ 176.923304][ T9536] hsr_slave_0: entered promiscuous mode [ 176.936963][ T9536] hsr_slave_1: entered promiscuous mode [ 176.945323][ T9536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.967173][ T9536] Cannot create hsr debugfs directory [ 177.148581][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 177.167129][ T9604] Zero length message leads to an empty skb [ 177.211135][ T9604] loop2: detected capacity change from 0 to 2048 [ 177.231999][ T9567] chnl_net:caif_netlink_parms(): no params data found [ 177.279951][ T9604] loop2: p1 < > p2 p3 < p5 > p4 [ 177.284949][ T9604] loop2: partition table partially beyond EOD, truncated [ 177.301623][ T9604] loop2: p1 start 4278190080 is beyond EOD, truncated [ 177.308633][ T9604] loop2: p2 start 16908800 is beyond EOD, truncated [ 177.331202][ T2136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.344989][ T9604] loop2: p4 start 11326 is beyond EOD, truncated [ 177.351518][ T9604] loop2: p5 start 16908800 is beyond EOD, truncated [ 177.360030][ T2967] loop2: p1 < > p2 p3 < p5 > p4 [ 177.365129][ T2967] loop2: partition table partially beyond EOD, truncated [ 177.381418][ T2967] loop2: p1 start 4278190080 is beyond EOD, truncated [ 177.388366][ T2967] loop2: p2 start 16908800 is beyond EOD, truncated [ 177.420069][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.427496][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.436268][ T2967] loop2: p4 start 11326 is beyond EOD, truncated [ 177.442884][ T2967] loop2: p5 start 16908800 is beyond EOD, truncated [ 177.450978][ T9567] bridge_slave_0: entered allmulticast mode [ 177.457924][ T9567] bridge_slave_0: entered promiscuous mode [ 177.472001][ T2136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.491818][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 177.524811][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 177.560134][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.567263][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.568839][ T9629] loop2: detected capacity change from 0 to 764 [ 177.574772][ T9567] bridge_slave_1: entered allmulticast mode [ 177.590036][ T9567] bridge_slave_1: entered promiscuous mode [ 177.608894][ T2136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.648240][ T9536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.670174][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.683660][ T2136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.713296][ T9536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.724958][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.741467][ T9536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.750433][ T9536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.769718][ T9567] team0: Port device team_slave_0 added [ 177.776438][ T9567] team0: Port device team_slave_1 added [ 177.812140][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.819205][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.845294][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.871427][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.878560][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.904761][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.928464][ T2136] bridge_slave_1: left allmulticast mode [ 177.934179][ T2136] bridge_slave_1: left promiscuous mode [ 177.939912][ T2136] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.949683][ T2136] bridge_slave_0: left allmulticast mode [ 177.955385][ T2136] bridge_slave_0: left promiscuous mode [ 177.961877][ T2136] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.069625][ T2136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.080711][ T2136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.091293][ T2136] bond0 (unregistering): Released all slaves [ 178.144264][ T9567] hsr_slave_0: entered promiscuous mode [ 178.151274][ T9567] hsr_slave_1: entered promiscuous mode [ 178.171788][ T9567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.193018][ T9567] Cannot create hsr debugfs directory [ 178.204725][ T2136] hsr_slave_0: left promiscuous mode [ 178.210822][ T2136] hsr_slave_1: left promiscuous mode [ 178.239020][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.246546][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.254465][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.262192][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.295348][ T2136] veth1_macvtap: left promiscuous mode [ 178.300948][ T2136] veth0_macvtap: left promiscuous mode [ 178.306654][ T2136] veth1_vlan: left promiscuous mode [ 178.312004][ T2136] veth0_vlan: left promiscuous mode [ 178.542893][ T2136] team0 (unregistering): Port device team_slave_1 removed [ 178.567470][ T2136] team0 (unregistering): Port device team_slave_0 removed [ 178.651028][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.656602][ T9676] loop0: detected capacity change from 0 to 512 [ 178.669906][ T9676] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1039: corrupted in-inode xattr: invalid ea_ino [ 178.686583][ T9676] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1039: couldn't read orphan inode 15 (err -117) [ 178.701029][ T9676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.710157][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.743529][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.750796][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.762573][ T8278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.774586][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.781691][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.826914][ T9690] hub 9-0:1.0: USB hub found [ 178.832463][ T9536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.843413][ T9690] hub 9-0:1.0: 8 ports detected [ 178.906683][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.180530][ T9536] veth0_vlan: entered promiscuous mode [ 179.190025][ T9536] veth1_vlan: entered promiscuous mode [ 179.274052][ T9536] veth0_macvtap: entered promiscuous mode [ 179.301721][ T9536] veth1_macvtap: entered promiscuous mode [ 179.320305][ T9567] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.344767][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.355459][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.365372][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.376469][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.386335][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.396870][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.416715][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.424481][ T9567] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.434404][ T9567] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.447292][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.457997][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.468401][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.479205][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.489166][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.499713][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.511382][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.522665][ T9567] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.547031][ T9536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.556026][ T9536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.564882][ T9536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.573701][ T9536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.612274][ T9743] loop2: detected capacity change from 0 to 512 [ 179.621109][ T9743] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 179.713165][ T9567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.727899][ T9567] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.823714][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.830893][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.842934][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.850039][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.871080][ T9567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.881633][ T9567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.030888][ T9567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.169401][ T9567] veth0_vlan: entered promiscuous mode [ 180.182037][ T9567] veth1_vlan: entered promiscuous mode [ 180.201002][ T9567] veth0_macvtap: entered promiscuous mode [ 180.202957][ T9791] loop1: detected capacity change from 0 to 128 [ 180.208930][ T9567] veth1_macvtap: entered promiscuous mode [ 180.218831][ T9791] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 180.228858][ T9791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.233080][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.247687][ T9791] ext2 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.251495][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.288589][ T9791] sctp: [Deprecated]: syz.1.1051 (pid 9791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.288589][ T9791] Use struct sctp_sack_info instead [ 180.293406][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.320149][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.330192][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.341017][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.351026][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.361598][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.372721][ T9536] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.373608][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.395391][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.405989][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.415930][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.426443][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.436348][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.446977][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.457027][ T9567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.469885][ T9567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.492010][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 180.492025][ T29] audit: type=1400 audit(1728396034.060:6312): avc: denied { module_load } for pid=9793 comm="syz.1.1052" path="/sys/kernel/notes" dev="sysfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 180.519476][ T9794] Invalid ELF header magic: != ELF [ 180.522871][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.538875][ T9567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.547765][ T9567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.556499][ T9567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.565260][ T9567] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.580435][ T9794] capability: warning: `syz.1.1052' uses deprecated v2 capabilities in a way that may be insecure [ 180.641353][ T9797] loop2: detected capacity change from 0 to 2048 [ 180.661819][ T29] audit: type=1326 audit(1728396034.230:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.688028][ T29] audit: type=1326 audit(1728396034.230:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.711659][ T29] audit: type=1326 audit(1728396034.230:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.735115][ T29] audit: type=1326 audit(1728396034.230:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.758934][ T29] audit: type=1326 audit(1728396034.230:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9799 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.789605][ T29] audit: type=1326 audit(1728396034.260:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.813124][ T29] audit: type=1326 audit(1728396034.260:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.836900][ T29] audit: type=1326 audit(1728396034.260:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.860431][ T29] audit: type=1326 audit(1728396034.260:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 180.914473][ T9812] hub 9-0:1.0: USB hub found [ 180.919611][ T9812] hub 9-0:1.0: 8 ports detected [ 180.947606][ T9816] sctp: [Deprecated]: syz.4.1061 (pid 9816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.947606][ T9816] Use struct sctp_sack_info instead [ 181.287326][ T9842] SELinux: failed to load policy [ 181.304843][ T9845] hub 9-0:1.0: USB hub found [ 181.310057][ T9845] hub 9-0:1.0: 8 ports detected [ 181.332609][ T9847] FAULT_INJECTION: forcing a failure. [ 181.332609][ T9847] name failslab, interval 1, probability 0, space 0, times 0 [ 181.345347][ T9847] CPU: 0 UID: 0 PID: 9847 Comm: syz.2.1075 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 181.356066][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.366175][ T9847] Call Trace: [ 181.369458][ T9847] [ 181.372395][ T9847] dump_stack_lvl+0xf2/0x150 [ 181.377092][ T9847] dump_stack+0x15/0x20 [ 181.381259][ T9847] should_fail_ex+0x223/0x230 [ 181.385987][ T9847] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 181.391444][ T9847] should_failslab+0x8f/0xb0 [ 181.396150][ T9847] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 181.401896][ T9847] hugetlbfs_alloc_inode+0xbc/0x100 [ 181.407148][ T9847] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 181.412975][ T9847] alloc_inode+0x3c/0x160 [ 181.417313][ T9847] new_inode+0x1e/0x100 [ 181.421563][ T9847] hugetlbfs_get_inode+0x82/0x2b0 [ 181.426681][ T9847] hugetlb_file_setup+0x188/0x3c0 [ 181.431905][ T9847] ksys_mmap_pgoff+0x172/0x330 [ 181.436687][ T9847] x64_sys_call+0x1884/0x2d60 [ 181.441408][ T9847] do_syscall_64+0xc9/0x1c0 [ 181.445932][ T9847] ? clear_bhb_loop+0x55/0xb0 [ 181.450763][ T9847] ? clear_bhb_loop+0x55/0xb0 [ 181.455476][ T9847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.461485][ T9847] RIP: 0033:0x7f3b4c49dff9 [ 181.465968][ T9847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.485650][ T9847] RSP: 002b:00007f3b4b111038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 181.494094][ T9847] RAX: ffffffffffffffda RBX: 00007f3b4c655f80 RCX: 00007f3b4c49dff9 [ 181.502163][ T9847] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 [ 181.510144][ T9847] RBP: 00007f3b4b111090 R08: ffffffffffffffff R09: 0000000000000000 [ 181.518236][ T9847] R10: 000000000005d032 R11: 0000000000000246 R12: 0000000000000001 [ 181.526275][ T9847] R13: 0000000000000000 R14: 00007f3b4c655f80 R15: 00007ffdbc7bb8d8 [ 181.534270][ T9847] [ 181.575612][ T9851] sctp: [Deprecated]: syz.4.1074 (pid 9851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.575612][ T9851] Use struct sctp_sack_info instead [ 181.640721][ T9861] loop4: detected capacity change from 0 to 164 [ 181.671563][ T9863] loop4: detected capacity change from 0 to 764 [ 182.045058][ T9878] FAULT_INJECTION: forcing a failure. [ 182.045058][ T9878] name failslab, interval 1, probability 0, space 0, times 0 [ 182.057821][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.4.1085 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 182.068523][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.078757][ T9878] Call Trace: [ 182.082077][ T9878] [ 182.085051][ T9878] dump_stack_lvl+0xf2/0x150 [ 182.089779][ T9878] dump_stack+0x15/0x20 [ 182.094050][ T9878] should_fail_ex+0x223/0x230 [ 182.098812][ T9878] ? mas_alloc_nodes+0x1d3/0x4a0 [ 182.103886][ T9878] should_failslab+0x8f/0xb0 [ 182.108545][ T9878] kmem_cache_alloc_noprof+0x4c/0x290 [ 182.114186][ T9878] mas_alloc_nodes+0x1d3/0x4a0 [ 182.118993][ T9878] mas_preallocate+0x449/0x650 [ 182.123803][ T9878] __split_vma+0x244/0x6a0 [ 182.128353][ T9878] vms_gather_munmap_vmas+0x175/0x7a0 [ 182.133767][ T9878] ? mas_walk+0x204/0x320 [ 182.138142][ T9878] mmap_region+0x385/0x16e0 [ 182.142698][ T9878] do_mmap+0x718/0xb60 [ 182.146848][ T9878] __se_sys_remap_file_pages+0x413/0x650 [ 182.152527][ T9878] ? fput+0x14e/0x190 [ 182.156623][ T9878] ? ksys_write+0x17a/0x1b0 [ 182.161241][ T9878] __x64_sys_remap_file_pages+0x67/0x80 [ 182.166822][ T9878] x64_sys_call+0x22c4/0x2d60 [ 182.171540][ T9878] do_syscall_64+0xc9/0x1c0 [ 182.176124][ T9878] ? clear_bhb_loop+0x55/0xb0 [ 182.180865][ T9878] ? clear_bhb_loop+0x55/0xb0 [ 182.185577][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.191731][ T9878] RIP: 0033:0x7fbab960dff9 [ 182.196218][ T9878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.215853][ T9878] RSP: 002b:00007fbab8287038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 182.224565][ T9878] RAX: ffffffffffffffda RBX: 00007fbab97c5f80 RCX: 00007fbab960dff9 [ 182.232564][ T9878] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 182.240563][ T9878] RBP: 00007fbab8287090 R08: 0000000000000000 R09: 0000000000000000 [ 182.248567][ T9878] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 182.256600][ T9878] R13: 0000000000000000 R14: 00007fbab97c5f80 R15: 00007ffdedcc3398 [ 182.264623][ T9878] [ 182.289369][ T9905] loop0: detected capacity change from 0 to 512 [ 182.302618][ T9905] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1086: corrupted in-inode xattr: invalid ea_ino [ 182.316437][ T9905] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1086: couldn't read orphan inode 15 (err -117) [ 182.331435][ T9905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.360079][ T8278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.435369][ T9918] sctp: [Deprecated]: syz.0.1090 (pid 9918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.435369][ T9918] Use struct sctp_sack_info instead [ 182.455051][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 182.588311][ T9920] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 183.183063][ T9947] FAULT_INJECTION: forcing a failure. [ 183.183063][ T9947] name failslab, interval 1, probability 0, space 0, times 0 [ 183.195790][ T9947] CPU: 1 UID: 0 PID: 9947 Comm: syz.4.1102 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 183.206744][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.216853][ T9947] Call Trace: [ 183.220144][ T9947] [ 183.223115][ T9947] dump_stack_lvl+0xf2/0x150 [ 183.227717][ T9947] dump_stack+0x15/0x20 [ 183.231895][ T9947] should_fail_ex+0x223/0x230 [ 183.236632][ T9947] ? security_file_alloc+0x32/0x100 [ 183.241875][ T9947] should_failslab+0x8f/0xb0 [ 183.246493][ T9947] kmem_cache_alloc_noprof+0x4c/0x290 [ 183.251908][ T9947] security_file_alloc+0x32/0x100 [ 183.256960][ T9947] alloc_empty_file+0x121/0x2f0 [ 183.261912][ T9947] alloc_file_pseudo+0xc3/0x140 [ 183.266842][ T9947] __shmem_file_setup+0x1bb/0x1f0 [ 183.271886][ T9947] shmem_file_setup+0x3b/0x50 [ 183.276624][ T9947] __se_sys_memfd_create+0x31d/0x5c0 [ 183.281952][ T9947] __x64_sys_memfd_create+0x31/0x40 [ 183.287172][ T9947] x64_sys_call+0x2891/0x2d60 [ 183.291929][ T9947] do_syscall_64+0xc9/0x1c0 [ 183.296438][ T9947] ? clear_bhb_loop+0x55/0xb0 [ 183.301214][ T9947] ? clear_bhb_loop+0x55/0xb0 [ 183.305967][ T9947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.311899][ T9947] RIP: 0033:0x7fbab960dff9 [ 183.316390][ T9947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.336079][ T9947] RSP: 002b:00007fbab8286e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 183.344544][ T9947] RAX: ffffffffffffffda RBX: 0000000000000529 RCX: 00007fbab960dff9 [ 183.352571][ T9947] RDX: 00007fbab8286ef0 RSI: 0000000000000000 RDI: 00007fbab9680b02 [ 183.360558][ T9947] RBP: 0000000020000e00 R08: 00007fbab8286bb7 R09: 00007fbab8286e40 [ 183.368691][ T9947] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000 [ 183.376677][ T9947] R13: 00007fbab8286ef0 R14: 00007fbab8286eb0 R15: 00000000200003c0 [ 183.384665][ T9947] [ 183.425761][ T9949] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 183.434168][ T9949] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 183.443640][ T9951] Cannot find del_set index 0 as target [ 183.451428][ T9951] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 183.470935][ T9951] team0: Port device netdevsim1 added [ 183.479589][ T9951] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 183.493907][ T9951] team0: Port device netdevsim1 removed [ 183.502530][ T9951] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 183.505025][ T9955] loop4: detected capacity change from 0 to 764 [ 183.515298][ T9951] syz.1.1104[9951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.518022][ T9951] syz.1.1104[9951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.699800][ T9969] loop1: detected capacity change from 0 to 128 [ 183.708471][ T9969] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 183.725061][ T9969] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.737516][ T9969] ext2 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.773189][ T9969] sctp: [Deprecated]: syz.1.1113 (pid 9969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.773189][ T9969] Use struct sctp_sack_info instead [ 183.809366][ T9536] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.856770][ T9975] FAULT_INJECTION: forcing a failure. [ 183.856770][ T9975] name failslab, interval 1, probability 0, space 0, times 0 [ 183.869500][ T9975] CPU: 1 UID: 0 PID: 9975 Comm: syz.1.1115 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 183.880200][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.890390][ T9975] Call Trace: [ 183.893761][ T9975] [ 183.896703][ T9975] dump_stack_lvl+0xf2/0x150 [ 183.901316][ T9975] dump_stack+0x15/0x20 [ 183.905492][ T9975] should_fail_ex+0x223/0x230 [ 183.910242][ T9975] ? ip_options_get+0x51/0x330 [ 183.915112][ T9975] should_failslab+0x8f/0xb0 [ 183.919727][ T9975] __kmalloc_noprof+0xa5/0x370 [ 183.924566][ T9975] ip_options_get+0x51/0x330 [ 183.929194][ T9975] do_ip_setsockopt+0x1b23/0x2340 [ 183.934291][ T9975] ? release_sock+0x117/0x150 [ 183.938995][ T9975] ? selinux_netlbl_socket_setsockopt+0x253/0x2d0 [ 183.945486][ T9975] ip_setsockopt+0x63/0x100 [ 183.950034][ T9975] ipv6_setsockopt+0xef/0x130 [ 183.954818][ T9975] tcp_setsockopt+0x93/0xb0 [ 183.959434][ T9975] sock_common_setsockopt+0x64/0x80 [ 183.964653][ T9975] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 183.970574][ T9975] __sys_setsockopt+0x1cc/0x240 [ 183.975542][ T9975] __x64_sys_setsockopt+0x66/0x80 [ 183.980602][ T9975] x64_sys_call+0x278d/0x2d60 [ 183.985332][ T9975] do_syscall_64+0xc9/0x1c0 [ 183.989875][ T9975] ? clear_bhb_loop+0x55/0xb0 [ 183.995897][ T9975] ? clear_bhb_loop+0x55/0xb0 [ 184.000611][ T9975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.006527][ T9975] RIP: 0033:0x7f7210bddff9 [ 184.011230][ T9975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.031081][ T9975] RSP: 002b:00007f720f851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.039691][ T9975] RAX: ffffffffffffffda RBX: 00007f7210d95f80 RCX: 00007f7210bddff9 [ 184.047672][ T9975] RDX: 0000000000000004 RSI: 0004000000000000 RDI: 0000000000000007 [ 184.055698][ T9975] RBP: 00007f720f851090 R08: 0000000000000000 R09: 0000000000000000 [ 184.063753][ T9975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.071733][ T9975] R13: 0000000000000000 R14: 00007f7210d95f80 R15: 00007ffd36742178 [ 184.079810][ T9975] [ 184.131000][ T9977] hub 9-0:1.0: USB hub found [ 184.135719][ T9977] hub 9-0:1.0: 8 ports detected [ 184.245245][ T9996] loop0: detected capacity change from 0 to 128 [ 184.260199][ T9996] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 184.273581][ T9996] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.287373][ T9996] ext2 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.325578][ T9996] sctp: [Deprecated]: syz.0.1124 (pid 9996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.325578][ T9996] Use struct sctp_sack_info instead [ 184.354079][ T8278] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.418923][T10004] loop0: detected capacity change from 0 to 128 [ 184.492946][T10005] loop0: detected capacity change from 0 to 512 [ 184.508686][T10005] EXT4-fs: Ignoring removed bh option [ 184.515659][T10005] EXT4-fs error (device loop0): __ext4_iget:4952: inode #15: block 1803188595: comm syz.0.1127: invalid block [ 184.529247][T10005] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1127: couldn't read orphan inode 15 (err -117) [ 184.543071][T10005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.219510][T10023] hub 9-0:1.0: USB hub found [ 185.224299][T10023] hub 9-0:1.0: 8 ports detected [ 185.259605][T10025] loop4: detected capacity change from 0 to 128 [ 185.269949][T10025] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 185.289409][T10025] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.303212][T10025] ext2 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.349569][T10025] sctp: [Deprecated]: syz.4.1136 (pid 10025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.349569][T10025] Use struct sctp_sack_info instead [ 185.373251][ T8278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.383954][ T9567] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.438536][T10035] loop4: detected capacity change from 0 to 512 [ 185.455277][T10035] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1138: corrupted in-inode xattr: invalid ea_ino [ 185.479625][T10035] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1138: couldn't read orphan inode 15 (err -117) [ 185.493633][T10035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.512048][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 185.512063][ T29] audit: type=1400 audit(1728396039.080:6677): avc: denied { create } for pid=10034 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.512321][T10040] bond1: entered promiscuous mode [ 185.543101][T10040] bond1: entered allmulticast mode [ 185.549786][T10040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.562935][ T9567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.563916][T10040] bond1 (unregistering): Released all slaves [ 185.583373][T10046] loop1: detected capacity change from 0 to 2048 [ 185.639899][ T29] audit: type=1326 audit(1728396039.210:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.4.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 185.663844][ T29] audit: type=1326 audit(1728396039.210:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.4.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 185.687537][ T29] audit: type=1326 audit(1728396039.210:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.4.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 185.711046][ T29] audit: type=1326 audit(1728396039.210:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.4.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 185.751425][T10052] hub 9-0:1.0: USB hub found [ 185.760255][T10052] hub 9-0:1.0: 8 ports detected [ 185.766841][ T29] audit: type=1400 audit(1728396039.330:6682): avc: denied { execmem } for pid=10053 comm="syz.0.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 185.835777][ T29] audit: type=1326 audit(1728396039.400:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 185.865192][T10059] loop2: detected capacity change from 0 to 128 [ 185.882728][ T29] audit: type=1326 audit(1728396039.450:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 185.906309][ T29] audit: type=1326 audit(1728396039.450:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 185.907148][T10059] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 185.929954][ T29] audit: type=1326 audit(1728396039.450:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab960dff9 code=0x7ffc0000 [ 185.942833][T10059] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.126717][T10059] ext2 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.176811][T10059] sctp: [Deprecated]: syz.2.1149 (pid 10059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.176811][T10059] Use struct sctp_sack_info instead [ 186.270683][ T8282] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.435067][T10073] loop2: detected capacity change from 0 to 764 [ 186.690094][T10096] loop0: detected capacity change from 0 to 1024 [ 186.707853][T10083] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 186.714425][T10083] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 186.722193][T10083] vhci_hcd vhci_hcd.0: Device attached [ 186.739607][T10096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.752530][T10103] vhci_hcd: connection closed [ 186.752837][ T162] vhci_hcd: stop threads [ 186.761857][ T162] vhci_hcd: release socket [ 186.766323][ T162] vhci_hcd: disconnect device [ 186.813583][T10085] chnl_net:caif_netlink_parms(): no params data found [ 186.826649][ T3283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.868748][T10085] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.876018][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.883929][T10085] bridge_slave_0: entered allmulticast mode [ 186.885164][ T8278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.890628][T10085] bridge_slave_0: entered promiscuous mode [ 186.915860][ T3283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.927565][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.934652][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.942138][T10085] bridge_slave_1: entered allmulticast mode [ 186.948784][T10085] bridge_slave_1: entered promiscuous mode [ 186.965850][T10085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.976468][T10085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.988845][ T3283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.010887][T10085] team0: Port device team_slave_0 added [ 187.017675][T10085] team0: Port device team_slave_1 added [ 187.034408][T10085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.041505][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.067449][T10085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.081383][ T3283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.092799][T10085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.099842][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.126059][T10085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.153418][T10085] hsr_slave_0: entered promiscuous mode [ 187.159786][T10085] hsr_slave_1: entered promiscuous mode [ 187.165818][T10085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.173478][T10085] Cannot create hsr debugfs directory [ 187.220642][ T3283] bridge_slave_1: left allmulticast mode [ 187.226336][ T3283] bridge_slave_1: left promiscuous mode [ 187.232011][ T3283] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.240439][ T3283] bridge_slave_0: left allmulticast mode [ 187.246083][ T3283] bridge_slave_0: left promiscuous mode [ 187.251818][ T3283] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.300165][T10121] loop4: detected capacity change from 0 to 512 [ 187.309103][T10121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.317906][T10121] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 187.359982][ T3283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.370809][ T3283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.381322][ T3283] bond0 (unregistering): Released all slaves [ 187.405047][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 187.418501][T10122] ip6gretap0: entered promiscuous mode [ 187.424955][T10122] macvtap1: entered promiscuous mode [ 187.430490][T10122] macvtap1: entered allmulticast mode [ 187.435908][T10122] ip6gretap0: entered allmulticast mode [ 187.450953][T10121] ip6gretap0: left allmulticast mode [ 187.456380][T10121] ip6gretap0: left promiscuous mode [ 187.476575][ T3283] hsr_slave_0: left promiscuous mode [ 187.484400][ T3283] hsr_slave_1: left promiscuous mode [ 187.537839][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.556513][ T3283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.564225][ T3283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.606918][ T3283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.614512][ T3283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.623433][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.744038][ T3283] veth1_macvtap: left promiscuous mode [ 187.749680][ T3283] veth0_macvtap: left promiscuous mode [ 187.755362][ T3283] veth1_vlan: left promiscuous mode [ 187.760706][ T3283] veth0_vlan: left promiscuous mode [ 187.802029][T10143] hub 9-0:1.0: USB hub found [ 187.807376][T10143] hub 9-0:1.0: 8 ports detected [ 187.875766][ T3283] pimreg (unregistering): left allmulticast mode [ 187.961498][ T3283] team0 (unregistering): Port device team_slave_1 removed [ 187.976440][ T3283] team0 (unregistering): Port device team_slave_0 removed [ 188.184875][T10189] hub 9-0:1.0: USB hub found [ 188.194394][T10189] hub 9-0:1.0: 8 ports detected [ 188.370264][T10085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.379579][T10085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.390441][T10085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.400300][T10085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.444192][T10085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.459597][T10085] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.469409][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.476671][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.495819][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.503088][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.572444][T10085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.660255][T10085] veth0_vlan: entered promiscuous mode [ 188.682797][T10085] veth1_vlan: entered promiscuous mode [ 188.722931][T10085] veth0_macvtap: entered promiscuous mode [ 188.744817][T10085] veth1_macvtap: entered promiscuous mode [ 188.769326][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.779872][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.789727][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.800189][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.810163][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.820672][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.830545][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.841074][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.854901][T10085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.863601][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.874179][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.884119][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.894705][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.904629][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.915214][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.925177][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.935676][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.955782][T10085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.971981][T10085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.980753][T10085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.989523][T10085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.998366][T10085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.279738][T10291] syz.3.1192[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.279952][T10291] syz.3.1192[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.291792][T10291] syz.3.1192[10291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.319254][T10295] hub 9-0:1.0: USB hub found [ 189.335778][T10295] hub 9-0:1.0: 8 ports detected [ 189.356588][T10297] loop3: detected capacity change from 0 to 512 [ 189.363227][T10297] journal_path: Lookup failure for './file0' [ 189.369392][T10297] EXT4-fs: error: could not find journal device path [ 189.977465][T10321] hub 9-0:1.0: USB hub found [ 189.986421][T10321] hub 9-0:1.0: 8 ports detected [ 190.111077][T10338] loop0: detected capacity change from 0 to 512 [ 190.133281][T10338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.146722][T10338] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.213179][ T8278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.364407][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.380201][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.455203][T10359] hub 9-0:1.0: USB hub found [ 190.461518][T10359] hub 9-0:1.0: 8 ports detected [ 190.554590][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 190.554608][ T29] audit: type=1400 audit(1728396044.120:7042): avc: denied { create } for pid=10367 comm="syz.3.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.584459][ T29] audit: type=1400 audit(1728396044.160:7043): avc: denied { setopt } for pid=10367 comm="syz.3.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.604665][ T29] audit: type=1400 audit(1728396044.160:7044): avc: denied { bind } for pid=10367 comm="syz.3.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.624521][ T29] audit: type=1400 audit(1728396044.160:7045): avc: denied { listen } for pid=10367 comm="syz.3.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.644410][ T29] audit: type=1400 audit(1728396044.160:7046): avc: denied { connect } for pid=10367 comm="syz.3.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.851681][ T29] audit: type=1400 audit(1728396044.420:7047): avc: denied { getopt } for pid=10379 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.245425][ T29] audit: type=1400 audit(1728396044.810:7048): avc: denied { create } for pid=10397 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 191.280034][T10399] syz.3.1234[10399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.280115][T10399] syz.3.1234[10399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.282867][T10396] hub 9-0:1.0: USB hub found [ 191.308091][ T29] audit: type=1400 audit(1728396044.850:7049): avc: denied { bind } for pid=10397 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.327658][ T29] audit: type=1400 audit(1728396044.850:7050): avc: denied { name_bind } for pid=10397 comm="syz.3.1234" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 191.343413][T10396] hub 9-0:1.0: 8 ports detected [ 191.349546][ T29] audit: type=1400 audit(1728396044.850:7051): avc: denied { node_bind } for pid=10397 comm="syz.3.1234" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 191.535618][T10415] loop1: detected capacity change from 0 to 128 [ 191.555182][T10415] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 191.564666][T10415] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.578126][T10415] ext2 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.621143][T10415] sctp: [Deprecated]: syz.1.1238 (pid 10415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.621143][T10415] Use struct sctp_sack_info instead [ 191.743816][ T9536] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.012913][T10426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 192.019478][T10426] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 192.027270][T10426] vhci_hcd vhci_hcd.0: Device attached [ 192.091985][T10435] vhci_hcd: connection closed [ 192.092252][ T28] vhci_hcd: stop threads [ 192.101423][ T28] vhci_hcd: release socket [ 192.105947][ T28] vhci_hcd: disconnect device [ 192.143984][T10445] loop1: detected capacity change from 0 to 512 [ 192.152091][T10445] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1245: corrupted in-inode xattr: invalid ea_ino [ 192.165883][T10445] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1245: couldn't read orphan inode 15 (err -117) [ 192.178661][T10445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.201234][ T9536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.366447][T10452] FAULT_INJECTION: forcing a failure. [ 192.366447][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.379733][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.0.1247 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 192.390790][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.400854][T10452] Call Trace: [ 192.404138][T10452] [ 192.407131][T10452] dump_stack_lvl+0xf2/0x150 [ 192.411864][T10452] dump_stack+0x15/0x20 [ 192.416024][T10452] should_fail_ex+0x223/0x230 [ 192.420718][T10452] should_fail+0xb/0x10 [ 192.424886][T10452] should_fail_usercopy+0x1a/0x20 [ 192.430094][T10452] _copy_to_user+0x1e/0xa0 [ 192.434612][T10452] simple_read_from_buffer+0xa0/0x110 [ 192.440065][T10452] proc_fail_nth_read+0xf9/0x140 [ 192.445041][T10452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.450606][T10452] vfs_read+0x195/0x720 [ 192.454856][T10452] ? __rcu_read_unlock+0x4e/0x70 [ 192.460010][T10452] ? __fget_files+0x1d4/0x210 [ 192.464707][T10452] ksys_read+0xeb/0x1b0 [ 192.468912][T10452] __x64_sys_read+0x42/0x50 [ 192.473512][T10452] x64_sys_call+0x27d3/0x2d60 [ 192.478212][T10452] do_syscall_64+0xc9/0x1c0 [ 192.482750][T10452] ? clear_bhb_loop+0x55/0xb0 [ 192.487474][T10452] ? clear_bhb_loop+0x55/0xb0 [ 192.492210][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.498158][T10452] RIP: 0033:0x7fa9b0b5ca3c [ 192.502679][T10452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 192.522412][T10452] RSP: 002b:00007fa9af7b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.530975][T10452] RAX: ffffffffffffffda RBX: 00007fa9b0d16058 RCX: 00007fa9b0b5ca3c [ 192.538977][T10452] RDX: 000000000000000f RSI: 00007fa9af7b60a0 RDI: 0000000000000005 [ 192.546968][T10452] RBP: 00007fa9af7b6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.554970][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.562989][T10452] R13: 0000000000000001 R14: 00007fa9b0d16058 R15: 00007fff77ffab18 [ 192.570967][T10452] [ 192.594634][T10454] hub 9-0:1.0: USB hub found [ 192.600642][T10454] hub 9-0:1.0: 8 ports detected [ 192.637610][T10458] loop0: detected capacity change from 0 to 128 [ 192.644659][T10458] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 192.654198][T10458] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.666655][T10458] ext2 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.702819][T10458] sctp: [Deprecated]: syz.0.1250 (pid 10458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.702819][T10458] Use struct sctp_sack_info instead [ 192.727665][ T8278] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.848030][T10469] FAULT_INJECTION: forcing a failure. [ 192.848030][T10469] name failslab, interval 1, probability 0, space 0, times 0 [ 192.860735][T10469] CPU: 1 UID: 0 PID: 10469 Comm: syz.3.1254 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 192.871618][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.881727][T10469] Call Trace: [ 192.885027][T10469] [ 192.888025][T10469] dump_stack_lvl+0xf2/0x150 [ 192.892642][T10469] dump_stack+0x15/0x20 [ 192.896986][T10469] should_fail_ex+0x223/0x230 [ 192.901728][T10469] ? dst_alloc+0xc0/0x100 [ 192.906099][T10469] should_failslab+0x8f/0xb0 [ 192.910703][T10469] kmem_cache_alloc_noprof+0x4c/0x290 [ 192.916117][T10469] dst_alloc+0xc0/0x100 [ 192.920293][T10469] ip_route_output_key_hash_rcu+0xb90/0x12d0 [ 192.926304][T10469] ip_route_output_flow+0x76/0x120 [ 192.931444][T10469] udp_sendmsg+0xe5d/0x12f0 [ 192.936000][T10469] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 192.941640][T10469] ? avc_has_perm+0xd4/0x160 [ 192.946254][T10469] ? __pfx_udp_sendmsg+0x10/0x10 [ 192.951373][T10469] inet_sendmsg+0xaf/0xd0 [ 192.955714][T10469] __sock_sendmsg+0x102/0x180 [ 192.960417][T10469] ____sys_sendmsg+0x312/0x410 [ 192.965257][T10469] __sys_sendmmsg+0x259/0x500 [ 192.969988][T10469] __x64_sys_sendmmsg+0x57/0x70 [ 192.974903][T10469] x64_sys_call+0xa49/0x2d60 [ 192.979704][T10469] do_syscall_64+0xc9/0x1c0 [ 192.984224][T10469] ? clear_bhb_loop+0x55/0xb0 [ 192.988928][T10469] ? clear_bhb_loop+0x55/0xb0 [ 192.993699][T10469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.999637][T10469] RIP: 0033:0x7fa139a0dff9 [ 193.004184][T10469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.023940][T10469] RSP: 002b:00007fa138681038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 193.032507][T10469] RAX: ffffffffffffffda RBX: 00007fa139bc5f80 RCX: 00007fa139a0dff9 [ 193.040489][T10469] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000006 [ 193.048726][T10469] RBP: 00007fa138681090 R08: 0000000000000000 R09: 0000000000000000 [ 193.056731][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.064741][T10469] R13: 0000000000000000 R14: 00007fa139bc5f80 R15: 00007ffcb785cec8 [ 193.072816][T10469] [ 193.258076][T10490] hub 9-0:1.0: USB hub found [ 193.262865][T10490] hub 9-0:1.0: 8 ports detected [ 193.296339][T10492] loop0: detected capacity change from 0 to 128 [ 193.303670][T10492] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 193.421543][T10492] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.434106][T10492] ext2 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.473550][T10492] sctp: [Deprecated]: syz.0.1261 (pid 10492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.473550][T10492] Use struct sctp_sack_info instead [ 193.513036][ T8278] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.100412][T10501] loop1: detected capacity change from 0 to 764 [ 194.335258][T10518] hub 9-0:1.0: USB hub found [ 194.340088][T10518] hub 9-0:1.0: 8 ports detected [ 194.371376][T10521] bond1: entered promiscuous mode [ 194.376517][T10521] bond1: entered allmulticast mode [ 194.381881][T10521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.464670][T10530] loop1: detected capacity change from 0 to 764 [ 194.708350][T10550] hub 9-0:1.0: USB hub found [ 194.713097][T10550] hub 9-0:1.0: 8 ports detected [ 194.772167][T10559] netlink: 'syz.1.1287': attribute type 3 has an invalid length. [ 194.780004][T10559] netlink: 'syz.1.1287': attribute type 3 has an invalid length. [ 194.806263][T10561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10561 comm=syz.1.1288 [ 194.819251][T10561] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 195.501178][T10576] hub 9-0:1.0: USB hub found [ 195.505980][T10576] hub 9-0:1.0: 8 ports detected [ 195.806379][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 195.806398][ T29] audit: type=1326 audit(1728396049.370:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.1.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7210bddff9 code=0x7ffc0000 [ 195.836398][ T29] audit: type=1326 audit(1728396049.370:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.1.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7210bddff9 code=0x7ffc0000 [ 195.860129][ T29] audit: type=1326 audit(1728396049.370:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.1.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7210bddff9 code=0x7ffc0000 [ 195.883782][ T29] audit: type=1326 audit(1728396049.370:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.1.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7210bddff9 code=0x7ffc0000 [ 196.377917][ T29] audit: type=1400 audit(1728396049.950:7360): avc: denied { module_load } for pid=10587 comm="syz.0.1299" path="/sys/power/wakeup_count" dev="sysfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 196.378951][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.414509][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.427769][T10588] syz.0.1299[10588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.427889][T10588] syz.0.1299[10588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.428027][ T29] audit: type=1400 audit(1728396050.000:7361): avc: denied { setopt } for pid=10587 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.439745][T10588] syz.0.1299[10588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.710980][T10604] FAULT_INJECTION: forcing a failure. [ 197.710980][T10604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.735634][T10604] CPU: 0 UID: 0 PID: 10604 Comm: syz.1.1305 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 197.746441][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.756549][T10604] Call Trace: [ 197.759841][T10604] [ 197.762792][T10604] dump_stack_lvl+0xf2/0x150 [ 197.767407][T10604] dump_stack+0x15/0x20 [ 197.771587][T10604] should_fail_ex+0x223/0x230 [ 197.776328][T10604] should_fail+0xb/0x10 [ 197.780615][T10604] should_fail_usercopy+0x1a/0x20 [ 197.785715][T10604] _copy_from_user+0x1e/0xd0 [ 197.790309][T10604] copy_msghdr_from_user+0x54/0x2a0 [ 197.795512][T10604] __sys_sendmsg+0x171/0x270 [ 197.800154][T10604] __x64_sys_sendmsg+0x46/0x50 [ 197.805079][T10604] x64_sys_call+0x2689/0x2d60 [ 197.810016][T10604] do_syscall_64+0xc9/0x1c0 [ 197.814525][T10604] ? clear_bhb_loop+0x55/0xb0 [ 197.819382][T10604] ? clear_bhb_loop+0x55/0xb0 [ 197.824080][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.830018][T10604] RIP: 0033:0x7f7210bddff9 [ 197.834518][T10604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.854393][T10604] RSP: 002b:00007f720f851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.862832][T10604] RAX: ffffffffffffffda RBX: 00007f7210d95f80 RCX: 00007f7210bddff9 [ 197.870898][T10604] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 197.878894][T10604] RBP: 00007f720f851090 R08: 0000000000000000 R09: 0000000000000000 [ 197.886897][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.894985][T10604] R13: 0000000000000000 R14: 00007f7210d95f80 R15: 00007ffd36742178 [ 197.903036][T10604] [ 198.009843][ T29] audit: type=1326 audit(1728396051.580:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 198.035300][ T29] audit: type=1326 audit(1728396051.580:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 198.059119][ T29] audit: type=1326 audit(1728396051.580:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 198.082793][ T29] audit: type=1326 audit(1728396051.580:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10618 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b0b5dff9 code=0x7ffc0000 [ 198.141284][T10605] chnl_net:caif_netlink_parms(): no params data found [ 198.193162][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.200382][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.207838][T10605] bridge_slave_0: entered allmulticast mode [ 198.214244][T10605] bridge_slave_0: entered promiscuous mode [ 198.221605][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.228943][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.236167][T10605] bridge_slave_1: entered allmulticast mode [ 198.242830][T10605] bridge_slave_1: entered promiscuous mode [ 198.257996][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.275665][T10605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.286419][T10605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.306663][T10605] team0: Port device team_slave_0 added [ 198.316778][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.329674][T10605] team0: Port device team_slave_1 added [ 198.345451][T10605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.352486][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.378470][T10605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.389928][T10605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.397017][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.423334][T10605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.437012][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.465015][T10605] hsr_slave_0: entered promiscuous mode [ 198.471495][T10605] hsr_slave_1: entered promiscuous mode [ 198.491111][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.561330][ T50] bridge_slave_1: left allmulticast mode [ 198.567013][ T50] bridge_slave_1: left promiscuous mode [ 198.572916][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.580863][ T50] bridge_slave_0: left allmulticast mode [ 198.586533][ T50] bridge_slave_0: left promiscuous mode [ 198.592547][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.673340][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.683881][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.694379][ T50] bond0 (unregistering): Released all slaves [ 198.734289][ T50] hsr_slave_0: left promiscuous mode [ 198.740075][ T50] hsr_slave_1: left promiscuous mode [ 198.745900][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.753444][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.762574][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.770100][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.781180][ T50] veth1_macvtap: left promiscuous mode [ 198.786706][ T50] veth0_macvtap: left promiscuous mode [ 198.792321][ T50] veth1_vlan: left promiscuous mode [ 198.797595][ T50] veth0_vlan: left promiscuous mode [ 198.888244][ T50] pimreg (unregistering): left allmulticast mode [ 198.928121][ T50] team0 (unregistering): Port device team_slave_1 removed [ 198.938970][ T50] team0 (unregistering): Port device team_slave_0 removed [ 199.064795][T10661] loop0: detected capacity change from 0 to 1024 [ 199.081006][T10661] EXT4-fs (loop0): first meta block group too large: 7 (group descriptor block count 1) [ 199.146977][T10605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.156189][T10605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.167774][T10605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.178466][T10605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.219899][T10605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.232601][T10605] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.244084][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.251234][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.263082][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.270209][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.366741][T10605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.449134][T10605] veth0_vlan: entered promiscuous mode [ 199.458561][T10605] veth1_vlan: entered promiscuous mode [ 199.479732][T10605] veth0_macvtap: entered promiscuous mode [ 199.487867][T10605] veth1_macvtap: entered promiscuous mode [ 199.498895][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.509354][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.519424][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.529933][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.539810][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.550360][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.560297][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.570838][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.581765][T10605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.592606][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.603177][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.613095][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.623708][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.633619][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.644109][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.653947][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.664443][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.675144][T10605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.685894][T10605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.694666][T10605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.703446][T10605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.712264][T10605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.906954][T10742] loop0: detected capacity change from 0 to 764 [ 200.660358][T10757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=10757 comm=syz.1.1324 [ 200.787349][T10770] loop2: detected capacity change from 0 to 512 [ 200.793997][T10770] EXT4-fs: Ignoring removed oldalloc option [ 200.816253][T10770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 200.852727][T10770] EXT4-fs (loop2): 1 truncate cleaned up [ 200.862308][T10770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.869595][ T3343] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 200.884894][ T3343] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.910953][ T162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.916936][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.930189][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.940912][T10605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.954268][ T162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.990982][ T162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.041911][T10754] chnl_net:caif_netlink_parms(): no params data found [ 201.073838][ T162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.158557][T10754] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.165787][T10754] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.204092][T10754] bridge_slave_0: entered allmulticast mode [ 201.210680][T10754] bridge_slave_0: entered promiscuous mode [ 201.221067][T10754] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.228284][T10754] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.235750][T10754] bridge_slave_1: entered allmulticast mode [ 201.244328][T10754] bridge_slave_1: entered promiscuous mode [ 201.355330][ T162] bridge_slave_1: left allmulticast mode [ 201.361061][ T162] bridge_slave_1: left promiscuous mode [ 201.366738][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.424889][ T162] bridge_slave_0: left allmulticast mode [ 201.430637][ T162] bridge_slave_0: left promiscuous mode [ 201.436302][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.642657][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.653768][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.665498][ T162] bond0 (unregistering): Released all slaves [ 201.722947][T10754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.737080][ T162] hsr_slave_0: left promiscuous mode [ 201.743575][ T162] hsr_slave_1: left promiscuous mode [ 201.751542][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.759094][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.766758][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.774246][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.785295][ T162] veth1_macvtap: left promiscuous mode [ 201.790882][ T162] veth0_macvtap: left promiscuous mode [ 201.796430][ T162] veth1_vlan: left promiscuous mode [ 201.801766][ T162] veth0_vlan: left promiscuous mode [ 201.904809][ T162] team0 (unregistering): Port device team_slave_1 removed [ 201.920465][ T162] team0 (unregistering): Port device team_slave_0 removed [ 201.994742][T10754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.010328][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'. [ 202.026365][T10814] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 202.069257][T10754] team0: Port device team_slave_0 added [ 202.086051][T10754] team0: Port device team_slave_1 added [ 202.114928][T10754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.121994][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.148073][T10754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.184762][T10835] bond1: entered promiscuous mode [ 202.189912][T10835] bond1: entered allmulticast mode [ 202.195538][T10835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.210766][T10754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.217912][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.228170][T10833] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 202.243887][T10754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.280016][T10846] FAULT_INJECTION: forcing a failure. [ 202.280016][T10846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.293487][T10846] CPU: 0 UID: 0 PID: 10846 Comm: syz.1.1342 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 202.304442][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.314569][T10846] Call Trace: [ 202.317921][T10846] [ 202.320873][T10846] dump_stack_lvl+0xf2/0x150 [ 202.325503][T10846] dump_stack+0x15/0x20 [ 202.329737][T10846] should_fail_ex+0x223/0x230 [ 202.334515][T10846] should_fail+0xb/0x10 [ 202.338820][T10846] should_fail_usercopy+0x1a/0x20 [ 202.343894][T10846] _copy_to_user+0x1e/0xa0 [ 202.348403][T10846] simple_read_from_buffer+0xa0/0x110 [ 202.353790][T10846] proc_fail_nth_read+0xf9/0x140 [ 202.358837][T10846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.364393][T10846] vfs_read+0x195/0x720 [ 202.368585][T10846] ? kmem_cache_free+0x1e8/0x2d0 [ 202.373599][T10846] ? __rcu_read_unlock+0x4e/0x70 [ 202.378641][T10846] ? __fget_files+0x1d4/0x210 [ 202.383402][T10846] ksys_read+0xeb/0x1b0 [ 202.387601][T10846] __x64_sys_read+0x42/0x50 [ 202.392133][T10846] x64_sys_call+0x27d3/0x2d60 [ 202.396864][T10846] do_syscall_64+0xc9/0x1c0 [ 202.401454][T10846] ? clear_bhb_loop+0x55/0xb0 [ 202.406304][T10846] ? clear_bhb_loop+0x55/0xb0 [ 202.411010][T10846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.416942][T10846] RIP: 0033:0x7f7210bdca3c [ 202.421460][T10846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 202.441180][T10846] RSP: 002b:00007f720f830030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.449659][T10846] RAX: ffffffffffffffda RBX: 00007f7210d96058 RCX: 00007f7210bdca3c [ 202.457670][T10846] RDX: 000000000000000f RSI: 00007f720f8300a0 RDI: 000000000000000b [ 202.465655][T10846] RBP: 00007f720f830090 R08: 0000000000000000 R09: 0000000000000000 [ 202.473727][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.481911][T10846] R13: 0000000000000000 R14: 00007f7210d96058 R15: 00007ffd36742178 [ 202.490287][T10846] [ 202.505746][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 202.505761][ T29] audit: type=1400 audit(1728396056.070:7375): avc: denied { relabelfrom } for pid=10844 comm="syz.2.1344" name="TCPv6" dev="sockfs" ino=37802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 202.512384][T10845] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 202.553327][T10754] hsr_slave_0: entered promiscuous mode [ 202.554331][ T29] audit: type=1400 audit(1728396056.080:7376): avc: denied { mac_admin } for pid=10844 comm="syz.2.1344" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.580275][ T29] audit: type=1400 audit(1728396056.120:7377): avc: denied { relabelto } for pid=10844 comm="syz.2.1344" name="TCPv6" dev="sockfs" ino=37802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:ptchown_exec_t:s0" [ 202.580599][T10851] loop1: detected capacity change from 0 to 256 [ 202.609491][ T29] audit: type=1400 audit(1728396056.140:7378): avc: denied { write } for pid=10849 comm="syz.1.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.614843][T10754] hsr_slave_1: entered promiscuous mode [ 202.638855][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 202.646005][T10754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.654194][T10754] Cannot create hsr debugfs directory [ 202.659732][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1344'. [ 202.663439][T10851] loop1: detected capacity change from 0 to 256 [ 202.685464][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 202.742137][T10851] loop1: detected capacity change from 0 to 256 [ 202.758343][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 202.828952][T10851] loop1: detected capacity change from 0 to 256 [ 202.848656][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 202.869215][T10851] loop1: detected capacity change from 0 to 256 [ 202.880095][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 202.893177][T10851] loop1: detected capacity change from 0 to 256 [ 202.899681][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 202.959312][T10851] loop1: detected capacity change from 0 to 256 [ 202.966076][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.016294][T10851] loop1: detected capacity change from 0 to 256 [ 203.062380][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.233555][T10851] loop1: detected capacity change from 0 to 256 [ 203.287482][T10754] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.302616][T10754] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.309567][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.321358][T10754] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.328643][T10851] loop1: detected capacity change from 0 to 256 [ 203.336980][T10754] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.337617][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.353284][ T29] audit: type=1400 audit(1728396056.910:7379): avc: denied { write } for pid=2949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.374932][ T29] audit: type=1400 audit(1728396056.910:7380): avc: denied { remove_name } for pid=2949 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.397711][ T29] audit: type=1400 audit(1728396056.910:7381): avc: denied { rename } for pid=2949 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.420187][ T29] audit: type=1400 audit(1728396056.910:7382): avc: denied { add_name } for pid=2949 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.422408][T10754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.442811][ T29] audit: type=1400 audit(1728396056.910:7383): avc: denied { unlink } for pid=2949 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.442845][ T29] audit: type=1400 audit(1728396056.910:7384): avc: denied { create } for pid=2949 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.458760][T10851] loop1: detected capacity change from 0 to 256 [ 203.480118][T10754] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.511355][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.521003][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.523720][T10851] loop1: detected capacity change from 0 to 256 [ 203.528223][ T2136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.536797][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.551315][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.558476][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.559487][T10851] loop1: detected capacity change from 0 to 256 [ 203.577164][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.597388][T10851] loop1: detected capacity change from 0 to 256 [ 203.636075][T10754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.646595][T10754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.690739][T10888] loop2: detected capacity change from 0 to 512 [ 203.697366][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.714464][T10888] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.725890][T10851] loop1: detected capacity change from 0 to 256 [ 203.729482][T10888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 203.738205][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.747132][T10888] System zones: 1-12 [ 203.751167][T10754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.760122][T10888] EXT4-fs (loop2): 1 truncate cleaned up [ 203.769183][T10851] loop1: detected capacity change from 0 to 256 [ 203.772050][T10888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.775549][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.796848][T10851] loop1: detected capacity change from 0 to 256 [ 203.809812][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.866031][T10851] loop1: detected capacity change from 0 to 256 [ 203.899369][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.925799][T10851] loop1: detected capacity change from 0 to 256 [ 203.936116][T10605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.957430][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 203.983307][T10851] loop1: detected capacity change from 0 to 256 [ 203.991744][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.014594][T10851] loop1: detected capacity change from 0 to 256 [ 204.023820][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.041330][T10851] loop1: detected capacity change from 0 to 256 [ 204.059065][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.084935][T10851] loop1: detected capacity change from 0 to 256 [ 204.095725][T10754] veth0_vlan: entered promiscuous mode [ 204.100275][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.130035][T10851] loop1: detected capacity change from 0 to 256 [ 204.138673][T10754] veth1_vlan: entered promiscuous mode [ 204.144927][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.162495][T10754] veth0_macvtap: entered promiscuous mode [ 204.176093][T10754] veth1_macvtap: entered promiscuous mode [ 204.192278][T10754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.203100][T10754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.212998][T10754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.223548][T10754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.233456][T10754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.243954][T10754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.253859][T10754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.260129][T10851] loop1: detected capacity change from 0 to 256 [ 204.264370][T10754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.285099][T10754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.287943][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.293817][T10754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.309399][T10754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.319346][T10754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.321083][T10851] loop1: detected capacity change from 0 to 256 [ 204.329797][T10754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.329814][T10754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.329832][T10754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.358638][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.366576][T10754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.383513][T10754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.419760][T10851] loop1: detected capacity change from 0 to 256 [ 204.427836][T10754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.440764][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.544130][T10754] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.553059][T10754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.561892][T10754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.570667][T10754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.585512][T10851] loop1: detected capacity change from 0 to 256 [ 204.613713][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.691461][T10851] loop1: detected capacity change from 0 to 256 [ 204.723801][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.771988][T10851] loop1: detected capacity change from 0 to 256 [ 204.778569][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.797481][T10851] loop1: detected capacity change from 0 to 256 [ 204.805751][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.819263][T10851] loop1: detected capacity change from 0 to 256 [ 204.829473][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 204.872230][T10851] loop1: detected capacity change from 0 to 256 [ 204.909144][T10851] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 205.034357][T10960] FAULT_INJECTION: forcing a failure. [ 205.034357][T10960] name failslab, interval 1, probability 0, space 0, times 0 [ 205.047127][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.2.1351 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 205.057913][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.068052][T10960] Call Trace: [ 205.071461][T10960] [ 205.074477][T10960] dump_stack_lvl+0xf2/0x150 [ 205.079190][T10960] dump_stack+0x15/0x20 [ 205.083389][T10960] should_fail_ex+0x223/0x230 [ 205.088191][T10960] ? __alloc_skb+0x10b/0x310 [ 205.092838][T10960] should_failslab+0x8f/0xb0 [ 205.097462][T10960] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 205.103318][T10960] __alloc_skb+0x10b/0x310 [ 205.107773][T10960] audit_log_start+0x368/0x6b0 [ 205.112563][T10960] ? __import_iovec+0x2d6/0x520 [ 205.117702][T10960] audit_seccomp+0x4b/0x130 [ 205.122238][T10960] __seccomp_filter+0x6fa/0x1180 [ 205.127363][T10960] __secure_computing+0x9f/0x1c0 [ 205.132349][T10960] syscall_trace_enter+0xd1/0x1f0 [ 205.137461][T10960] ? fpregs_assert_state_consistent+0x83/0xa0 [ 205.143622][T10960] do_syscall_64+0xaa/0x1c0 [ 205.148213][T10960] ? clear_bhb_loop+0x55/0xb0 [ 205.152967][T10960] ? clear_bhb_loop+0x55/0xb0 [ 205.157687][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.163628][T10960] RIP: 0033:0x7f5bc031ca3c [ 205.164052][T10968] loop4: detected capacity change from 0 to 1024 [ 205.168048][T10960] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 205.168074][T10960] RSP: 002b:00007f5bbef97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.168099][T10960] RAX: ffffffffffffffda RBX: 00007f5bc04d5f80 RCX: 00007f5bc031ca3c [ 205.168117][T10960] RDX: 000000000000000f RSI: 00007f5bbef970a0 RDI: 0000000000000007 [ 205.168130][T10960] RBP: 00007f5bbef97090 R08: 0000000000000000 R09: 0000000000000000 [ 205.168142][T10960] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 205.234726][T10960] R13: 0000000000000000 R14: 00007f5bc04d5f80 R15: 00007ffdd5aff0a8 [ 205.242724][T10960] [ 205.289935][T10968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.295672][T10977] loop2: detected capacity change from 0 to 1024 [ 205.329595][T10972] bond1: entered promiscuous mode [ 205.334758][T10972] bond1: entered allmulticast mode [ 205.340223][T10972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.350052][T10977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.375631][ T3283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.398071][T10983] 9pnet: Could not find request transport: Md [ 205.424984][ T3283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.480478][T10957] chnl_net:caif_netlink_parms(): no params data found [ 205.546590][ T3283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.560142][T10605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.649849][T10968] syz.4.1352 (10968) used greatest stack depth: 9360 bytes left [ 205.672142][T10754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.710492][T10997] netlink: 'syz.2.1357': attribute type 3 has an invalid length. [ 205.798522][ T3283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.853962][T10997] netlink: 'syz.2.1357': attribute type 3 has an invalid length. [ 205.957885][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.965100][T10957] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.975686][T10999] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 205.982242][T10999] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 205.984129][T10957] bridge_slave_0: entered allmulticast mode [ 205.990132][T10999] vhci_hcd vhci_hcd.0: Device attached [ 206.002941][T10957] bridge_slave_0: entered promiscuous mode [ 206.010561][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.017958][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.025416][T10957] bridge_slave_1: entered allmulticast mode [ 206.032164][T10957] bridge_slave_1: entered promiscuous mode [ 206.043776][ T2967] ================================================================== [ 206.051904][ T2967] BUG: KCSAN: data-race in set_nlink / set_nlink [ 206.058279][ T2967] [ 206.060622][ T2967] read to 0xffff888104e60518 of 4 bytes by task 4163 on cpu 1: [ 206.068190][ T2967] set_nlink+0x2b/0xb0 [ 206.072284][ T2967] kernfs_iop_permission+0x1d5/0x220 [ 206.077583][ T2967] inode_permission+0x18c/0x300 [ 206.082449][ T2967] link_path_walk+0x14b/0x820 [ 206.087223][ T2967] path_lookupat+0x72/0x2b0 [ 206.091738][ T2967] filename_lookup+0x127/0x300 [ 206.096512][ T2967] vfs_statx+0xa1/0x2f0 [ 206.100678][ T2967] vfs_fstatat+0xec/0x110 [ 206.105021][ T2967] __se_sys_newfstatat+0x58/0x260 [ 206.110057][ T2967] __x64_sys_newfstatat+0x55/0x70 [ 206.115097][ T2967] x64_sys_call+0x141f/0x2d60 [ 206.119791][ T2967] do_syscall_64+0xc9/0x1c0 [ 206.124303][ T2967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.130318][ T2967] [ 206.132649][ T2967] write to 0xffff888104e60518 of 4 bytes by task 2967 on cpu 0: [ 206.140282][ T2967] set_nlink+0x98/0xb0 [ 206.144392][ T2967] kernfs_iop_permission+0x1d5/0x220 [ 206.149684][ T2967] inode_permission+0x18c/0x300 [ 206.154541][ T2967] link_path_walk+0x14b/0x820 [ 206.159223][ T2967] path_openat+0x1af/0x1fa0 [ 206.163740][ T2967] do_filp_open+0xf7/0x200 [ 206.168169][ T2967] do_sys_openat2+0xab/0x120 [ 206.172788][ T2967] __x64_sys_openat+0xf3/0x120 [ 206.177565][ T2967] x64_sys_call+0x1025/0x2d60 [ 206.182255][ T2967] do_syscall_64+0xc9/0x1c0 [ 206.186780][ T2967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.193327][ T2967] [ 206.195674][ T2967] value changed: 0x00000005 -> 0x00000006 [ 206.201391][ T2967] [ 206.203713][ T2967] Reported by Kernel Concurrency Sanitizer on: [ 206.209862][ T2967] CPU: 0 UID: 0 PID: 2967 Comm: udevd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 206.220105][ T2967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.230173][ T2967] ================================================================== [ 206.309541][ T3283] bridge_slave_1: left allmulticast mode [ 206.315282][ T3283] bridge_slave_1: left promiscuous mode [ 206.321086][ T3283] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.328851][T11005] vhci_hcd: connection closed [ 206.329381][ T36] vhci_hcd: stop threads [ 206.338366][ T36] vhci_hcd: release socket [ 206.342812][ T36] vhci_hcd: disconnect device [ 206.349606][ T3283] bridge_slave_0: left allmulticast mode [ 206.355373][ T3283] bridge_slave_0: left promiscuous mode [ 206.361471][ T3283] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.377351][ T6611] usb 10-1: enqueue for inactive port 0 [ 206.460439][ T3283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.471234][ T3283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.482057][ T3283] bond0 (unregistering): Released all slaves [ 206.491284][ T3283] bond1 (unregistering): Released all slaves [ 206.505630][T10957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.522116][T10957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.544297][T10957] team0: Port device team_slave_0 added [ 206.551153][T10957] team0: Port device team_slave_1 added [ 206.569617][ T3283] hsr_slave_0: left promiscuous mode [ 206.575305][ T3283] hsr_slave_1: left promiscuous mode [ 206.581041][ T3283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.587142][ T6611] usb 10-1: enqueue for inactive port 0 [ 206.588611][ T3283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.602325][ T3283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.609813][ T3283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.618690][ T3283] veth1_macvtap: left promiscuous mode [ 206.624192][ T3283] veth0_macvtap: left promiscuous mode [ 206.629866][ T3283] veth1_vlan: left promiscuous mode [ 206.635093][ T3283] veth0_vlan: left promiscuous mode [ 206.721322][ T3283] team0 (unregistering): Port device team_slave_1 removed [ 206.731688][ T3283] team0 (unregistering): Port device team_slave_0 removed [ 206.768122][T10957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.775098][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.801178][T10957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.814949][T10957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.822183][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.848229][T10957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.892736][T10957] hsr_slave_0: entered promiscuous mode [ 206.899082][T10957] hsr_slave_1: entered promiscuous mode [ 206.905106][T10957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.912733][T10957] Cannot create hsr debugfs directory [ 207.286024][T10957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.296264][T10957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.305281][T10957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.315881][T10957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.362307][T10957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.375762][T10957] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.385745][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.393003][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.413088][T10957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.423594][T10957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.438770][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.445951][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.510244][T10957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.594211][T10957] veth0_vlan: entered promiscuous mode [ 207.603695][T10957] veth1_vlan: entered promiscuous mode [ 207.621867][T10957] veth0_macvtap: entered promiscuous mode [ 207.629684][T10957] veth1_macvtap: entered promiscuous mode [ 207.641802][T10957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.652385][T10957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.662270][T10957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.672753][T10957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.682713][T10957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.693332][T10957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.703293][T10957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.713942][T10957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.725298][T10957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.725403][ T6611] usb usb10-port1: attempt power cycle [ 207.739037][T10957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.749584][T10957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.759489][T10957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.769966][T10957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.779818][T10957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.790289][T10957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.800171][T10957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.810703][T10957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.821607][T10957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.832323][T10957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.841177][T10957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.850110][T10957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.858838][T10957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.567346][ T6611] usb usb10-port1: unable to enumerate USB device