last executing test programs: 10m27.414777187s ago: executing program 1 (id=45): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2200054, &(0x7f0000000000)={[{@bsdgroups}, {@bh}]}, 0x1, 0x236, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0xf000) 10m26.760398106s ago: executing program 1 (id=58): symlink(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000800)='./file1\x00') 10m26.684207387s ago: executing program 1 (id=60): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x16ad, &(0x7f0000000000)={0x0, 0x4adc, 0x400, 0x1, 0x139}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000001f40)={&(0x7f0000006000)={[{0x0, 0x0, 0x1}, {0x0}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}]}, 0x4}, 0x1) 10m26.628804118s ago: executing program 1 (id=61): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x169) creat(&(0x7f0000000100)='./file1\x00', 0xe0) 10m26.46349034s ago: executing program 1 (id=67): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$vga_arbiter(r0, 0x0, 0xa) 10m25.580734843s ago: executing program 1 (id=82): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200056, &(0x7f0000000440)={[{@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@errors_remount}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) getdents(r0, 0xfffffffffffffffd, 0x58) 10m25.533972123s ago: executing program 32 (id=82): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200056, &(0x7f0000000440)={[{@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@errors_remount}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) getdents(r0, 0xfffffffffffffffd, 0x58) 8.926370975s ago: executing program 4 (id=6547): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 8.765120357s ago: executing program 4 (id=6549): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f00000000c0)='./file0\x00') pwritev2(r0, &(0x7f0000000240), 0x0, 0x1200, 0x30, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x0, 0xffffbea6, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7800, 0x8000, 0xc, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb8) r7 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 8.631770559s ago: executing program 4 (id=6551): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3fffff) 8.54550142s ago: executing program 4 (id=6552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000010000000f000000080034000400000008000300", @ANYRES32=r2, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 8.352746713s ago: executing program 4 (id=6554): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000f3, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) 8.222108485s ago: executing program 4 (id=6555): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {}, 0x1}, 0x18) sendfile(r3, r2, 0x0, 0x1000000000000a) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {0xffff}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 7.631675693s ago: executing program 3 (id=6560): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x128, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xe4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xbc, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x88, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.460969045s ago: executing program 3 (id=6566): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7002fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r6}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 3.991720964s ago: executing program 3 (id=6587): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x9, 0x6000, @fd_index=0xa, 0x3, 0xf7e0, 0xfecc, 0x1d, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.720581742s ago: executing program 2 (id=6595): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x13dab808ea1e0d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.522743495s ago: executing program 2 (id=6598): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r11 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r11, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r11, 0x40505330, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 2.386759407s ago: executing program 3 (id=6600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185143, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000021850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x1, 0x72bd2b, 0x2004000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000280)={@local, 0x0}, &(0x7f00000002c0)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766cb3b9e0000100000000000048", @ANYRES32=r15, @ANYBLOB], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r17, @ANYBLOB="080003"], 0x80}}, 0x8000) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x57c, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xf001, 0x7, 0xd, 0x10}, {0xb, 0x6, 0xb, 0x3}, {0x0, 0xfe, 0x2, 0xa}, {0x7, 0x81, 0xb, 0xc}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r15}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r17}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x57c}, 0x1, 0x0, 0x0, 0x88}, 0x10000000) 2.095612491s ago: executing program 5 (id=6601): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2b4, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x2a0, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0xb, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x58, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x22, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xa4, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x26, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7e0a9dc5e0e1b03f719e150808ef459921b"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.908366864s ago: executing program 2 (id=6602): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000080000000b702000014fa0000b70385000000830010f7be09000000000000550901dfffffff009d00000000000000bf91000000000000b7020000000000008500000084000000b700000000200000951bb47c2d54f213d8600eea221a9eff7e39e45298ea0089a72ef1"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)="6dd8eed1e34ae4f2a2", 0x9}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) getuid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x800) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r6, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0xfffffffffffffd96, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.774715775s ago: executing program 5 (id=6603): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000a00000000000000000000000800010002"], 0x20}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x1}, 0x10) write(r9, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40af003000000", 0x41d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000840)="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", &(0x7f0000000380)=@udp6=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00'}, 0x18) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.386291511s ago: executing program 5 (id=6604): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640), 0x0, 0xdbcf}, 0x38) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1695458af2ac700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x33, 0x1, [{0x8, 0x8}]}}) 1.322300092s ago: executing program 2 (id=6605): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x4000000) 1.201922994s ago: executing program 5 (id=6608): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000003}, 0x0, 0x5dd8, 0x0, 0x3, 0x0, 0x3, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000ee077fdb000000a472bb3afe00"/33], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x20005, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x4008700e, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@delalloc}, {@errors_remount}]}, 0x81, 0x7d2, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, &(0x7f0000000080)={0x10000, 0xffe, 0xf, 0xff, 0x0, 0xfffc, 0x2401}) modify_ldt$read(0x0, &(0x7f0000002140)=""/4129, 0x1021) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000851d0000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e91a8322e39d998cf95eceb2afdff4674575ff6a3fac0bce5ba929d717204966a8e2438b257ffb4e17d3ee539a8ad0081395046f1b2df9d3d104bbe930e810776f0bcb1c81f8b337352e47c323508157daf8ab0d057d4d87da8ad14225f77d1d4bc353054c7af3c0c2226944e45ddb2b94e801fd5f00e61fd1783f9e9bd01506c734de5945028a9d48dc3eadc4b49f840ab44eac469cca98", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty, 0xfffffff9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 1.147715904s ago: executing program 3 (id=6609): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x9, 0x6000, @fd_index=0xa, 0x3, 0xf7e0, 0xfecc, 0x1d, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.147423984s ago: executing program 2 (id=6610): shmget(0x1, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) (fail_nth: 1) 999.770026ms ago: executing program 2 (id=6612): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="5401000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000080101000000003200001000000000000000000000080000000001feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000800000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) sendmsg(r0, &(0x7f0000004940)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @remote, 0x2}, 0x80, &(0x7f00000044c0)=[{&(0x7f00000001c0)}, {&(0x7f0000002400)="cc23494c1f35ce443d2fedfc4519701433cdbbfcf43b5034edf31ad15fd95ac0f1cc2fcc4159c35ee22c2f687965d7a03830d56a2f7ca503a3162f911cf6ba98249820367d9926b4545326a23d7195f3ce71a6268beec08aa6d51d1d2d97da4a352264e69453972f259873a48735f8f0101b0496f12b4061e1fd44bf1d5d0c62cd582a5fabfa6e9981ee059876f25cad3c30d6eb69e1c1b94879d43b74a14364ee1b59988c9a1712abc9c22c1bf58b", 0xaf}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="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", 0x1000}], 0x4, &(0x7f0000004500)=ANY=[@ANYBLOB="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"], 0x408}, 0x84) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r10, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r9, 0x0}]) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r10, 0x7, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000100)={r11, r12+10000000}, 0x0) r13 = perf_event_open(&(0x7f0000004980)={0x2, 0x80, 0xf6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc91542382b09e080}, 0x40db, 0x0, 0x4, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r13, 0xd0009411, &(0x7f0000000400)={{0x0, 0xcac0, 0x22, 0x1, 0x0, 0x9f, 0x8, 0x5, 0x8, 0xfffffffb, 0x1ff, 0x0, 0x1000, 0x8, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH(r13, 0xd0009411, &(0x7f0000001400)={{r14, 0x8000000004, 0x12, 0xe33, 0xc, 0x2, 0x9, 0x3ff, 0x6cf, 0x1fd, 0x5, 0x0, 0x7, 0xfffffffffffffff9, 0x6}}) 750.48334ms ago: executing program 0 (id=6613): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 700.029801ms ago: executing program 0 (id=6614): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 628.807662ms ago: executing program 0 (id=6615): process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 583.516992ms ago: executing program 0 (id=6616): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='tlb_flush\x00', r2, 0x0, 0x10000000000000}, 0x18) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x5}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) flistxattr(r3, &(0x7f0000000340)=""/99, 0x63) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x4, 0x2c6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 143.704048ms ago: executing program 5 (id=6617): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 120.768319ms ago: executing program 5 (id=6618): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000001340)="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", 0x503}], 0x2}}], 0x1, 0x4000000) 88.068029ms ago: executing program 3 (id=6619): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) (async) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r3, &(0x7f0000000080)='3', 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000500)={[{@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0xff, 0x247, &(0x7f0000000ac0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x208800, &(0x7f0000000180)=ANY=[]) 35.73289ms ago: executing program 0 (id=6620): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) (fail_nth: 1) 0s ago: executing program 0 (id=6621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000001bc0)={0x13d8, 0x0, 0x18, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xff4, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x26, 0x5, "c4eb156e3684de3821a74fc5e5d01e6f8ded19e4eb8771821f3c89adf58cb3013c3f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xaa000}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xcf\\\x99*[\x8a\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}*-+\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[&!-%\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd3ba}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-]-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '+[@}-_#^!&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x65, 0x5, "be492a967242b40fe4ac2de66ff3a1b7fa29b8534afc8dd6c1b1847d9381471e8731f3f022992254eeae939f96d72d80c4967a08f33d3c0b6e6ddf00cc609ceae69021fe3f9c5352dbd204e392526b500f33561024bcbe2f250a64154d134912d2"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']:\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "4a372a4679913683144df1e98ad437ec228a10ef95eca89086c2c42071e2f1ef42ba51494665258d6e788cd2b99b46c902f62011870f5ea1c01659564dc6f0e2e90f8d40d01f6b42698483616cde78c6349f30ebb81f035375477c78c2d7749ec77adf5ad707a3940f4e6ed7a11526906f614375"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x13d8}, 0x1, 0x0, 0x0, 0xc000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffc00}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="34dbae071f73f05d91607dfa67afd553a895f51e9a5bc4fbeaa0b77115550d3121b74ed1d80f8f0e72ca9aeb7f86b2bb88bf9a8e9fed0126132fac7aaf4b76b9796df3775ace92cf59533746bfa433f8b60aaf0c6ff5503b7bb025f7f7a55daed2033b3901d651e3e4bbc7fa063d94e822207f88f7d8fd7ce4d883c13869cfcbb4087b06f4400d28d95ef1d23097d20a27bc8ca3e818c6ce8f0f0c9570d614e87b41551be18cccefd4079289edd14b4ba345eeb35e7fa833514317aec2865053b43ce5152a29580fbcfae1b968e500720d41de4c6a30791a6a0736ac90cfdcf84adc5bd942443cf0f486f04382b8d0"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) kernel console output (not intermixed with test programs): ure: 0x41615252, 0x80417272 (sector = 1) [ 612.141540][ T37] vhci_hcd: stop threads [ 612.145886][ T37] vhci_hcd: release socket [ 612.150406][ T37] vhci_hcd: disconnect device [ 612.155605][ T37] vhci_hcd: stop threads [ 612.159865][ T37] vhci_hcd: release socket [ 612.164308][ T37] vhci_hcd: disconnect device [ 612.476502][T23043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6161'. [ 612.827717][T22862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.843548][T21361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.880955][T23045] loop5: detected capacity change from 0 to 2048 [ 612.932283][T23045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.978384][T22862] veth0_vlan: entered promiscuous mode [ 612.990186][T22862] veth1_vlan: entered promiscuous mode [ 613.010567][T22862] veth0_macvtap: entered promiscuous mode [ 613.036027][T22862] veth1_macvtap: entered promiscuous mode [ 613.104163][T21892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.123260][T22862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.138168][T22862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.252032][T23060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6163'. [ 613.612948][T22862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.622110][T22862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.630926][T22862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.639699][T22862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.687887][T23064] loop4: detected capacity change from 0 to 2048 [ 613.936546][T23064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.274921][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6168'. [ 614.284753][ T3394] usb 5-1: enqueue for inactive port 0 [ 614.294491][ T3394] usb 5-1: enqueue for inactive port 0 [ 614.355532][T23081] loop2: detected capacity change from 0 to 128 [ 614.393148][ T3394] vhci_hcd: vhci_device speed not set [ 614.426214][T23074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.629291][T23087] loop3: detected capacity change from 0 to 128 [ 614.682433][T12574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.118433][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6173'. [ 615.412080][T23111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6172'. [ 615.536028][T23110] netlink: 'syz.3.6175': attribute type 1 has an invalid length. [ 615.592651][T23107] loop2: detected capacity change from 0 to 2048 [ 615.848190][T23107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.900402][T23107] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.6174: iget: bogus i_mode (4355) [ 616.007834][T22201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.984576][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 616.984597][ T29] audit: type=1326 audit(1748699208.492:19081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 617.014593][ T29] audit: type=1326 audit(1748699208.492:19082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 617.038238][ T29] audit: type=1326 audit(1748699208.492:19083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 617.061885][ T29] audit: type=1326 audit(1748699208.492:19084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 617.062319][T23135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 617.086332][ T29] audit: type=1326 audit(1748699208.492:19085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 617.115812][ T29] audit: type=1326 audit(1748699208.492:19086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79c7cfe9a3 code=0x7ffc0000 [ 617.152464][T23139] loop3: detected capacity change from 0 to 2048 [ 617.174744][ T29] audit: type=1326 audit(1748699208.662:19087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f79c7cfd41f code=0x7ffc0000 [ 617.198247][ T29] audit: type=1326 audit(1748699208.662:19088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f79c7cfe9f7 code=0x7ffc0000 [ 617.221777][ T29] audit: type=1326 audit(1748699208.662:19089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79c7cfd2d0 code=0x7ffc0000 [ 617.245471][ T29] audit: type=1326 audit(1748699208.662:19090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz.3.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79c7cfe56b code=0x7ffc0000 [ 617.662956][T23145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6183'. [ 617.756415][T23147] netlink: 'syz.5.6187': attribute type 1 has an invalid length. [ 617.880828][T23139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.941108][T23142] loop4: detected capacity change from 0 to 2048 [ 617.956075][T23149] ip6gretap0: entered promiscuous mode [ 617.973729][T23149] vlan2: entered promiscuous mode [ 618.033408][T22862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.037408][T23147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 618.062414][T23142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.134300][T23166] random: crng reseeded on system resumption [ 618.240332][T23169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.249886][T23169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.280421][T12574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.320946][T23172] loop4: detected capacity change from 0 to 128 [ 618.607679][T23179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6193'. [ 618.642422][T23180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6189'. [ 620.736592][T23200] random: crng reseeded on system resumption [ 621.046259][T23209] netlink: 'syz.5.6202': attribute type 1 has an invalid length. [ 621.100924][T23209] 8021q: adding VLAN 0 to HW filter on device bond6 [ 622.479062][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 622.479082][ T29] audit: type=1326 audit(1748699213.992:19114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 622.509482][ T29] audit: type=1326 audit(1748699213.992:19115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 622.543598][T23227] loop3: detected capacity change from 0 to 2048 [ 622.688417][ T29] audit: type=1326 audit(1748699214.052:19116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 622.712123][ T29] audit: type=1326 audit(1748699214.052:19117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 622.736637][ T29] audit: type=1326 audit(1748699214.052:19118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 622.776702][T23235] random: crng reseeded on system resumption [ 622.856347][T23227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.917739][ T29] audit: type=1326 audit(1748699214.432:19119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 622.941648][ T29] audit: type=1326 audit(1748699214.432:19120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 622.966024][ T29] audit: type=1326 audit(1748699214.432:19121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 623.040334][T22862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.070755][T23247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.100940][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6213'. [ 623.102972][ T29] audit: type=1326 audit(1748699214.432:19122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 623.135390][ T29] audit: type=1326 audit(1748699214.432:19123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.3.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 623.170050][T23247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.822027][T23262] random: crng reseeded on system resumption [ 625.580650][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6227'. [ 625.730348][T23294] vcan0: entered promiscuous mode [ 625.735627][T23294] vcan0: entered allmulticast mode [ 625.735855][ C1] vcan0: j1939_session_tx_dat: 0xffff88812c4de200: queue data error: -100 [ 625.915113][T23301] random: crng reseeded on system resumption [ 627.331619][T23327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6237'. [ 627.578602][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6240'. [ 628.803317][T23359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6248'. [ 628.945653][T23361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6249'. [ 628.976453][T23363] random: crng reseeded on system resumption [ 630.029823][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6259'. [ 630.038931][T23388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6259'. [ 630.117962][T23395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6261'. [ 630.297255][T23399] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6263'. [ 630.348634][T23403] random: crng reseeded on system resumption [ 630.783056][T23419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6270'. [ 630.963317][T23422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6271'. [ 631.227809][T23425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6274'. [ 631.415843][T23431] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6275'. [ 631.605324][T23436] 8021q: adding VLAN 0 to HW filter on device bond28 [ 631.799269][T23441] geneve2: entered promiscuous mode [ 631.805284][T23441] geneve2: entered allmulticast mode [ 632.496425][T23473] random: crng reseeded on system resumption [ 633.472059][T23498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.565327][T23498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.624992][T23504] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 633.648422][T23504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 633.732192][T23515] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 633.738854][T23515] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.745931][T23519] random: crng reseeded on system resumption [ 633.746499][T23515] vhci_hcd vhci_hcd.0: Device attached [ 634.745158][T23515] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 634.751944][T23515] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 634.759636][T23515] vhci_hcd vhci_hcd.0: Device attached [ 634.848205][ T10] usb 5-1: new low-speed USB device number 15 using vhci_hcd [ 634.905180][T23528] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 634.911830][T23528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 634.919467][T23528] vhci_hcd vhci_hcd.0: Device attached [ 634.926734][T23531] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(20) [ 634.933462][T23531] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 634.941182][T23531] vhci_hcd vhci_hcd.0: Device attached [ 634.949700][T23515] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 634.956350][T23515] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 634.964096][T23515] vhci_hcd vhci_hcd.0: Device attached [ 634.971174][T23515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 635.055986][T23515] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(25) [ 635.062732][T23515] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 635.070536][T23515] vhci_hcd vhci_hcd.0: Device attached [ 635.311260][T23539] vhci_hcd: connection closed [ 635.311849][T23536] vhci_hcd: connection closed [ 635.318187][T23532] vhci_hcd: connection closed [ 635.795415][T23556] __nla_validate_parse: 6 callbacks suppressed [ 635.795481][T23556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6306'. [ 635.855408][T23516] vhci_hcd: connection reset by peer [ 635.864615][T23529] vhci_hcd: connection closed [ 635.864833][T23534] vhci_hcd: connection closed [ 635.869645][T13142] vhci_hcd: stop threads [ 635.878727][T13142] vhci_hcd: release socket [ 635.883177][T13142] vhci_hcd: disconnect device [ 635.890183][T13142] vhci_hcd: stop threads [ 635.894659][T13142] vhci_hcd: release socket [ 635.899130][T13142] vhci_hcd: disconnect device [ 635.904492][T13142] vhci_hcd: stop threads [ 635.908830][T13142] vhci_hcd: release socket [ 635.913280][T13142] vhci_hcd: disconnect device [ 635.953563][T13142] vhci_hcd: stop threads [ 635.957915][T13142] vhci_hcd: release socket [ 635.962369][T13142] vhci_hcd: disconnect device [ 635.987489][T13142] vhci_hcd: stop threads [ 635.991808][T13142] vhci_hcd: release socket [ 635.996525][T13142] vhci_hcd: disconnect device [ 636.023126][T13142] vhci_hcd: stop threads [ 636.027526][T13142] vhci_hcd: release socket [ 636.031974][T13142] vhci_hcd: disconnect device [ 636.101029][T23562] netlink: 'syz.4.6312': attribute type 1 has an invalid length. [ 636.101768][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6310'. [ 636.150409][T23566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6313'. [ 636.187277][T23574] FAULT_INJECTION: forcing a failure. [ 636.187277][T23574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 636.187516][T23562] 8021q: adding VLAN 0 to HW filter on device bond29 [ 636.200471][T23574] CPU: 1 UID: 0 PID: 23574 Comm: syz.3.6316 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 636.200559][T23574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 636.200587][T23574] Call Trace: [ 636.200597][T23574] [ 636.200609][T23574] __dump_stack+0x1d/0x30 [ 636.200639][T23574] dump_stack_lvl+0xe8/0x140 [ 636.200679][T23574] dump_stack+0x15/0x1b [ 636.200761][T23574] should_fail_ex+0x265/0x280 [ 636.200808][T23574] should_fail+0xb/0x20 [ 636.200849][T23574] should_fail_usercopy+0x1a/0x20 [ 636.200875][T23574] _copy_from_user+0x1c/0xb0 [ 636.200945][T23574] __sys_bpf+0x178/0x790 [ 636.200999][T23574] __x64_sys_bpf+0x41/0x50 [ 636.201063][T23574] x64_sys_call+0x2478/0x2fb0 [ 636.201093][T23574] do_syscall_64+0xd2/0x200 [ 636.201137][T23574] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 636.201210][T23574] ? clear_bhb_loop+0x40/0x90 [ 636.201240][T23574] ? clear_bhb_loop+0x40/0x90 [ 636.201271][T23574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.201336][T23574] RIP: 0033:0x7f79c7cfe969 [ 636.201363][T23574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.201390][T23574] RSP: 002b:00007f79c6367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.201418][T23574] RAX: ffffffffffffffda RBX: 00007f79c7f25fa0 RCX: 00007f79c7cfe969 [ 636.201436][T23574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 636.201453][T23574] RBP: 00007f79c6367090 R08: 0000000000000000 R09: 0000000000000000 [ 636.201501][T23574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.201518][T23574] R13: 0000000000000001 R14: 00007f79c7f25fa0 R15: 00007ffda6b6c088 [ 636.201543][T23574] [ 636.263941][T23577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.340051][T23580] loop4: detected capacity change from 0 to 512 [ 636.374924][T23577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.461362][T23580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.478138][T23580] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 636.492571][T23580] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.6318: corrupted inode contents [ 636.507400][T23580] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.6318: mark_inode_dirty error [ 636.518935][T23589] loop0: detected capacity change from 0 to 1024 [ 636.529135][T23591] random: crng reseeded on system resumption [ 636.541136][T23580] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.6318: corrupted inode contents [ 636.553515][T23589] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 636.563426][T23589] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 636.573443][T23589] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 636.583239][T23589] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 636.591964][T23589] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 636.622798][T23580] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.6318: mark_inode_dirty error [ 636.772347][T12574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.796236][T23599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6324'. [ 636.927194][T23608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6323'. [ 637.038126][T23609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6326'. [ 637.182831][T23614] netlink: 'syz.3.6328': attribute type 1 has an invalid length. [ 637.224396][T23614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 637.256537][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6330'. [ 637.449057][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6337'. [ 637.535208][T23641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6339'. [ 638.811428][T23646] netlink: 'syz.5.6340': attribute type 1 has an invalid length. [ 638.906174][T23646] 8021q: adding VLAN 0 to HW filter on device bond7 [ 638.944397][T23664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6345'. [ 638.962007][T23662] FAULT_INJECTION: forcing a failure. [ 638.962007][T23662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.975280][T23662] CPU: 0 UID: 0 PID: 23662 Comm: syz.3.6346 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 638.975312][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 638.975351][T23662] Call Trace: [ 638.975359][T23662] [ 638.975368][T23662] __dump_stack+0x1d/0x30 [ 638.975395][T23662] dump_stack_lvl+0xe8/0x140 [ 638.975419][T23662] dump_stack+0x15/0x1b [ 638.975476][T23662] should_fail_ex+0x265/0x280 [ 638.975519][T23662] should_fail+0xb/0x20 [ 638.975551][T23662] should_fail_usercopy+0x1a/0x20 [ 638.975571][T23662] _copy_from_user+0x1c/0xb0 [ 638.975598][T23662] ___sys_sendmsg+0xc1/0x1d0 [ 638.975676][T23662] __x64_sys_sendmsg+0xd4/0x160 [ 638.975715][T23662] x64_sys_call+0x2999/0x2fb0 [ 638.975743][T23662] do_syscall_64+0xd2/0x200 [ 638.975796][T23662] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 638.975831][T23662] ? clear_bhb_loop+0x40/0x90 [ 638.975856][T23662] ? clear_bhb_loop+0x40/0x90 [ 638.975939][T23662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.975961][T23662] RIP: 0033:0x7f79c7cfe969 [ 638.975978][T23662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.976000][T23662] RSP: 002b:00007f79c6367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.976104][T23662] RAX: ffffffffffffffda RBX: 00007f79c7f25fa0 RCX: 00007f79c7cfe969 [ 638.976122][T23662] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000003 [ 638.976136][T23662] RBP: 00007f79c6367090 R08: 0000000000000000 R09: 0000000000000000 [ 638.976148][T23662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.976161][T23662] R13: 0000000000000000 R14: 00007f79c7f25fa0 R15: 00007ffda6b6c088 [ 638.976179][T23662] [ 639.199398][T23671] loop3: detected capacity change from 0 to 256 [ 639.254088][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 639.254109][ T29] audit: type=1400 audit(1748699230.712:19134): avc: denied { getopt } for pid=23670 comm="syz.3.6348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 639.345196][T23679] vlan2: entered promiscuous mode [ 639.388260][T23685] FAULT_INJECTION: forcing a failure. [ 639.388260][T23685] name failslab, interval 1, probability 0, space 0, times 0 [ 639.401701][T23685] CPU: 0 UID: 0 PID: 23685 Comm: syz.3.6355 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 639.401739][T23685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.401757][T23685] Call Trace: [ 639.401765][T23685] [ 639.401776][T23685] __dump_stack+0x1d/0x30 [ 639.401799][T23685] dump_stack_lvl+0xe8/0x140 [ 639.401882][T23685] dump_stack+0x15/0x1b [ 639.401903][T23685] should_fail_ex+0x265/0x280 [ 639.401975][T23685] should_failslab+0x8c/0xb0 [ 639.402060][T23685] __kmalloc_noprof+0xa5/0x3e0 [ 639.402088][T23685] ? ip_options_get+0x52/0x350 [ 639.402123][T23685] ip_options_get+0x52/0x350 [ 639.402165][T23685] do_ip_setsockopt+0x19d4/0x2240 [ 639.402211][T23685] ip_setsockopt+0x58/0x110 [ 639.402238][T23685] raw_setsockopt+0xbd/0x150 [ 639.402320][T23685] sock_common_setsockopt+0x66/0x80 [ 639.402365][T23685] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 639.402454][T23685] __sys_setsockopt+0x184/0x200 [ 639.402489][T23685] __x64_sys_setsockopt+0x64/0x80 [ 639.402549][T23685] x64_sys_call+0x2bd5/0x2fb0 [ 639.402580][T23685] do_syscall_64+0xd2/0x200 [ 639.402637][T23685] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 639.402668][T23685] ? clear_bhb_loop+0x40/0x90 [ 639.402690][T23685] ? clear_bhb_loop+0x40/0x90 [ 639.402712][T23685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.402797][T23685] RIP: 0033:0x7f79c7cfe969 [ 639.402813][T23685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.402839][T23685] RSP: 002b:00007f79c6367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 639.402864][T23685] RAX: ffffffffffffffda RBX: 00007f79c7f25fa0 RCX: 00007f79c7cfe969 [ 639.402880][T23685] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 639.402893][T23685] RBP: 00007f79c6367090 R08: 0000000000000000 R09: 0000000000000000 [ 639.402907][T23685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.402937][T23685] R13: 0000000000000000 R14: 00007f79c7f25fa0 R15: 00007ffda6b6c088 [ 639.402958][T23685] [ 639.708380][T23686] loop2: detected capacity change from 0 to 8192 [ 639.977581][T18369] loop2: p1 < > p2 p3 < p5 > [ 639.982365][T18369] loop2: partition table partially beyond EOD, truncated [ 640.057062][ T10] usb 5-1: enqueue for inactive port 0 [ 640.062602][ T10] usb 5-1: enqueue for inactive port 0 [ 640.068316][T18369] loop2: p1 start 4177526784 is beyond EOD, truncated [ 640.075155][T18369] loop2: p2 start 163840 is beyond EOD, truncated [ 640.082189][T18369] loop2: p5 start 163840 is beyond EOD, truncated [ 640.089573][T23686] loop2: p1 < > p2 p3 < p5 > [ 640.094387][T23686] loop2: partition table partially beyond EOD, truncated [ 640.112928][T23686] loop2: p1 start 4177526784 is beyond EOD, truncated [ 640.119875][T23686] loop2: p2 start 163840 is beyond EOD, truncated [ 640.136063][ T10] vhci_hcd: vhci_device speed not set [ 640.174409][T23706] loop4: detected capacity change from 0 to 512 [ 640.193620][T23708] FAULT_INJECTION: forcing a failure. [ 640.193620][T23708] name failslab, interval 1, probability 0, space 0, times 0 [ 640.206426][T23708] CPU: 0 UID: 0 PID: 23708 Comm: syz.3.6365 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 640.206522][T23708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.206536][T23708] Call Trace: [ 640.206544][T23708] [ 640.206580][T23708] __dump_stack+0x1d/0x30 [ 640.206606][T23708] dump_stack_lvl+0xe8/0x140 [ 640.206660][T23708] dump_stack+0x15/0x1b [ 640.206680][T23708] should_fail_ex+0x265/0x280 [ 640.206790][T23708] should_failslab+0x8c/0xb0 [ 640.206813][T23708] __kvmalloc_node_noprof+0x126/0x4f0 [ 640.206845][T23708] ? traverse+0x9d/0x3a0 [ 640.206882][T23708] traverse+0x9d/0x3a0 [ 640.206979][T23708] ? kstrtouint+0x76/0xc0 [ 640.207017][T23708] seq_read_iter+0x853/0x940 [ 640.207069][T23708] ? __rcu_read_unlock+0x4f/0x70 [ 640.207107][T23708] ? get_pid_task+0x96/0xd0 [ 640.207179][T23708] ? avc_policy_seqno+0x15/0x30 [ 640.207219][T23708] proc_reg_read_iter+0x10d/0x180 [ 640.207252][T23708] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 640.207284][T23708] vfs_read+0x5cd/0x6f0 [ 640.207382][T23708] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 640.207419][T23708] __x64_sys_pread64+0xfd/0x150 [ 640.207457][T23708] x64_sys_call+0x296d/0x2fb0 [ 640.207484][T23708] do_syscall_64+0xd2/0x200 [ 640.207540][T23708] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 640.207577][T23708] ? clear_bhb_loop+0x40/0x90 [ 640.207603][T23708] ? clear_bhb_loop+0x40/0x90 [ 640.207630][T23708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.207674][T23708] RIP: 0033:0x7f79c7cfe969 [ 640.207690][T23708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.207714][T23708] RSP: 002b:00007f79c6367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 640.207740][T23708] RAX: ffffffffffffffda RBX: 00007f79c7f25fa0 RCX: 00007f79c7cfe969 [ 640.207757][T23708] RDX: 00000000000000b3 RSI: 0000200000000100 RDI: 0000000000000003 [ 640.207774][T23708] RBP: 00007f79c6367090 R08: 0000000000000000 R09: 0000000000000000 [ 640.207812][T23708] R10: 0800000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.207825][T23708] R13: 0000000000000000 R14: 00007f79c7f25fa0 R15: 00007ffda6b6c088 [ 640.207846][T23708] [ 640.214210][ T29] audit: type=1400 audit(1748699231.722:19135): avc: denied { write } for pid=23705 comm="syz.0.6363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 640.220181][T23710] loop0: detected capacity change from 0 to 1024 [ 640.264879][T23686] loop2: p5 start 163840 is beyond EOD, truncated [ 640.479463][T23706] EXT4-fs (loop4): orphan cleanup on readonly fs [ 640.486562][T23710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.486531][T23706] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 640.494079][T23710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.6363: missing EA_INODE flag [ 640.498618][T23706] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 640.498643][T23706] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6364: Failed to acquire dquot type 1 [ 640.502160][T23706] EXT4-fs (loop4): 1 truncate cleaned up [ 640.549465][T23706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 640.571317][T23728] 8021q: VLANs not supported on gre0 [ 640.599033][T23710] EXT4-fs (loop0): Remounting filesystem read-only [ 640.618642][T12574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.633107][T18370] udevd[18370]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 640.643955][T21361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.654306][T18370] udevd[18370]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 640.736744][ T29] audit: type=1400 audit(1748699232.242:19136): avc: denied { connect } for pid=23740 comm="syz.0.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 640.764811][T23742] tipc: Failed to obtain node identity [ 640.770338][T23742] tipc: Enabling of bearer rejected, failed to enable media [ 640.779836][T23747] FAULT_INJECTION: forcing a failure. [ 640.779836][T23747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.793066][T23747] CPU: 1 UID: 0 PID: 23747 Comm: syz.5.6379 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 640.793164][T23747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.793181][T23747] Call Trace: [ 640.793190][T23747] [ 640.793200][T23747] __dump_stack+0x1d/0x30 [ 640.793228][T23747] dump_stack_lvl+0xe8/0x140 [ 640.793254][T23747] dump_stack+0x15/0x1b [ 640.793275][T23747] should_fail_ex+0x265/0x280 [ 640.793321][T23747] should_fail+0xb/0x20 [ 640.793357][T23747] should_fail_usercopy+0x1a/0x20 [ 640.793379][T23747] _copy_from_user+0x1c/0xb0 [ 640.793470][T23747] __sys_bpf+0x178/0x790 [ 640.793563][T23747] __x64_sys_bpf+0x41/0x50 [ 640.793602][T23747] x64_sys_call+0x2478/0x2fb0 [ 640.793632][T23747] do_syscall_64+0xd2/0x200 [ 640.793667][T23747] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 640.793742][T23747] ? clear_bhb_loop+0x40/0x90 [ 640.793771][T23747] ? clear_bhb_loop+0x40/0x90 [ 640.793800][T23747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.793873][T23747] RIP: 0033:0x7f836dc4e969 [ 640.793894][T23747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.794066][T23747] RSP: 002b:00007f836c2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.794090][T23747] RAX: ffffffffffffffda RBX: 00007f836de75fa0 RCX: 00007f836dc4e969 [ 640.794106][T23747] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 640.794121][T23747] RBP: 00007f836c2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 640.794136][T23747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.794149][T23747] R13: 0000000000000000 R14: 00007f836de75fa0 R15: 00007ffda591b2e8 [ 640.794168][T23747] [ 640.995700][T23742] Cannot find set identified by id 0 to match [ 641.007737][T23742] loop0: detected capacity change from 0 to 512 [ 641.028141][T23742] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 641.038642][T23751] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 641.045207][T23751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 641.052873][T23751] vhci_hcd vhci_hcd.0: Device attached [ 641.060650][T23749] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 641.062086][T23742] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.6376: corrupted in-inode xattr: bad e_name length [ 641.108392][T23751] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 641.114982][T23751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 641.122724][T23751] vhci_hcd vhci_hcd.0: Device attached [ 641.142374][T23742] EXT4-fs (loop0): Remounting filesystem read-only [ 641.144347][T23760] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 641.155564][T23760] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 641.163220][T23760] vhci_hcd vhci_hcd.0: Device attached [ 641.164478][T23742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.176790][T23765] 8021q: VLANs not supported on gre0 [ 641.208543][ T29] audit: type=1400 audit(1748699232.722:19137): avc: denied { listen } for pid=23766 comm="syz.3.6385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 641.237829][T23769] random: crng reseeded on system resumption [ 641.279972][ T29] audit: type=1400 audit(1748699232.792:19138): avc: denied { ioctl } for pid=23766 comm="syz.3.6385" path="socket:[70385]" dev="sockfs" ino=70385 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 641.318281][T23760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 641.319980][T22754] usb 11-1: new low-speed USB device number 9 using vhci_hcd [ 641.334300][T21361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.349993][T23751] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 641.356728][T23751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 641.364433][T23751] vhci_hcd vhci_hcd.0: Device attached [ 641.400750][T23760] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 641.407419][T23760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 641.414947][T23760] vhci_hcd vhci_hcd.0: Device attached [ 641.464885][T23783] __nla_validate_parse: 8 callbacks suppressed [ 641.464907][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6390'. [ 641.495119][T23772] vhci_hcd: connection closed [ 641.495273][T23761] vhci_hcd: connection closed [ 641.495326][T23752] vhci_hcd: connection reset by peer [ 641.495532][T23757] vhci_hcd: connection closed [ 641.510316][T23775] vhci_hcd: connection closed [ 641.535126][T13677] vhci_hcd: stop threads [ 641.544091][T13677] vhci_hcd: release socket [ 641.548670][T13677] vhci_hcd: disconnect device [ 641.585946][T23789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6391'. [ 641.587905][T13677] vhci_hcd: stop threads [ 641.599430][T13677] vhci_hcd: release socket [ 641.604008][T13677] vhci_hcd: disconnect device [ 641.627685][T13677] vhci_hcd: stop threads [ 641.631983][T13677] vhci_hcd: release socket [ 641.636483][T13677] vhci_hcd: disconnect device [ 641.653486][T13677] vhci_hcd: stop threads [ 641.658114][T13677] vhci_hcd: release socket [ 641.662681][T13677] vhci_hcd: disconnect device [ 641.665097][T23793] loop4: detected capacity change from 0 to 512 [ 641.705633][T23793] ext4: Bad value for 'commit' [ 641.708512][T13677] vhci_hcd: stop threads [ 641.714877][T13677] vhci_hcd: release socket [ 641.719358][T13677] vhci_hcd: disconnect device [ 641.765866][T23802] FAULT_INJECTION: forcing a failure. [ 641.765866][T23802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.779100][T23802] CPU: 0 UID: 0 PID: 23802 Comm: syz.0.6398 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 641.779136][T23802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.779170][T23802] Call Trace: [ 641.779180][T23802] [ 641.779191][T23802] __dump_stack+0x1d/0x30 [ 641.779279][T23802] dump_stack_lvl+0xe8/0x140 [ 641.779305][T23802] dump_stack+0x15/0x1b [ 641.779401][T23802] should_fail_ex+0x265/0x280 [ 641.779440][T23802] should_fail+0xb/0x20 [ 641.779477][T23802] should_fail_usercopy+0x1a/0x20 [ 641.779548][T23802] _copy_from_user+0x1c/0xb0 [ 641.779576][T23802] __x64_sys_epoll_ctl+0x92/0x100 [ 641.779608][T23802] x64_sys_call+0x26ef/0x2fb0 [ 641.779637][T23802] do_syscall_64+0xd2/0x200 [ 641.779681][T23802] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 641.779717][T23802] ? clear_bhb_loop+0x40/0x90 [ 641.779741][T23802] ? clear_bhb_loop+0x40/0x90 [ 641.779763][T23802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.779785][T23802] RIP: 0033:0x7f78600ae969 [ 641.779868][T23802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.779913][T23802] RSP: 002b:00007f785e717038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 641.779931][T23802] RAX: ffffffffffffffda RBX: 00007f78602d5fa0 RCX: 00007f78600ae969 [ 641.779945][T23802] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 641.780018][T23802] RBP: 00007f785e717090 R08: 0000000000000000 R09: 0000000000000000 [ 641.780031][T23802] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 641.780047][T23802] R13: 0000000000000000 R14: 00007f78602d5fa0 R15: 00007ffc3c49f248 [ 641.780071][T23802] [ 642.106217][T23808] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 642.112886][T23808] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 642.120569][T23808] vhci_hcd vhci_hcd.0: Device attached [ 642.355258][T23808] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 642.361937][T23808] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 642.369423][T23808] vhci_hcd vhci_hcd.0: Device attached [ 642.390238][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6401'. [ 642.401618][T23818] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 642.408405][T23818] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 642.416091][T23818] vhci_hcd vhci_hcd.0: Device attached [ 642.440011][T23822] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(21) [ 642.446679][T23822] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 642.454854][T23822] vhci_hcd vhci_hcd.0: Device attached [ 642.467311][T23820] vlan2: entered promiscuous mode [ 642.472407][T23820] bridge0: entered promiscuous mode [ 642.498011][T23825] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 642.504670][T23825] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 642.512214][T23825] vhci_hcd vhci_hcd.0: Device attached [ 642.522539][T23806] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 642.529167][T23806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 642.536837][T23806] vhci_hcd vhci_hcd.0: Device attached [ 642.548126][T23811] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 642.554916][T23811] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 642.562499][T23811] vhci_hcd vhci_hcd.0: Device attached [ 642.588194][T23800] FAULT_INJECTION: forcing a failure. [ 642.588194][T23800] name failslab, interval 1, probability 0, space 0, times 0 [ 642.600973][T23800] CPU: 0 UID: 0 PID: 23800 Comm: syz.2.6396 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 642.601001][T23800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.601016][T23800] Call Trace: [ 642.601023][T23800] [ 642.601031][T23800] __dump_stack+0x1d/0x30 [ 642.601055][T23800] dump_stack_lvl+0xe8/0x140 [ 642.601080][T23800] dump_stack+0x15/0x1b [ 642.601177][T23800] should_fail_ex+0x265/0x280 [ 642.601221][T23800] should_failslab+0x8c/0xb0 [ 642.601258][T23800] kmem_cache_alloc_noprof+0x50/0x310 [ 642.601294][T23800] ? taskstats_exit+0x297/0x6a0 [ 642.601353][T23800] taskstats_exit+0x297/0x6a0 [ 642.601387][T23800] do_exit+0x55a/0x16f0 [ 642.601427][T23800] do_group_exit+0xff/0x140 [ 642.601456][T23800] ? get_signal+0xe51/0xf70 [ 642.601508][T23800] get_signal+0xe59/0xf70 [ 642.601550][T23800] arch_do_signal_or_restart+0x96/0x480 [ 642.601629][T23800] exit_to_user_mode_loop+0x7a/0x100 [ 642.601662][T23800] do_syscall_64+0x1d6/0x200 [ 642.601762][T23800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 642.601797][T23800] ? clear_bhb_loop+0x40/0x90 [ 642.601826][T23800] ? clear_bhb_loop+0x40/0x90 [ 642.601869][T23800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.601890][T23800] RIP: 0033:0x7f6243c7e969 [ 642.601957][T23800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.601983][T23800] RSP: 002b:00007f62422e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 642.602009][T23800] RAX: fffffffffffffe00 RBX: 00007f6243ea5fa0 RCX: 00007f6243c7e969 [ 642.602101][T23800] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000003 [ 642.602115][T23800] RBP: 00007f62422e7090 R08: 0000000000000000 R09: 0000000000000000 [ 642.602132][T23800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.602147][T23800] R13: 0000000000000000 R14: 00007f6243ea5fa0 R15: 00007ffd597d9628 [ 642.602171][T23800] [ 642.602207][ T3393] vhci_hcd: vhci_device speed not set [ 642.614658][ T3394] vhci_hcd: vhci_device speed not set [ 642.809660][T23818] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 642.816317][T23818] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 642.820549][T23808] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 642.824044][T23818] vhci_hcd vhci_hcd.0: Device attached [ 642.830486][T23808] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 642.830607][T23808] vhci_hcd vhci_hcd.0: Device attached [ 642.893277][T23809] vhci_hcd: connection closed [ 642.893629][T13676] vhci_hcd: stop threads [ 642.902811][T13676] vhci_hcd: release socket [ 642.905998][T23828] vhci_hcd: connection closed [ 642.907398][T13676] vhci_hcd: disconnect device [ 642.917410][ T3393] usb 1-2: new full-speed USB device number 11 using vhci_hcd [ 642.925794][T23815] vhci_hcd: connection closed [ 642.925961][T23823] vhci_hcd: connection closed [ 642.930916][T23807] vhci_hcd: connection closed [ 642.957700][ T3393] usb 1-2: enqueue for inactive port 1 [ 642.991974][ T29] audit: type=1400 audit(1748699234.502:19139): avc: denied { execute } for pid=23835 comm="syz.5.6405" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=70841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 643.010817][T13676] vhci_hcd: stop threads [ 643.021061][T13676] vhci_hcd: release socket [ 643.025019][ T3393] usb 1-2: enqueue for inactive port 1 [ 643.030997][T13676] vhci_hcd: disconnect device [ 643.038291][ T3394] usb 9-2: new full-speed USB device number 12 using vhci_hcd [ 643.046023][ T3393] usb 1-2: enqueue for inactive port 1 [ 643.046148][T13676] vhci_hcd: stop threads [ 643.055120][T23811] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14) [ 643.055809][T13676] vhci_hcd: release socket [ 643.062324][T23811] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 643.066790][T13676] vhci_hcd: disconnect device [ 643.074381][T23811] vhci_hcd vhci_hcd.0: Device attached [ 643.112883][T23818] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(22) [ 643.114321][T23848] FAULT_INJECTION: forcing a failure. [ 643.114321][T23848] name failslab, interval 1, probability 0, space 0, times 0 [ 643.119531][T23818] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 643.119690][T23818] vhci_hcd vhci_hcd.0: Device attached [ 643.132272][T23848] CPU: 0 UID: 0 PID: 23848 Comm: syz.2.6406 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 643.132361][T23848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 643.132381][T23848] Call Trace: [ 643.132390][T23848] [ 643.132471][T23848] __dump_stack+0x1d/0x30 [ 643.132500][T23848] dump_stack_lvl+0xe8/0x140 [ 643.132528][T23848] dump_stack+0x15/0x1b [ 643.132552][T23848] should_fail_ex+0x265/0x280 [ 643.132639][T23848] should_failslab+0x8c/0xb0 [ 643.132670][T23848] kmem_cache_alloc_noprof+0x50/0x310 [ 643.132708][T23848] ? getname_flags+0x80/0x3b0 [ 643.132789][T23848] getname_flags+0x80/0x3b0 [ 643.132822][T23848] do_sys_openat2+0x60/0x110 [ 643.132895][T23848] __x64_sys_openat+0xf2/0x120 [ 643.132986][T23848] x64_sys_call+0x1af/0x2fb0 [ 643.133071][T23848] do_syscall_64+0xd2/0x200 [ 643.133109][T23848] ? clear_bhb_loop+0x40/0x90 [ 643.133139][T23848] ? clear_bhb_loop+0x40/0x90 [ 643.133208][T23848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.133238][T23848] RIP: 0033:0x7f6243c7d2d0 [ 643.133328][T23848] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 643.133353][T23848] RSP: 002b:00007f62422e6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 643.133381][T23848] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6243c7d2d0 [ 643.133398][T23848] RDX: 0000000000000002 RSI: 00007f62422e6fa0 RDI: 00000000ffffff9c [ 643.133416][T23848] RBP: 00007f62422e6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 643.133433][T23848] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 643.133450][T23848] R13: 0000000000000000 R14: 00007f6243ea5fa0 R15: 00007ffd597d9628 [ 643.133564][T23848] [ 643.136648][ T29] audit: type=1326 audit(1748699234.542:19140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.3.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 643.154664][T13676] vhci_hcd: stop threads [ 643.157680][ T29] audit: type=1326 audit(1748699234.542:19141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.3.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c7cfe969 code=0x7ffc0000 [ 643.167775][T13676] vhci_hcd: release socket [ 643.178498][T23840] loop3: detected capacity change from 0 to 256 [ 643.182932][T13676] vhci_hcd: disconnect device [ 643.216744][T23830] vhci_hcd: connection closed [ 643.221526][T23843] vhci_hcd: connection closed [ 643.233454][T23813] vhci_hcd: connection closed [ 643.235369][ T3393] vhci_hcd: vhci_device speed not set [ 643.240135][T23819] vhci_hcd: connection reset by peer [ 643.249205][T23838] vhci_hcd: connection closed [ 643.250558][T23826] vhci_hcd: connection closed [ 643.358436][T13676] vhci_hcd: stop threads [ 643.429317][T13676] vhci_hcd: release socket [ 643.433820][T13676] vhci_hcd: disconnect device [ 643.481135][T13676] vhci_hcd: stop threads [ 643.485506][T13676] vhci_hcd: release socket [ 643.490000][T13676] vhci_hcd: disconnect device [ 643.491565][T23862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6410'. [ 643.495388][T13676] vhci_hcd: stop threads [ 643.503593][T23862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6410'. [ 643.507887][T13676] vhci_hcd: release socket [ 643.507903][T13676] vhci_hcd: disconnect device [ 643.525569][T13676] vhci_hcd: stop threads [ 643.530413][T13676] vhci_hcd: release socket [ 643.536232][T13676] vhci_hcd: disconnect device [ 643.642354][T13676] vhci_hcd: stop threads [ 643.646710][T13676] vhci_hcd: release socket [ 643.651180][T13676] vhci_hcd: disconnect device [ 643.664722][T13676] vhci_hcd: stop threads [ 643.669027][T13676] vhci_hcd: release socket [ 643.669576][T23862] syz.5.6410 (23862) used greatest stack depth: 9464 bytes left [ 643.673487][T13676] vhci_hcd: disconnect device [ 643.686371][T13676] vhci_hcd: stop threads [ 643.690667][T13676] vhci_hcd: release socket [ 643.695136][T13676] vhci_hcd: disconnect device [ 643.876435][T23879] FAULT_INJECTION: forcing a failure. [ 643.876435][T23879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.890179][T23879] CPU: 0 UID: 0 PID: 23879 Comm: syz.5.6415 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 643.890215][T23879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 643.890228][T23879] Call Trace: [ 643.890236][T23879] [ 643.890322][T23879] __dump_stack+0x1d/0x30 [ 643.890351][T23879] dump_stack_lvl+0xe8/0x140 [ 643.890379][T23879] dump_stack+0x15/0x1b [ 643.890403][T23879] should_fail_ex+0x265/0x280 [ 643.890444][T23879] should_fail+0xb/0x20 [ 643.890475][T23879] should_fail_usercopy+0x1a/0x20 [ 643.890597][T23879] _copy_from_user+0x1c/0xb0 [ 643.890621][T23879] __sys_sendto+0x19e/0x330 [ 643.890656][T23879] __x64_sys_sendto+0x76/0x90 [ 643.890686][T23879] x64_sys_call+0x2eb6/0x2fb0 [ 643.890715][T23879] do_syscall_64+0xd2/0x200 [ 643.890812][T23879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 643.890886][T23879] ? clear_bhb_loop+0x40/0x90 [ 643.890915][T23879] ? clear_bhb_loop+0x40/0x90 [ 643.890941][T23879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.890963][T23879] RIP: 0033:0x7f836dc4e969 [ 643.890980][T23879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.891049][T23879] RSP: 002b:00007f836c296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 643.891073][T23879] RAX: ffffffffffffffda RBX: 00007f836de76080 RCX: 00007f836dc4e969 [ 643.891087][T23879] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000005 [ 643.891105][T23879] RBP: 00007f836c296090 R08: 0000200000000540 R09: 0000000000000014 [ 643.891119][T23879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.891131][T23879] R13: 0000000000000000 R14: 00007f836de76080 R15: 00007ffda591b2e8 [ 643.891156][T23879] [ 644.273615][T23897] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 644.287403][T23897] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 644.291600][T23896] loop3: detected capacity change from 0 to 128 [ 644.491444][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 644.491463][ T29] audit: type=1400 audit(1748699236.002:19196): avc: denied { bind } for pid=23914 comm="syz.0.6428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 644.524804][T23917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23917 comm=syz.3.6423 [ 644.547686][ T29] audit: type=1400 audit(1748699236.042:19197): avc: denied { setopt } for pid=23914 comm="syz.0.6428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 644.567945][ T29] audit: type=1400 audit(1748699236.042:19198): avc: denied { write } for pid=23914 comm="syz.0.6428" path="socket:[70599]" dev="sockfs" ino=70599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 644.668456][T23930] wg2: entered promiscuous mode [ 644.673548][T23930] wg2: entered allmulticast mode [ 644.723225][T23934] FAULT_INJECTION: forcing a failure. [ 644.723225][T23934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.736461][T23934] CPU: 1 UID: 0 PID: 23934 Comm: syz.0.6432 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 644.736498][T23934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.736515][T23934] Call Trace: [ 644.736522][T23934] [ 644.736532][T23934] __dump_stack+0x1d/0x30 [ 644.736560][T23934] dump_stack_lvl+0xe8/0x140 [ 644.736587][T23934] dump_stack+0x15/0x1b [ 644.736685][T23934] should_fail_ex+0x265/0x280 [ 644.736724][T23934] should_fail+0xb/0x20 [ 644.736761][T23934] should_fail_usercopy+0x1a/0x20 [ 644.736847][T23934] _copy_from_user+0x1c/0xb0 [ 644.736881][T23934] __sys_bpf+0x178/0x790 [ 644.736942][T23934] __x64_sys_bpf+0x41/0x50 [ 644.736983][T23934] x64_sys_call+0x2478/0x2fb0 [ 644.737013][T23934] do_syscall_64+0xd2/0x200 [ 644.737086][T23934] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 644.737147][T23934] ? clear_bhb_loop+0x40/0x90 [ 644.737177][T23934] ? clear_bhb_loop+0x40/0x90 [ 644.737208][T23934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.737238][T23934] RIP: 0033:0x7f78600ae969 [ 644.737258][T23934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.737298][T23934] RSP: 002b:00007f785e717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 644.737322][T23934] RAX: ffffffffffffffda RBX: 00007f78602d5fa0 RCX: 00007f78600ae969 [ 644.737339][T23934] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 644.737403][T23934] RBP: 00007f785e717090 R08: 0000000000000000 R09: 0000000000000000 [ 644.737466][T23934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.737483][T23934] R13: 0000000000000000 R14: 00007f78602d5fa0 R15: 00007ffc3c49f248 [ 644.737509][T23934] [ 644.913950][T23904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.089859][T23954] FAULT_INJECTION: forcing a failure. [ 645.089859][T23954] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 645.103177][T23954] CPU: 0 UID: 0 PID: 23954 Comm: syz.5.6437 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 645.103207][T23954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.103224][T23954] Call Trace: [ 645.103233][T23954] [ 645.103243][T23954] __dump_stack+0x1d/0x30 [ 645.103271][T23954] dump_stack_lvl+0xe8/0x140 [ 645.103324][T23954] dump_stack+0x15/0x1b [ 645.103345][T23954] should_fail_ex+0x265/0x280 [ 645.103380][T23954] should_fail_alloc_page+0xf2/0x100 [ 645.103475][T23954] __alloc_frozen_pages_noprof+0xff/0x360 [ 645.103515][T23954] __alloc_pages_noprof+0x9/0x20 [ 645.103618][T23954] ___kmalloc_large_node+0x73/0x140 [ 645.103647][T23954] __kmalloc_large_node_noprof+0x16/0xa0 [ 645.103675][T23954] __kmalloc_noprof+0x2ab/0x3e0 [ 645.103707][T23954] ? iovec_from_user+0x84/0x210 [ 645.103787][T23954] iovec_from_user+0x84/0x210 [ 645.103816][T23954] ? process_vm_rw+0x137/0x950 [ 645.103892][T23954] process_vm_rw+0x15b/0x950 [ 645.103985][T23954] ? _parse_integer+0x27/0x40 [ 645.104024][T23954] ? kstrtoull+0x111/0x140 [ 645.104077][T23954] ? __fget_files+0x184/0x1c0 [ 645.104107][T23954] ? fput+0x8f/0xc0 [ 645.104214][T23954] __x64_sys_process_vm_writev+0x78/0x90 [ 645.104253][T23954] x64_sys_call+0xe80/0x2fb0 [ 645.104283][T23954] do_syscall_64+0xd2/0x200 [ 645.104321][T23954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 645.104357][T23954] ? clear_bhb_loop+0x40/0x90 [ 645.104398][T23954] ? clear_bhb_loop+0x40/0x90 [ 645.104420][T23954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.104442][T23954] RIP: 0033:0x7f836dc4e969 [ 645.104460][T23954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.104531][T23954] RSP: 002b:00007f836c2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 645.104604][T23954] RAX: ffffffffffffffda RBX: 00007f836de75fa0 RCX: 00007f836dc4e969 [ 645.104619][T23954] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000018c [ 645.104636][T23954] RBP: 00007f836c2b7090 R08: 000000000000023a R09: 0000000000000000 [ 645.104728][T23954] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 645.104745][T23954] R13: 0000000000000000 R14: 00007f836de75fa0 R15: 00007ffda591b2e8 [ 645.104770][T23954] [ 645.817818][ T29] audit: type=1326 audit(1748699237.332:19199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23969 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836dc4e969 code=0x7ffc0000 [ 645.841556][ T29] audit: type=1326 audit(1748699237.332:19200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23969 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836dc4e969 code=0x7ffc0000 [ 645.882985][T23970] FAULT_INJECTION: forcing a failure. [ 645.882985][T23970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.896168][T23970] CPU: 1 UID: 0 PID: 23970 Comm: syz.2.6442 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 645.896199][T23970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.896217][T23970] Call Trace: [ 645.896226][T23970] [ 645.896236][T23970] __dump_stack+0x1d/0x30 [ 645.896304][T23970] dump_stack_lvl+0xe8/0x140 [ 645.896324][T23970] dump_stack+0x15/0x1b [ 645.896395][T23970] should_fail_ex+0x265/0x280 [ 645.896439][T23970] should_fail+0xb/0x20 [ 645.896542][T23970] should_fail_usercopy+0x1a/0x20 [ 645.896568][T23970] _copy_from_user+0x1c/0xb0 [ 645.896598][T23970] ___sys_sendmsg+0xc1/0x1d0 [ 645.896746][T23970] __x64_sys_sendmsg+0xd4/0x160 [ 645.896811][T23970] x64_sys_call+0x2999/0x2fb0 [ 645.896897][T23970] do_syscall_64+0xd2/0x200 [ 645.896927][T23970] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 645.896992][T23970] ? clear_bhb_loop+0x40/0x90 [ 645.897022][T23970] ? clear_bhb_loop+0x40/0x90 [ 645.897052][T23970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.897081][T23970] RIP: 0033:0x7f6243c7e969 [ 645.897137][T23970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.897162][T23970] RSP: 002b:00007f62422e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.897182][T23970] RAX: ffffffffffffffda RBX: 00007f6243ea5fa0 RCX: 00007f6243c7e969 [ 645.897196][T23970] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 645.897212][T23970] RBP: 00007f62422e7090 R08: 0000000000000000 R09: 0000000000000000 [ 645.897228][T23970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.897250][T23970] R13: 0000000000000000 R14: 00007f6243ea5fa0 R15: 00007ffd597d9628 [ 645.897272][T23970] [ 646.103044][ T29] audit: type=1326 audit(1748699237.392:19201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23969 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f836dc4e969 code=0x7ffc0000 [ 646.126968][ T29] audit: type=1326 audit(1748699237.392:19202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23969 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836dc4e969 code=0x7ffc0000 [ 646.150580][ T29] audit: type=1326 audit(1748699237.392:19203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23969 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836dc4e969 code=0x7ffc0000 [ 646.174220][ T29] audit: type=1326 audit(1748699237.392:19204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23969 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f836dc4e969 code=0x7ffc0000 [ 646.174254][ T29] audit: type=1326 audit(1748699237.392:19205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23969 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836dc4e969 code=0x7ffc0000 [ 646.369355][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6441'. [ 646.377081][T23985] loop4: detected capacity change from 0 to 512 [ 646.378483][T22754] usb 11-1: enqueue for inactive port 0 [ 646.394557][T22754] usb 11-1: enqueue for inactive port 0 [ 646.422510][T23992] loop4: detected capacity change from 0 to 512 [ 646.437465][T23993] loop5: detected capacity change from 0 to 1024 [ 646.466854][T22754] vhci_hcd: vhci_device speed not set [ 646.476448][T23992] ext4: Unknown parameter 'hash' [ 646.481675][T23993] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 646.542006][T23993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.713798][T21892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.760995][T23998] loop3: detected capacity change from 0 to 512 [ 646.770790][T24014] binfmt_misc: register: failed to install interpreter file ./file0 [ 646.840830][T23998] EXT4-fs: Ignoring removed mblk_io_submit option [ 646.857920][T23998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 646.951698][T23998] EXT4-fs (loop3): 1 truncate cleaned up [ 646.968494][T23998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.258094][T24037] IPv6: Can't replace route, no match found [ 647.343030][T23998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 647.349673][T23998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 647.360261][T23998] vhci_hcd vhci_hcd.0: Device attached [ 647.386264][T24035] vhci_hcd: connection closed [ 647.390783][ T37] vhci_hcd: stop threads [ 647.400278][ T37] vhci_hcd: release socket [ 647.404902][ T37] vhci_hcd: disconnect device [ 647.512647][T24051] FAULT_INJECTION: forcing a failure. [ 647.512647][T24051] name failslab, interval 1, probability 0, space 0, times 0 [ 647.525507][T24051] CPU: 0 UID: 0 PID: 24051 Comm: syz.4.6465 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 647.525569][T24051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.525607][T24051] Call Trace: [ 647.525616][T24051] [ 647.525627][T24051] __dump_stack+0x1d/0x30 [ 647.525652][T24051] dump_stack_lvl+0xe8/0x140 [ 647.525672][T24051] dump_stack+0x15/0x1b [ 647.525688][T24051] should_fail_ex+0x265/0x280 [ 647.525781][T24051] ? alloc_pipe_info+0xae/0x350 [ 647.525819][T24051] should_failslab+0x8c/0xb0 [ 647.525849][T24051] __kmalloc_cache_noprof+0x4c/0x320 [ 647.525910][T24051] alloc_pipe_info+0xae/0x350 [ 647.525930][T24051] splice_direct_to_actor+0x592/0x680 [ 647.525962][T24051] ? kstrtouint_from_user+0x9f/0xf0 [ 647.526062][T24051] ? __pfx_direct_splice_actor+0x10/0x10 [ 647.526095][T24051] ? __bpf_ringbuf_reserve+0x1e5/0x530 [ 647.526140][T24051] ? get_pid_task+0x96/0xd0 [ 647.526161][T24051] ? avc_policy_seqno+0x15/0x30 [ 647.526189][T24051] ? selinux_file_permission+0x1e4/0x320 [ 647.526218][T24051] do_splice_direct+0xda/0x150 [ 647.526354][T24051] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 647.526399][T24051] do_sendfile+0x380/0x650 [ 647.526437][T24051] __x64_sys_sendfile64+0x105/0x150 [ 647.526467][T24051] x64_sys_call+0xb39/0x2fb0 [ 647.526531][T24051] do_syscall_64+0xd2/0x200 [ 647.526565][T24051] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 647.526593][T24051] ? clear_bhb_loop+0x40/0x90 [ 647.526626][T24051] ? clear_bhb_loop+0x40/0x90 [ 647.526651][T24051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.526678][T24051] RIP: 0033:0x7ff52923e969 [ 647.526694][T24051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.526715][T24051] RSP: 002b:00007ff5278a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 647.526736][T24051] RAX: ffffffffffffffda RBX: 00007ff529465fa0 RCX: 00007ff52923e969 [ 647.526749][T24051] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 647.526762][T24051] RBP: 00007ff5278a7090 R08: 0000000000000000 R09: 0000000000000000 [ 647.526775][T24051] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 647.526788][T24051] R13: 0000000000000000 R14: 00007ff529465fa0 R15: 00007ffc92513df8 [ 647.526814][T24051] [ 647.832944][T24058] loop4: detected capacity change from 0 to 512 [ 647.881871][T24058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec01c, mo2=0002] [ 647.894374][T24058] EXT4-fs (loop4): orphan cleanup on readonly fs [ 647.901381][T24058] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.6466: iget: bad i_size value: 360287970189639690 [ 647.905354][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6469'. [ 647.917950][T24058] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.6466: Bad quota inode: 15, type: 2 [ 647.940181][T24058] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 647.956430][T24066] vlan2: entered promiscuous mode [ 647.961610][T24066] bridge0: entered promiscuous mode [ 647.969922][T24058] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 647.981295][T24058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 648.041208][T12574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.087820][T24081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6472'. [ 648.124586][ T3394] usb 9-2: enqueue for inactive port 1 [ 648.130269][ T3394] usb 9-2: enqueue for inactive port 1 [ 648.137649][T22862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.145023][T24084] FAULT_INJECTION: forcing a failure. [ 648.145023][T24084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 648.160097][T24084] CPU: 1 UID: 0 PID: 24084 Comm: syz.4.6474 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 648.160134][T24084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.160209][T24084] Call Trace: [ 648.160218][T24084] [ 648.160228][T24084] __dump_stack+0x1d/0x30 [ 648.160256][T24084] dump_stack_lvl+0xe8/0x140 [ 648.160292][T24084] dump_stack+0x15/0x1b [ 648.160315][T24084] should_fail_ex+0x265/0x280 [ 648.160359][T24084] should_fail_alloc_page+0xf2/0x100 [ 648.160432][T24084] __alloc_frozen_pages_noprof+0xff/0x360 [ 648.160527][T24084] alloc_pages_mpol+0xb3/0x250 [ 648.160569][T24084] folio_alloc_mpol_noprof+0x39/0x80 [ 648.160607][T24084] shmem_get_folio_gfp+0x3cf/0xd60 [ 648.160664][T24084] ? simple_xattr_get+0xb9/0x120 [ 648.160700][T24084] shmem_write_begin+0xa8/0x190 [ 648.160747][T24084] generic_perform_write+0x184/0x490 [ 648.160782][T24084] shmem_file_write_iter+0xc5/0xf0 [ 648.160816][T24084] do_iter_readv_writev+0x3eb/0x4b0 [ 648.160892][T24084] vfs_writev+0x2df/0x8b0 [ 648.160937][T24084] __se_sys_pwritev2+0xfc/0x1c0 [ 648.160961][T24084] __x64_sys_pwritev2+0x67/0x80 [ 648.161038][T24084] x64_sys_call+0x1cea/0x2fb0 [ 648.161090][T24084] do_syscall_64+0xd2/0x200 [ 648.161124][T24084] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 648.161159][T24084] ? clear_bhb_loop+0x40/0x90 [ 648.161182][T24084] ? clear_bhb_loop+0x40/0x90 [ 648.161311][T24084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.161341][T24084] RIP: 0033:0x7ff52923e969 [ 648.161361][T24084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.161453][T24084] RSP: 002b:00007ff5278a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 648.161479][T24084] RAX: ffffffffffffffda RBX: 00007ff529465fa0 RCX: 00007ff52923e969 [ 648.161496][T24084] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 648.161513][T24084] RBP: 00007ff5278a7090 R08: 0000000000000000 R09: 0000000000000003 [ 648.161530][T24084] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001 [ 648.161547][T24084] R13: 0000000000000000 R14: 00007ff529465fa0 R15: 00007ffc92513df8 [ 648.161571][T24084] [ 648.391866][T24090] netlink: 'syz.0.6476': attribute type 1 has an invalid length. [ 648.409935][ T3394] vhci_hcd: vhci_device speed not set [ 648.433022][T24090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 648.467127][T24098] FAULT_INJECTION: forcing a failure. [ 648.467127][T24098] name failslab, interval 1, probability 0, space 0, times 0 [ 648.479982][T24098] CPU: 1 UID: 0 PID: 24098 Comm: syz.5.6477 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 648.480010][T24098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.480023][T24098] Call Trace: [ 648.480045][T24098] [ 648.480054][T24098] __dump_stack+0x1d/0x30 [ 648.480080][T24098] dump_stack_lvl+0xe8/0x140 [ 648.480104][T24098] dump_stack+0x15/0x1b [ 648.480123][T24098] should_fail_ex+0x265/0x280 [ 648.480198][T24098] should_failslab+0x8c/0xb0 [ 648.480229][T24098] __kmalloc_cache_node_noprof+0x54/0x320 [ 648.480267][T24098] ? __get_vm_area_node+0x106/0x1d0 [ 648.480370][T24098] __get_vm_area_node+0x106/0x1d0 [ 648.480412][T24098] __vmalloc_node_range_noprof+0x273/0xe40 [ 648.480458][T24098] ? sel_write_load+0x158/0x380 [ 648.480496][T24098] ? _parse_integer_limit+0x170/0x190 [ 648.480563][T24098] ? _parse_integer+0x27/0x40 [ 648.480596][T24098] ? __rcu_read_unlock+0x4f/0x70 [ 648.480619][T24098] ? avc_has_perm_noaudit+0x1b1/0x200 [ 648.480700][T24098] ? sel_write_load+0x158/0x380 [ 648.480735][T24098] vmalloc_noprof+0x82/0xc0 [ 648.480777][T24098] ? sel_write_load+0x158/0x380 [ 648.480841][T24098] sel_write_load+0x158/0x380 [ 648.480878][T24098] ? __pfx_sel_write_load+0x10/0x10 [ 648.480913][T24098] vfs_write+0x266/0x8e0 [ 648.481008][T24098] ? __rcu_read_unlock+0x4f/0x70 [ 648.481029][T24098] ? __fget_files+0x184/0x1c0 [ 648.481053][T24098] ksys_write+0xda/0x1a0 [ 648.481134][T24098] __x64_sys_write+0x40/0x50 [ 648.481159][T24098] x64_sys_call+0x2cdd/0x2fb0 [ 648.481298][T24098] do_syscall_64+0xd2/0x200 [ 648.481333][T24098] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 648.481368][T24098] ? clear_bhb_loop+0x40/0x90 [ 648.481437][T24098] ? clear_bhb_loop+0x40/0x90 [ 648.481469][T24098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.481579][T24098] RIP: 0033:0x7f836dc4e969 [ 648.481600][T24098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.481619][T24098] RSP: 002b:00007f836c2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.481639][T24098] RAX: ffffffffffffffda RBX: 00007f836de75fa0 RCX: 00007f836dc4e969 [ 648.481652][T24098] RDX: 000000000000ffa8 RSI: 0000000000000000 RDI: 0000000000000003 [ 648.481743][T24098] RBP: 00007f836c2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 648.481759][T24098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.481790][T24098] R13: 0000000000000000 R14: 00007f836de75fa0 R15: 00007ffda591b2e8 [ 648.481815][T24098] [ 648.481824][T24098] syz.5.6477: vmalloc error: size 65448, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 648.591934][T24103] bond7: entered promiscuous mode [ 648.594549][T24098] ,cpuset=/,mems_allowed=0 [ 648.599257][T24103] bond7: entered allmulticast mode [ 648.604450][T24098] CPU: 1 UID: 0 PID: 24098 Comm: syz.5.6477 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 648.604497][T24098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.604556][T24098] Call Trace: [ 648.604566][T24098] [ 648.604578][T24098] __dump_stack+0x1d/0x30 [ 648.604608][T24098] dump_stack_lvl+0xe8/0x140 [ 648.604635][T24098] dump_stack+0x15/0x1b [ 648.604659][T24098] warn_alloc+0x12b/0x1a0 [ 648.604708][T24098] __vmalloc_node_range_noprof+0x297/0xe40 [ 648.604785][T24098] ? _parse_integer_limit+0x170/0x190 [ 648.604834][T24098] ? _parse_integer+0x27/0x40 [ 648.604872][T24098] ? __rcu_read_unlock+0x4f/0x70 [ 648.604904][T24098] ? avc_has_perm_noaudit+0x1b1/0x200 [ 648.605021][T24098] ? sel_write_load+0x158/0x380 [ 648.605060][T24098] vmalloc_noprof+0x82/0xc0 [ 648.605203][T24098] ? sel_write_load+0x158/0x380 [ 648.605301][T24098] sel_write_load+0x158/0x380 [ 648.605338][T24098] ? __pfx_sel_write_load+0x10/0x10 [ 648.605376][T24098] vfs_write+0x266/0x8e0 [ 648.605404][T24098] ? __rcu_read_unlock+0x4f/0x70 [ 648.605473][T24098] ? __fget_files+0x184/0x1c0 [ 648.605507][T24098] ksys_write+0xda/0x1a0 [ 648.605534][T24098] __x64_sys_write+0x40/0x50 [ 648.605561][T24098] x64_sys_call+0x2cdd/0x2fb0 [ 648.605621][T24098] do_syscall_64+0xd2/0x200 [ 648.605658][T24098] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 648.605771][T24098] ? clear_bhb_loop+0x40/0x90 [ 648.605802][T24098] ? clear_bhb_loop+0x40/0x90 [ 648.605833][T24098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.605928][T24098] RIP: 0033:0x7f836dc4e969 [ 648.605951][T24098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.605985][T24098] RSP: 002b:00007f836c2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.606016][T24098] RAX: ffffffffffffffda RBX: 00007f836de75fa0 RCX: 00007f836dc4e969 [ 648.606034][T24098] RDX: 000000000000ffa8 RSI: 0000000000000000 RDI: 0000000000000003 [ 648.606051][T24098] RBP: 00007f836c2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 648.606069][T24098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.606086][T24098] R13: 0000000000000000 R14: 00007f836de75fa0 R15: 00007ffda591b2e8 [ 648.606112][T24098] [ 648.606211][T24098] Mem-Info: [ 648.614574][T24103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 648.618437][T24098] active_anon:13962 inactive_anon:0 isolated_anon:0 [ 648.618437][T24098] active_file:18571 inactive_file:2611 isolated_file:0 [ 648.618437][T24098] unevictable:0 dirty:740 writeback:0 [ 648.618437][T24098] slab_reclaimable:3507 slab_unreclaimable:51420 [ 648.618437][T24098] mapped:29623 shmem:5989 pagetables:1098 [ 648.618437][T24098] sec_pagetables:0 bounce:0 [ 648.618437][T24098] kernel_misc_reclaimable:0 [ 648.618437][T24098] free:1818930 free_pcp:12815 free_cma:0 [ 649.041714][T24098] Node 0 active_anon:56080kB inactive_anon:0kB active_file:74284kB inactive_file:10444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118608kB dirty:2960kB writeback:0kB shmem:23956kB writeback_tmp:0kB kernel_stack:7216kB pagetables:4740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 649.070730][T24098] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 649.097978][T24098] lowmem_reserve[]: 0 2882 7861 7861 [ 649.103312][T24098] Node 0 DMA32 free:2947844kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951472kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 649.131964][T24098] lowmem_reserve[]: 0 0 4978 4978 [ 649.137088][T24098] Node 0 Normal free:4312516kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:56080kB inactive_anon:0kB active_file:74284kB inactive_file:10444kB unevictable:0kB writepending:2960kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:46916kB local_pcp:23888kB free_cma:0kB [ 649.167523][T24098] lowmem_reserve[]: 0 0 0 0 [ 649.172145][T24098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 649.185023][T24098] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947844kB [ 649.201248][T24098] Node 0 Normal: 393*4kB (UM) 898*8kB (M) 213*16kB (ME) 248*32kB (UM) 237*64kB (ME) 74*128kB (UME) 43*256kB (UME) 16*512kB (ME) 31*1024kB (UME) 11*2048kB (UM) 1024*4096kB (UM) = 4312516kB [ 649.219975][T24098] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 649.229366][T24098] 27009 total pagecache pages [ 649.234075][T24098] 0 pages in swap cache [ 649.238273][T24098] Free swap = 124996kB [ 649.242475][T24098] Total swap = 124996kB [ 649.246703][T24098] 2097051 pages RAM [ 649.250519][T24098] 0 pages HighMem/MovableOnly [ 649.255261][T24098] 80785 pages reserved [ 649.275747][T24111] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 649.303272][T24115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6485'. [ 649.316442][T24115] vlan0: entered promiscuous mode [ 649.321566][T24115] bridge0: entered promiscuous mode [ 649.337527][T24117] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 649.354762][T24120] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 649.361419][T24120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.369103][T24120] vhci_hcd vhci_hcd.0: Device attached [ 649.375519][T24118] loop0: detected capacity change from 0 to 2048 [ 649.391329][T24120] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 649.398042][T24120] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.405856][T24120] vhci_hcd vhci_hcd.0: Device attached [ 649.460903][T24128] netlink: 'syz.4.6490': attribute type 1 has an invalid length. [ 649.470198][T24120] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 649.476899][T24120] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.484700][T24120] vhci_hcd vhci_hcd.0: Device attached [ 649.508254][T24120] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 649.514918][T24120] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.522602][T24120] vhci_hcd vhci_hcd.0: Device attached [ 649.532279][T24134] loop3: detected capacity change from 0 to 1024 [ 649.541398][T24134] EXT4-fs: Ignoring removed oldalloc option [ 649.543834][T24118] loop0: p1 < > p4 [ 649.559222][T24118] loop0: p4 size 8388608 extends beyond EOD, truncated [ 649.577471][T24128] 8021q: adding VLAN 0 to HW filter on device bond30 [ 649.578533][T24134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.644874][ T23] usb 5-1: new low-speed USB device number 16 using vhci_hcd [ 649.736389][T24120] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 649.743082][T24120] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 649.750822][T24120] vhci_hcd vhci_hcd.0: Device attached [ 649.863561][T18369] udevd[18369]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 649.876978][T24147] loop4: detected capacity change from 0 to 2048 [ 649.900423][T18370] udevd[18370]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 649.927513][T22862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.987789][T24123] vhci_hcd: connection closed [ 649.988026][T24121] vhci_hcd: connection reset by peer [ 649.994924][T24129] vhci_hcd: connection closed [ 650.000819][T13677] vhci_hcd: stop threads [ 650.004435][T24132] vhci_hcd: connection closed [ 650.005630][T13677] vhci_hcd: release socket [ 650.015275][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 650.015293][ T29] audit: type=1326 audit(1748699241.532:19249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.018974][T13677] vhci_hcd: disconnect device [ 650.020221][T24140] vhci_hcd: connection closed [ 650.055831][ T29] audit: type=1326 audit(1748699241.572:19250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.084118][ T29] audit: type=1326 audit(1748699241.572:19251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.085080][T24147] loop4: p1 < > p4 [ 650.107767][ T29] audit: type=1326 audit(1748699241.572:19252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.117691][T24147] loop4: p4 size 8388608 extends beyond EOD, [ 650.135142][ T29] audit: type=1326 audit(1748699241.572:19253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.135216][ T29] audit: type=1326 audit(1748699241.572:19254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.141271][T24147] truncated [ 650.144864][T13677] vhci_hcd: stop threads [ 650.164881][ T29] audit: type=1326 audit(1748699241.572:19255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.164959][ T29] audit: type=1326 audit(1748699241.572:19256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.164994][ T29] audit: type=1326 audit(1748699241.572:19257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.165073][ T29] audit: type=1326 audit(1748699241.572:19258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24145 comm="syz.4.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff52923e969 code=0x7ffc0000 [ 650.268723][ T3007] loop4: p1 < > p4 [ 650.291514][T13677] vhci_hcd: release socket [ 650.291531][T13677] vhci_hcd: disconnect device [ 650.298909][T24153] netlink: 'syz.3.6494': attribute type 1 has an invalid length. [ 650.319486][T24153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.334758][T13677] vhci_hcd: stop threads [ 650.339091][T13677] vhci_hcd: release socket [ 650.343622][T13677] vhci_hcd: disconnect device [ 650.358247][T13677] vhci_hcd: stop threads [ 650.362567][T13677] vhci_hcd: release socket [ 650.367097][T13677] vhci_hcd: disconnect device [ 650.372103][ T3007] loop4: p4 size 8388608 extends beyond EOD, truncated [ 650.379843][T13677] vhci_hcd: stop threads [ 650.384114][T13677] vhci_hcd: release socket [ 650.388356][T24156] loop0: detected capacity change from 0 to 512 [ 650.388603][T13677] vhci_hcd: disconnect device [ 650.483785][T24156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.490825][T24164] netlink: 'syz.5.6499': attribute type 3 has an invalid length. [ 650.510793][T18369] udevd[18369]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 650.513145][T13734] udevd[13734]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 650.524897][T24156] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.559366][T18370] udevd[18370]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 650.562676][T18369] udevd[18369]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 650.584661][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6500'. [ 650.648352][T18370] udevd[18370]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 650.686136][T24178] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6502'. [ 650.711608][T24178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24178 comm=syz.5.6502 [ 650.804982][T24185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 651.951356][T21361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.025943][T24209] FAULT_INJECTION: forcing a failure. [ 652.025943][T24209] name failslab, interval 1, probability 0, space 0, times 0 [ 652.038682][T24209] CPU: 1 UID: 0 PID: 24209 Comm: syz.3.6514 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 652.038753][T24209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.038836][T24209] Call Trace: [ 652.038845][T24209] [ 652.038855][T24209] __dump_stack+0x1d/0x30 [ 652.038881][T24209] dump_stack_lvl+0xe8/0x140 [ 652.038908][T24209] dump_stack+0x15/0x1b [ 652.038928][T24209] should_fail_ex+0x265/0x280 [ 652.038998][T24209] should_failslab+0x8c/0xb0 [ 652.039021][T24209] __kmalloc_cache_node_noprof+0x54/0x320 [ 652.039061][T24209] ? __get_vm_area_node+0x106/0x1d0 [ 652.039103][T24209] __get_vm_area_node+0x106/0x1d0 [ 652.039174][T24209] __vmalloc_node_range_noprof+0x273/0xe40 [ 652.039216][T24209] ? sel_write_load+0x158/0x380 [ 652.039249][T24209] ? _parse_integer_limit+0x170/0x190 [ 652.039342][T24209] ? _parse_integer+0x27/0x40 [ 652.039452][T24209] ? __rcu_read_unlock+0x4f/0x70 [ 652.039477][T24209] ? avc_has_perm_noaudit+0x1b1/0x200 [ 652.039509][T24209] ? sel_write_load+0x158/0x380 [ 652.039542][T24209] vmalloc_noprof+0x82/0xc0 [ 652.039635][T24209] ? sel_write_load+0x158/0x380 [ 652.039670][T24209] sel_write_load+0x158/0x380 [ 652.039723][T24209] ? __pfx_sel_write_load+0x10/0x10 [ 652.039757][T24209] vfs_write+0x266/0x8e0 [ 652.039781][T24209] ? __rcu_read_unlock+0x4f/0x70 [ 652.039843][T24209] ? __fget_files+0x184/0x1c0 [ 652.039868][T24209] ksys_write+0xda/0x1a0 [ 652.039891][T24209] __x64_sys_write+0x40/0x50 [ 652.039917][T24209] x64_sys_call+0x2cdd/0x2fb0 [ 652.039945][T24209] do_syscall_64+0xd2/0x200 [ 652.040039][T24209] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 652.040066][T24209] ? clear_bhb_loop+0x40/0x90 [ 652.040088][T24209] ? clear_bhb_loop+0x40/0x90 [ 652.040114][T24209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.040186][T24209] RIP: 0033:0x7f79c7cfe969 [ 652.040205][T24209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.040230][T24209] RSP: 002b:00007f79c6367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.040284][T24209] RAX: ffffffffffffffda RBX: 00007f79c7f25fa0 RCX: 00007f79c7cfe969 [ 652.040298][T24209] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000009 [ 652.040311][T24209] RBP: 00007f79c6367090 R08: 0000000000000000 R09: 0000000000000000 [ 652.040323][T24209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.040337][T24209] R13: 0000000000000000 R14: 00007f79c7f25fa0 R15: 00007ffda6b6c088 [ 652.040362][T24209] [ 652.041609][T24205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6511'. [ 653.326734][T24263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6528'. [ 653.462163][T24265] loop5: detected capacity change from 0 to 8192 [ 653.471340][T24265] vfat: Unknown parameter '' [ 653.527643][T24267] loop3: detected capacity change from 0 to 8192 [ 653.541362][T24273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6533'. [ 653.914189][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6535'. [ 654.575760][T24297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6541'. [ 654.684576][ T23] usb 5-1: enqueue for inactive port 0 [ 654.696773][T24303] syz_tun: entered promiscuous mode [ 654.704045][T24303] vlan2: entered promiscuous mode [ 654.709854][ T23] usb 5-1: enqueue for inactive port 0 [ 654.772914][T24310] netlink: 'syz.4.6547': attribute type 1 has an invalid length. [ 654.787444][ T23] vhci_hcd: vhci_device speed not set [ 654.959216][T24319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6550'. [ 655.236483][T24325] random: crng reseeded on system resumption [ 655.457213][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6555'. [ 655.644621][T12574] syz_tun (unregistering): left promiscuous mode [ 655.680887][T24340] FAULT_INJECTION: forcing a failure. [ 655.680887][T24340] name failslab, interval 1, probability 0, space 0, times 0 [ 655.693720][T24340] CPU: 1 UID: 0 PID: 24340 Comm: syz.3.6559 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 655.693755][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.693773][T24340] Call Trace: [ 655.693781][T24340] [ 655.693790][T24340] __dump_stack+0x1d/0x30 [ 655.693866][T24340] dump_stack_lvl+0xe8/0x140 [ 655.693892][T24340] dump_stack+0x15/0x1b [ 655.693914][T24340] should_fail_ex+0x265/0x280 [ 655.694026][T24340] should_failslab+0x8c/0xb0 [ 655.694056][T24340] kmem_cache_alloc_noprof+0x50/0x310 [ 655.694214][T24340] ? getname_flags+0x80/0x3b0 [ 655.694248][T24340] getname_flags+0x80/0x3b0 [ 655.694281][T24340] __x64_sys_rename+0x33/0x70 [ 655.694304][T24340] x64_sys_call+0x2aee/0x2fb0 [ 655.694336][T24340] do_syscall_64+0xd2/0x200 [ 655.694377][T24340] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 655.694409][T24340] ? clear_bhb_loop+0x40/0x90 [ 655.694436][T24340] ? clear_bhb_loop+0x40/0x90 [ 655.694467][T24340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.694557][T24340] RIP: 0033:0x7f79c7cfe969 [ 655.694578][T24340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.694603][T24340] RSP: 002b:00007f79c6367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 655.694623][T24340] RAX: ffffffffffffffda RBX: 00007f79c7f25fa0 RCX: 00007f79c7cfe969 [ 655.694672][T24340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.694687][T24340] RBP: 00007f79c6367090 R08: 0000000000000000 R09: 0000000000000000 [ 655.694703][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.694719][T24340] R13: 0000000000000000 R14: 00007f79c7f25fa0 R15: 00007ffda6b6c088 [ 655.694744][T24340] [ 655.946138][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.956632][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 656.070308][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.080771][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 656.156427][T24366] loop3: detected capacity change from 0 to 512 [ 656.166013][T24366] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 656.170779][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.185532][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 656.217803][T24366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.217927][T24366] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.262886][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.262932][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 656.264409][T24373] FAULT_INJECTION: forcing a failure. [ 656.264409][T24373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.264444][T24373] CPU: 0 UID: 0 PID: 24373 Comm: syz.5.6567 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 656.264560][T24373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 656.264578][T24373] Call Trace: [ 656.264586][T24373] [ 656.264596][T24373] __dump_stack+0x1d/0x30 [ 656.264687][T24373] dump_stack_lvl+0xe8/0x140 [ 656.264714][T24373] dump_stack+0x15/0x1b [ 656.264737][T24373] should_fail_ex+0x265/0x280 [ 656.264843][T24373] should_fail+0xb/0x20 [ 656.264875][T24373] should_fail_usercopy+0x1a/0x20 [ 656.264900][T24373] _copy_from_user+0x1c/0xb0 [ 656.264952][T24373] ___sys_sendmsg+0xc1/0x1d0 [ 656.265004][T24373] __x64_sys_sendmsg+0xd4/0x160 [ 656.265049][T24373] x64_sys_call+0x2999/0x2fb0 [ 656.265079][T24373] do_syscall_64+0xd2/0x200 [ 656.265114][T24373] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 656.265208][T24373] ? clear_bhb_loop+0x40/0x90 [ 656.265240][T24373] ? clear_bhb_loop+0x40/0x90 [ 656.265280][T24373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.265309][T24373] RIP: 0033:0x7f836dc4e969 [ 656.265383][T24373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.265409][T24373] RSP: 002b:00007f836c2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.265435][T24373] RAX: ffffffffffffffda RBX: 00007f836de75fa0 RCX: 00007f836dc4e969 [ 656.265519][T24373] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 656.265536][T24373] RBP: 00007f836c2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 656.265553][T24373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.265570][T24373] R13: 0000000000000000 R14: 00007f836de75fa0 R15: 00007ffda591b2e8 [ 656.265660][T24373] [ 656.303924][T24374] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.504894][T24341] chnl_net:caif_netlink_parms(): no params data found [ 656.518375][T24380] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6568'. [ 656.527450][T24380] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6568'. [ 656.552763][T24383] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 656.559418][T24383] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 656.567039][T24383] vhci_hcd vhci_hcd.0: Device attached [ 656.618008][T24383] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 656.624663][T24383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 656.632202][T24383] vhci_hcd vhci_hcd.0: Device attached [ 656.642089][T24374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.652642][T24383] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 656.659317][T24383] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 656.667170][T24383] vhci_hcd vhci_hcd.0: Device attached [ 656.677072][T24383] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 656.683794][T24383] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 656.692381][T24383] vhci_hcd vhci_hcd.0: Device attached [ 656.703960][T24383] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 656.710634][T24383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 656.718307][T24383] vhci_hcd vhci_hcd.0: Device attached [ 656.733826][T24384] vhci_hcd: connection closed [ 656.734119][T13676] vhci_hcd: stop threads [ 656.734600][T24401] vhci_hcd: connection closed [ 656.738885][T13676] vhci_hcd: release socket [ 656.743795][T24396] vhci_hcd: connection closed [ 656.747876][T13676] vhci_hcd: disconnect device [ 656.750370][T24394] vhci_hcd: connection closed [ 656.752827][T24389] vhci_hcd: connection closed [ 656.757180][ T3393] vhci_hcd: vhci_device speed not set [ 656.762233][T13676] vhci_hcd: stop threads [ 656.781063][T13676] vhci_hcd: release socket [ 656.785661][T13676] vhci_hcd: disconnect device [ 656.792364][T24374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.806519][T13676] vhci_hcd: stop threads [ 656.810807][T13676] vhci_hcd: release socket [ 656.815319][T13676] vhci_hcd: disconnect device [ 656.823652][T13676] vhci_hcd: stop threads [ 656.827994][T13676] vhci_hcd: release socket [ 656.832432][T13676] vhci_hcd: disconnect device [ 656.842277][T13676] vhci_hcd: stop threads [ 656.846608][T13676] vhci_hcd: release socket [ 656.851111][T13676] vhci_hcd: disconnect device [ 656.863278][T24341] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.870564][T24341] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.878619][T24341] bridge_slave_0: entered allmulticast mode [ 656.885389][T24341] bridge_slave_0: entered promiscuous mode [ 656.902325][T24374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.081540][ T144] bridge_slave_1: left allmulticast mode [ 657.087327][ T144] bridge_slave_1: left promiscuous mode [ 657.093083][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.094444][T24418] loop2: detected capacity change from 0 to 8192 [ 657.110454][ T144] bridge_slave_0: left allmulticast mode [ 657.116181][ T144] bridge_slave_0: left promiscuous mode [ 657.121912][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.264237][T24428] loop2: detected capacity change from 0 to 128 [ 657.335406][ T144] bond22 (unregistering): (slave gretap1): Releasing active interface [ 657.361174][T24430] netlink: 'syz.0.6578': attribute type 1 has an invalid length. [ 657.434556][ T144]  (unregistering): left promiscuous mode [ 657.440448][ T144] bond_slave_0: left promiscuous mode [ 657.446034][ T144] bond_slave_1: left promiscuous mode [ 657.463067][T24428] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 657.492160][T24428] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 657.522065][ T144]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.534103][ T144]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.544906][ T144]  (unregistering): Released all slaves [ 657.553999][ T144] bond1 (unregistering): Released all slaves [ 657.567248][ T144] bond2 (unregistering): Released all slaves [ 657.580136][ T144] bond3 (unregistering): Released all slaves [ 657.589488][ T144] bond4 (unregistering): Released all slaves [ 657.599259][ T144] bond5 (unregistering): Released all slaves [ 657.608586][ T144] bond6 (unregistering): Released all slaves [ 657.618478][ T144] bond7 (unregistering): Released all slaves [ 657.629138][ T144] bond8 (unregistering): Released all slaves [ 657.638796][ T144] bond9 (unregistering): Released all slaves [ 657.649151][ T144] bond10 (unregistering): Released all slaves [ 657.658860][ T144] bond11 (unregistering): Released all slaves [ 657.667768][ T144] bond12 (unregistering): Released all slaves [ 657.677376][ T144] bond13 (unregistering): Released all slaves [ 657.686863][ T144] bond0 (unregistering): Released all slaves [ 657.696330][ T144] bond14 (unregistering): Released all slaves [ 657.706486][ T144] bond15 (unregistering): Released all slaves [ 657.716004][ T144] bond16 (unregistering): Released all slaves [ 657.726273][ T144] bond17 (unregistering): Released all slaves [ 657.735638][ T144] bond18 (unregistering): Released all slaves [ 657.746389][ T144] bond19 (unregistering): Released all slaves [ 657.755698][ T144] bond20 (unregistering): Released all slaves [ 657.765482][ T144] bond21 (unregistering): Released all slaves [ 657.775231][ T144] bond22 (unregistering): Released all slaves [ 657.784816][ T144] bond23 (unregistering): Released all slaves [ 657.794576][ T144] bond24 (unregistering): Released all slaves [ 657.808290][ T144] bond25 (unregistering): Released all slaves [ 657.820712][ T144] bond26 (unregistering): Released all slaves [ 657.831353][ T144] bond27 (unregistering): Released all slaves [ 657.843737][ T144] bond28 (unregistering): Released all slaves [ 657.861718][ T144] bond29 (unregistering): Released all slaves [ 657.871588][ T144] bond30 (unregistering): Released all slaves [ 657.881285][T24341] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.888508][T24341] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.899345][T24341] bridge_slave_1: entered allmulticast mode [ 657.906625][T24341] bridge_slave_1: entered promiscuous mode [ 657.926725][T24430] 8021q: adding VLAN 0 to HW filter on device bond8 [ 657.951085][T24432] 8021q: adding VLAN 0 to HW filter on device bond8 [ 657.958621][T24432] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 657.972184][T24432] bond8: (slave vti0): Error -95 calling set_mac_address [ 657.999192][T24341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.012097][ T144] tipc: Left network mode [ 658.014611][T24341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.041998][T24374] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.070478][T24341] team0: Port device team_slave_0 added [ 658.079475][T24374] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.094989][T24374] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.107164][T24374] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.121492][T22201] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.137365][ T144] hsr_slave_0: left promiscuous mode [ 658.152002][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.180251][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.188393][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.213276][T24439] loop0: detected capacity change from 0 to 8192 [ 658.224894][T24439] FAULT_INJECTION: forcing a failure. [ 658.224894][T24439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.238122][T24439] CPU: 1 UID: 0 PID: 24439 Comm: syz.0.6580 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 658.238152][T24439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 658.238165][T24439] Call Trace: [ 658.238172][T24439] [ 658.238180][T24439] __dump_stack+0x1d/0x30 [ 658.238203][T24439] dump_stack_lvl+0xe8/0x140 [ 658.238306][T24439] dump_stack+0x15/0x1b [ 658.238329][T24439] should_fail_ex+0x265/0x280 [ 658.238373][T24439] should_fail+0xb/0x20 [ 658.238442][T24439] should_fail_usercopy+0x1a/0x20 [ 658.238473][T24439] _copy_from_user+0x1c/0xb0 [ 658.238503][T24439] ___sys_sendmsg+0xc1/0x1d0 [ 658.238557][T24439] __x64_sys_sendmsg+0xd4/0x160 [ 658.238598][T24439] x64_sys_call+0x2999/0x2fb0 [ 658.238689][T24439] do_syscall_64+0xd2/0x200 [ 658.238728][T24439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 658.238823][T24439] ? clear_bhb_loop+0x40/0x90 [ 658.238886][T24439] ? clear_bhb_loop+0x40/0x90 [ 658.238984][T24439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.239050][T24439] RIP: 0033:0x7f78600ae969 [ 658.239069][T24439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.239093][T24439] RSP: 002b:00007f785e717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.239130][T24439] RAX: ffffffffffffffda RBX: 00007f78602d5fa0 RCX: 00007f78600ae969 [ 658.239142][T24439] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 658.239156][T24439] RBP: 00007f785e717090 R08: 0000000000000000 R09: 0000000000000000 [ 658.239171][T24439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.239183][T24439] R13: 0000000000000000 R14: 00007f78602d5fa0 R15: 00007ffc3c49f248 [ 658.239202][T24439] [ 658.437947][ T144] veth1_vlan: left promiscuous mode [ 658.443329][ T144] veth0_vlan: left promiscuous mode [ 658.476967][T24459] loop2: detected capacity change from 0 to 256 [ 658.508719][T24459] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 658.517934][T24459] FAT-fs (loop2): bogus number of directory entries (1) [ 658.524960][T24459] FAT-fs (loop2): Can't find a valid FAT filesystem [ 658.587501][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 658.587519][ T29] audit: type=1326 audit(1748699250.102:19395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.650989][ T29] audit: type=1326 audit(1748699250.132:19396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.675460][ T29] audit: type=1326 audit(1748699250.132:19397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.699106][ T29] audit: type=1326 audit(1748699250.142:19398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.722893][ T29] audit: type=1326 audit(1748699250.142:19399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.746699][ T29] audit: type=1326 audit(1748699250.142:19400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.770307][ T29] audit: type=1326 audit(1748699250.142:19401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.793978][ T29] audit: type=1326 audit(1748699250.142:19402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.817673][ T29] audit: type=1326 audit(1748699250.142:19403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.841389][ T29] audit: type=1326 audit(1748699250.142:19404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24460 comm="syz.0.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f78600ae969 code=0x7ffc0000 [ 658.896645][ T144] team0 (unregistering): Port device team_slave_1 removed [ 659.089661][ T144] team0 (unregistering): Port device team_slave_0 removed [ 659.316348][T24341] team0: Port device team_slave_1 added [ 659.581198][T22862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.650297][T24437] Set syz1 is full, maxelem 65536 reached [ 659.743611][T24473] FAULT_INJECTION: forcing a failure. [ 659.743611][T24473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.756841][T24473] CPU: 0 UID: 0 PID: 24473 Comm: syz.2.6588 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 659.756934][T24473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 659.756950][T24473] Call Trace: [ 659.756959][T24473] [ 659.756970][T24473] __dump_stack+0x1d/0x30 [ 659.756996][T24473] dump_stack_lvl+0xe8/0x140 [ 659.757023][T24473] dump_stack+0x15/0x1b [ 659.757110][T24473] should_fail_ex+0x265/0x280 [ 659.757153][T24473] should_fail+0xb/0x20 [ 659.757199][T24473] should_fail_usercopy+0x1a/0x20 [ 659.757224][T24473] _copy_from_user+0x1c/0xb0 [ 659.757253][T24473] ___sys_sendmsg+0xc1/0x1d0 [ 659.757299][T24473] __x64_sys_sendmsg+0xd4/0x160 [ 659.757415][T24473] x64_sys_call+0x2999/0x2fb0 [ 659.757442][T24473] do_syscall_64+0xd2/0x200 [ 659.757507][T24473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 659.757533][T24473] ? clear_bhb_loop+0x40/0x90 [ 659.757602][T24473] ? clear_bhb_loop+0x40/0x90 [ 659.757629][T24473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.757656][T24473] RIP: 0033:0x7f6243c7e969 [ 659.757675][T24473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.757700][T24473] RSP: 002b:00007f62422e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.757786][T24473] RAX: ffffffffffffffda RBX: 00007f6243ea5fa0 RCX: 00007f6243c7e969 [ 659.757803][T24473] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 659.757826][T24473] RBP: 00007f62422e7090 R08: 0000000000000000 R09: 0000000000000000 [ 659.757842][T24473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.757857][T24473] R13: 0000000000000000 R14: 00007f6243ea5fa0 R15: 00007ffd597d9628 [ 659.757877][T24473] [ 660.084551][T24341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.091573][T24341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.098750][T24476] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 660.117956][T24341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.124184][T24476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.142363][T24476] vhci_hcd vhci_hcd.0: Device attached [ 660.150381][T24482] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 660.157033][T24482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 660.164523][T24482] vhci_hcd vhci_hcd.0: Device attached [ 660.183147][T24341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.190221][T24341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.216531][T24341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.230531][T24476] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 660.237167][T24476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 660.244835][T24476] vhci_hcd vhci_hcd.0: Device attached [ 660.275385][T24490] loop5: detected capacity change from 0 to 512 [ 660.329632][T24476] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 660.336295][T24476] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 660.344009][T24476] vhci_hcd vhci_hcd.0: Device attached [ 660.373197][T24499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6592'. [ 660.384552][ T23] usb 7-1: new low-speed USB device number 12 using vhci_hcd [ 660.434147][T24482] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(20) [ 660.440948][T24482] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 660.448644][T24482] vhci_hcd vhci_hcd.0: Device attached [ 660.474439][T24490] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 660.488487][T24497] vhci_hcd: connection closed [ 660.488868][T13676] vhci_hcd: stop threads [ 660.498144][T13676] vhci_hcd: release socket [ 660.502580][T13676] vhci_hcd: disconnect device [ 660.508785][T24486] vhci_hcd: connection closed [ 660.509080][T24484] vhci_hcd: connection closed [ 660.514000][T24477] vhci_hcd: connection reset by peer [ 660.530289][T24493] vhci_hcd: connection closed [ 660.559716][T24490] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6591: invalid indirect mapped block 2683928664 (level 1) [ 660.612250][T24341] hsr_slave_0: entered promiscuous mode [ 660.621813][T13676] vhci_hcd: stop threads [ 660.626277][T13676] vhci_hcd: release socket [ 660.630756][T13676] vhci_hcd: disconnect device [ 660.632937][T24490] EXT4-fs (loop5): Remounting filesystem read-only [ 660.643418][T24341] hsr_slave_1: entered promiscuous mode [ 660.647993][T24490] EXT4-fs (loop5): 1 truncate cleaned up [ 660.652096][T24341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.655194][T24490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.666154][T13676] vhci_hcd: stop threads [ 660.675182][T24341] Cannot create hsr debugfs directory [ 660.679027][T13676] vhci_hcd: release socket [ 660.679073][T13676] vhci_hcd: disconnect device [ 660.695225][T13676] vhci_hcd: stop threads [ 660.699504][T13676] vhci_hcd: release socket [ 660.704018][T13676] vhci_hcd: disconnect device [ 660.713197][T13676] vhci_hcd: stop threads [ 660.717554][T13676] vhci_hcd: release socket [ 660.722036][T13676] vhci_hcd: disconnect device [ 660.768000][T21892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.806812][T24507] loop0: detected capacity change from 0 to 2048 [ 660.827132][T24507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.844163][T24507] FAULT_INJECTION: forcing a failure. [ 660.844163][T24507] name failslab, interval 1, probability 0, space 0, times 0 [ 660.857291][T24507] CPU: 1 UID: 0 PID: 24507 Comm: syz.0.6593 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 660.857328][T24507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.857345][T24507] Call Trace: [ 660.857353][T24507] [ 660.857363][T24507] __dump_stack+0x1d/0x30 [ 660.857479][T24507] dump_stack_lvl+0xe8/0x140 [ 660.857543][T24507] dump_stack+0x15/0x1b [ 660.857560][T24507] should_fail_ex+0x265/0x280 [ 660.857596][T24507] should_failslab+0x8c/0xb0 [ 660.857623][T24507] kmem_cache_alloc_noprof+0x50/0x310 [ 660.857667][T24507] ? getname_flags+0x80/0x3b0 [ 660.857701][T24507] getname_flags+0x80/0x3b0 [ 660.857725][T24507] __x64_sys_symlink+0x33/0x60 [ 660.857784][T24507] x64_sys_call+0x2d8d/0x2fb0 [ 660.857806][T24507] do_syscall_64+0xd2/0x200 [ 660.857832][T24507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 660.857865][T24507] ? clear_bhb_loop+0x40/0x90 [ 660.857929][T24507] ? clear_bhb_loop+0x40/0x90 [ 660.857960][T24507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.857989][T24507] RIP: 0033:0x7f78600ae969 [ 660.858010][T24507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.858098][T24507] RSP: 002b:00007f785e717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 660.858119][T24507] RAX: ffffffffffffffda RBX: 00007f78602d5fa0 RCX: 00007f78600ae969 [ 660.858132][T24507] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000200000000540 [ 660.858146][T24507] RBP: 00007f785e717090 R08: 0000000000000000 R09: 0000000000000000 [ 660.858159][T24507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.858172][T24507] R13: 0000000000000000 R14: 00007f78602d5fa0 R15: 00007ffc3c49f248 [ 660.858272][T24507] [ 661.099574][T21361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.113242][T24525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6598'. [ 661.228310][T24532] FAULT_INJECTION: forcing a failure. [ 661.228310][T24532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.241581][T24532] CPU: 0 UID: 0 PID: 24532 Comm: syz.5.6599 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 661.241616][T24532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 661.241632][T24532] Call Trace: [ 661.241640][T24532] [ 661.241651][T24532] __dump_stack+0x1d/0x30 [ 661.241718][T24532] dump_stack_lvl+0xe8/0x140 [ 661.241742][T24532] dump_stack+0x15/0x1b [ 661.241763][T24532] should_fail_ex+0x265/0x280 [ 661.241866][T24532] should_fail+0xb/0x20 [ 661.241908][T24532] should_fail_usercopy+0x1a/0x20 [ 661.241946][T24532] _copy_from_user+0x1c/0xb0 [ 661.241973][T24532] ___sys_sendmsg+0xc1/0x1d0 [ 661.242108][T24532] __x64_sys_sendmsg+0xd4/0x160 [ 661.242146][T24532] x64_sys_call+0x2999/0x2fb0 [ 661.242198][T24532] do_syscall_64+0xd2/0x200 [ 661.242229][T24532] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 661.242263][T24532] ? clear_bhb_loop+0x40/0x90 [ 661.242352][T24532] ? clear_bhb_loop+0x40/0x90 [ 661.242379][T24532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.242406][T24532] RIP: 0033:0x7f836dc4e969 [ 661.242425][T24532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.242448][T24532] RSP: 002b:00007f836c2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.242492][T24532] RAX: ffffffffffffffda RBX: 00007f836de75fa0 RCX: 00007f836dc4e969 [ 661.242507][T24532] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 661.242523][T24532] RBP: 00007f836c2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 661.242538][T24532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.242628][T24532] R13: 0000000000000000 R14: 00007f836de75fa0 R15: 00007ffda591b2e8 [ 661.242651][T24532] [ 661.550324][T24539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6600'. [ 661.559508][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6600'. [ 661.772134][T24543] netlink: 'syz.2.6602': attribute type 13 has an invalid length. [ 661.780068][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6602'. [ 662.202726][T24341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 662.247569][T24341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 662.291037][T24341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 662.356521][T24553] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 662.372144][T24341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 662.403750][T24563] 8021q: VLANs not supported on gre0 [ 662.472305][T24569] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 662.479084][T24569] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 662.486893][T24569] vhci_hcd vhci_hcd.0: Device attached [ 662.501700][T24574] FAULT_INJECTION: forcing a failure. [ 662.501700][T24574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.515003][T24574] CPU: 1 UID: 0 PID: 24574 Comm: syz.2.6610 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 662.515040][T24574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 662.515057][T24574] Call Trace: [ 662.515065][T24574] [ 662.515075][T24574] __dump_stack+0x1d/0x30 [ 662.515140][T24574] dump_stack_lvl+0xe8/0x140 [ 662.515160][T24574] dump_stack+0x15/0x1b [ 662.515178][T24574] should_fail_ex+0x265/0x280 [ 662.515290][T24574] should_fail+0xb/0x20 [ 662.515323][T24574] should_fail_usercopy+0x1a/0x20 [ 662.515342][T24574] _copy_from_user+0x1c/0xb0 [ 662.515415][T24574] ___sys_sendmsg+0xc1/0x1d0 [ 662.515513][T24574] __x64_sys_sendmsg+0xd4/0x160 [ 662.515556][T24574] x64_sys_call+0x2999/0x2fb0 [ 662.515657][T24574] do_syscall_64+0xd2/0x200 [ 662.515688][T24574] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 662.515727][T24574] ? clear_bhb_loop+0x40/0x90 [ 662.515755][T24574] ? clear_bhb_loop+0x40/0x90 [ 662.515802][T24574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.515871][T24574] RIP: 0033:0x7f6243c7e969 [ 662.515888][T24574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.515997][T24574] RSP: 002b:00007f62422e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.516016][T24574] RAX: ffffffffffffffda RBX: 00007f6243ea5fa0 RCX: 00007f6243c7e969 [ 662.516029][T24574] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 662.516042][T24574] RBP: 00007f62422e7090 R08: 0000000000000000 R09: 0000000000000000 [ 662.516055][T24574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.516071][T24574] R13: 0000000000000000 R14: 00007f6243ea5fa0 R15: 00007ffd597d9628 [ 662.516096][T24574] [ 662.519005][T24576] vlan2: entered promiscuous mode [ 662.584318][T24569] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 662.706919][T24569] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 662.715276][T24569] vhci_hcd vhci_hcd.0: Device attached [ 662.725278][T24578] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 662.731980][T24578] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 662.739573][T24578] vhci_hcd vhci_hcd.0: Device attached [ 662.781781][T24586] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 662.788474][T24586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 662.796248][T24586] vhci_hcd vhci_hcd.0: Device attached [ 662.808698][T24569] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 662.815357][T24569] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 662.819404][T24341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.823039][T24569] vhci_hcd vhci_hcd.0: Device attached [ 662.855955][T24341] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.870622][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.877781][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.912523][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.919701][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.951790][T24581] vhci_hcd: connection closed [ 662.951963][ T144] vhci_hcd: stop threads [ 662.952037][T24579] vhci_hcd: connection closed [ 662.956778][ T144] vhci_hcd: release socket [ 662.961902][T24590] vhci_hcd: connection closed [ 662.965815][ T144] vhci_hcd: disconnect device [ 662.983354][T24593] vhci_hcd: connection closed [ 662.989892][T24570] vhci_hcd: connection closed [ 663.039389][ T144] vhci_hcd: stop threads [ 663.048609][ T144] vhci_hcd: release socket [ 663.053071][ T144] vhci_hcd: disconnect device [ 663.094607][T24614] loop0: detected capacity change from 0 to 128 [ 663.108284][ T144] vhci_hcd: stop threads [ 663.112684][ T144] vhci_hcd: release socket [ 663.117203][ T144] vhci_hcd: disconnect device [ 663.123582][ T144] vhci_hcd: stop threads [ 663.127991][ T144] vhci_hcd: release socket [ 663.132446][ T144] vhci_hcd: disconnect device [ 663.191779][ T144] vhci_hcd: stop threads [ 663.196162][ T144] vhci_hcd: release socket [ 663.200825][ T144] vhci_hcd: disconnect device [ 663.207984][T24606] loop5: detected capacity change from 0 to 2048 [ 663.238205][T24606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.254072][T24606] EXT4-fs (loop5): shut down requested (2) [ 663.266582][T24341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.424965][T21892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.574866][T24663] loop3: detected capacity change from 0 to 128 [ 663.595713][T24663] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 663.614595][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 663.614614][ T29] audit: type=1400 audit(1748699255.122:19550): avc: denied { sys_module } for pid=24341 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 663.616896][T24663] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 663.620884][ T29] audit: type=1400 audit(1748699255.132:19551): avc: denied { module_request } for pid=24341 comm="syz-executor" kmod="virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 663.620917][ T29] audit: type=1400 audit(1748699255.132:19552): avc: denied { mount } for pid=24660 comm="syz.3.6619" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 663.697122][T24663] ================================================================== [ 663.705250][T24663] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 663.714224][T24663] [ 663.714801][T24664] ./file0: Can't lookup blockdev [ 663.716547][T24663] read-write to 0xffff88810dd76020 of 4 bytes by task 24664 on cpu 1: [ 663.729646][T24663] selinux_inode_permission+0x493/0x620 [ 663.735214][T24663] security_inode_permission+0x6d/0xb0 [ 663.740705][T24663] inode_permission+0x106/0x310 [ 663.745753][T24663] link_path_walk+0x162/0x900 [ 663.750451][T24663] __filename_parentat+0x15c/0x3f0 [ 663.755582][T24663] filename_create+0x79/0x290 [ 663.760286][T24663] do_mknodat+0xe7/0x610 [ 663.764553][T24663] __x64_sys_mknodat+0x5e/0x70 [ 663.769441][T24663] x64_sys_call+0x2355/0x2fb0 [ 663.774133][T24663] do_syscall_64+0xd2/0x200 [ 663.778658][T24663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.784588][T24663] [ 663.786918][T24663] read to 0xffff88810dd76020 of 4 bytes by task 24663 on cpu 0: [ 663.794555][T24663] selinux_inode_permission+0x2a7/0x620 [ 663.800115][T24663] security_inode_permission+0x6d/0xb0 [ 663.805610][T24663] inode_permission+0x106/0x310 [ 663.810567][T24663] link_path_walk+0x162/0x900 [ 663.815257][T24663] __filename_parentat+0x15c/0x3f0 [ 663.820388][T24663] filename_create+0x79/0x290 [ 663.825095][T24663] do_mknodat+0xe7/0x610 [ 663.829354][T24663] __x64_sys_mknodat+0x5e/0x70 [ 663.834146][T24663] x64_sys_call+0x2355/0x2fb0 [ 663.838838][T24663] do_syscall_64+0xd2/0x200 [ 663.843380][T24663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.849297][T24663] [ 663.851628][T24663] value changed: 0x00000001 -> 0x00000002 [ 663.857355][T24663] [ 663.859691][T24663] Reported by Kernel Concurrency Sanitizer on: [ 663.865851][T24663] CPU: 0 UID: 0 PID: 24663 Comm: syz.3.6619 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 663.878017][T24663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.888084][T24663] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 663.908014][ T29] audit: type=1400 audit(1748699255.172:19553): avc: denied { read } for pid=24672 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 663.930179][ T29] audit: type=1400 audit(1748699255.172:19554): avc: denied { open } for pid=24672 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 663.955325][ T29] audit: type=1400 audit(1748699255.172:19555): avc: denied { getattr } for pid=24672 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 663.981025][ T29] audit: type=1400 audit(1748699255.222:19556): avc: denied { add_name } for pid=24660 comm="syz.3.6619" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 664.002132][ T29] audit: type=1400 audit(1748699255.222:19557): avc: denied { create } for pid=24660 comm="syz.3.6619" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 664.023101][ T29] audit: type=1400 audit(1748699255.222:19558): avc: denied { map_create } for pid=24671 comm="syz.0.6621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 664.042489][ T29] audit: type=1400 audit(1748699255.232:19559): avc: denied { mounton } for pid=24660 comm="syz.3.6619" path="/95/mnt/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 664.084855][T24678] netlink: 'syz.0.6621': attribute type 3 has an invalid length. [ 664.333647][T13677] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.423729][T24664] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 664.436226][T13677] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.487776][T13677] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.567513][T13677] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.647930][T13677] bridge_slave_1: left allmulticast mode [ 664.653794][T13677] bridge_slave_1: left promiscuous mode [ 664.659561][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.667615][T13677] bridge_slave_0: left allmulticast mode [ 664.673318][T13677] bridge_slave_0: left promiscuous mode [ 664.679077][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.821430][T13677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.831758][T13677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.841386][T13677] bond0 (unregistering): Released all slaves [ 664.850744][T13677] bond1 (unregistering): Released all slaves [ 664.859911][T13677] bond2 (unregistering): Released all slaves [ 664.869454][T13677] bond3 (unregistering): Released all slaves [ 664.878762][T13677] bond4 (unregistering): Released all slaves [ 664.887931][T13677] bond5 (unregistering): Released all slaves [ 664.896728][T13677] bond6 (unregistering): Released all slaves [ 664.906553][T13677] bond7 (unregistering): Released all slaves [ 664.962932][T13677] hsr_slave_0: left promiscuous mode [ 664.969151][T13677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.976914][T13677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.988054][T13677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.995863][T13677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.011052][T13677] veth1_macvtap: left promiscuous mode [ 665.017094][T13677] veth0_macvtap: left promiscuous mode [ 665.022779][T13677] veth1_vlan: left promiscuous mode [ 665.029288][T13677] veth0_vlan: left promiscuous mode [ 665.102046][T13677] team0 (unregistering): Port device team_slave_1 removed [ 665.112953][T13677] team0 (unregistering): Port device team_slave_0 removed [ 665.404649][ T23] usb 7-1: enqueue for inactive port 0 [ 665.410282][ T23] usb 7-1: enqueue for inactive port 0 [ 665.492529][ T23] vhci_hcd: vhci_device speed not set [ 665.632710][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.680464][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.728392][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.781224][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.846803][ T144] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.886744][ T144] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.939555][ T144] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.966900][ T144] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.057741][ T144] bridge_slave_1: left allmulticast mode [ 666.063454][ T144] bridge_slave_1: left promiscuous mode [ 666.069322][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.080874][ T144] bridge_slave_0: left allmulticast mode [ 666.086682][ T144] bridge_slave_0: left promiscuous mode [ 666.092492][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.104068][ T144] gretap1: left allmulticast mode [ 666.109208][ T144] gretap1: left promiscuous mode [ 666.114298][ T144] bridge0: port 3(gretap1) entered disabled state [ 666.121844][ T144] bridge_slave_1: left allmulticast mode [ 666.127563][ T144] bridge_slave_1: left promiscuous mode [ 666.133372][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.141698][ T144] bridge_slave_0: left allmulticast mode [ 666.147425][ T144] bridge_slave_0: left promiscuous mode [ 666.153147][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.162172][ T144] bridge_slave_1: left allmulticast mode [ 666.167867][ T144] bridge_slave_1: left promiscuous mode [ 666.173516][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.181386][ T144] bridge_slave_0: left allmulticast mode [ 666.187077][ T144] bridge_slave_0: left promiscuous mode [ 666.192779][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.337232][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.347280][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.356872][ T144] bond0 (unregistering): Released all slaves [ 666.457051][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.467535][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.477395][ T144] bond0 (unregistering): Released all slaves [ 666.489641][ T144] bond1 (unregistering): Released all slaves [ 666.498548][ T144] bond2 (unregistering): Released all slaves [ 666.508105][ T144] bond3 (unregistering): Released all slaves [ 666.517242][ T144] bond4 (unregistering): Released all slaves [ 666.526622][ T144] bond5 (unregistering): Released all slaves [ 666.535798][ T144] bond6 (unregistering): Released all slaves [ 666.545525][ T144] bond7 (unregistering): Released all slaves [ 666.554729][ T144] bond8 (unregistering): Released all slaves [ 666.627954][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.637767][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.647340][ T144] bond0 (unregistering): Released all slaves [ 666.656566][ T144] bond1 (unregistering): Released all slaves [ 666.665738][ T144] bond2 (unregistering): Released all slaves [ 666.674588][ T144] bond3 (unregistering): Released all slaves [ 666.718804][ T144] hsr_slave_0: left promiscuous mode [ 666.727190][ T144] hsr_slave_1: left promiscuous mode [ 666.733162][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.741330][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.753636][ T144] hsr_slave_0: left promiscuous mode [ 666.759589][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.767274][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.777973][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.785602][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.798377][ T144] hsr_slave_0: left promiscuous mode [ 666.804218][ T144] hsr_slave_1: left promiscuous mode [ 666.810320][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.818095][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.831509][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.839020][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.856794][ T144] veth1_vlan: left promiscuous mode [ 666.862111][ T144] veth0_vlan: left promiscuous mode [ 666.867983][ T144] veth1_macvtap: left promiscuous mode [ 666.873460][ T144] veth0_macvtap: left promiscuous mode [ 666.879084][ T144] veth1_vlan: left promiscuous mode [ 666.884394][ T144] veth0_vlan: left promiscuous mode [ 667.010264][ T144] team0 (unregistering): Port device team_slave_1 removed [ 667.021174][ T144] team0 (unregistering): Port device team_slave_0 removed [ 667.086752][ T144] team0 (unregistering): Port device team_slave_1 removed [ 667.097469][ T144] team0 (unregistering): Port device team_slave_0 removed [ 667.168338][ T144] team0 (unregistering): Port device team_slave_1 removed [ 667.180453][ T144] team0 (unregistering): Port device team_slave_0 removed [ 667.911039][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.948860][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.008504][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.060142][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.131785][ T144] bridge_slave_1: left allmulticast mode [ 668.137672][ T144] bridge_slave_1: left promiscuous mode [ 668.143464][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.154238][ T144] bridge_slave_0: left allmulticast mode [ 668.159970][ T144] bridge_slave_0: left promiscuous mode [ 668.165722][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.257596][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.267955][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.278200][ T144] bond0 (unregistering): Released all slaves [ 668.287099][ T144] bond1 (unregistering): Released all slaves [ 668.295934][ T144] bond2 (unregistering): Released all slaves [ 668.360599][ T144] hsr_slave_0: left promiscuous mode [ 668.366750][ T144] hsr_slave_1: left promiscuous mode [ 668.372601][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.380182][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.388569][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.396109][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.408872][ T144] veth1_macvtap: left promiscuous mode [ 668.414397][ T144] veth0_macvtap: left promiscuous mode [ 668.420226][ T144] veth1_vlan: left promiscuous mode [ 668.425545][ T144] veth0_vlan: left promiscuous mode [ 668.500782][ T144] team0 (unregistering): Port device team_slave_1 removed [ 668.511998][ T144] team0 (unregistering): Port device team_slave_0 removed