last executing test programs: 10.060485716s ago: executing program 0 (id=184): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f00000001c0)=@generic={0x1e, "79d47d45d52d50ed1f10eb8e9b14919bc828e502f4fa2abf3e690b47fd990296ad9ecb53dfd2643833388d9343cdea3a4236b647df11c62ce8a23f1977e2cf500e9b2c10f34eea052aeb9f59dbac8162c4fefb21e96fc8d43f76f80d080cc981826a1caaa9e696ae3e323521afd95ce208ab6f0fa239a15ad9ce0a32c101"}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=r1, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES8=r2, @ANYRESHEX=r3, @ANYRES64=r0], 0x60}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101100, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0/../file0\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x7) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="5e0de6d0a46fa97f7414d5d4beddb6230d028c2985c07fd13ab9cd215be43701b0695c176f010c8522dc892d07fde1c4dd61620c6f145357d324923d98eafd69fcb6929e5d0149b55ad366cb405eb1db194e21eff7ee1ffd0fc491f7a1bd5ef94daa60e4ca4f86b607c0bfa43209a15cc602bced1e30290c9c66b61c0ce079072dc9c55937e87e811990c0a91e53fb7262746f85989515c54010fd24e6ce0415a26322ae81df827d5dcd02a05bea25986e519c3ec6192d3b14cf5fe367c9165b7e625e7c8389494b52ea3019206695e90ce8167dbf5a4157b8943bb48d9b485936f5e27d9538b9a26e5aba36d03db6093d2d3572600e08431993ce973d4cc18848c4593672ae571311d7723653de6825ebf2cb1ea583fe04db14c9ce1762a6b8f00dfd20f64f9acc3ced5097658b468f02c66bb8a7a586d00970044ace79a1202a934310f37359976a87a4b407ee8c3838f48255c0dd8dec7e6be5ef228cb602d83169cc3cdd372823665e0173e6d17bce2a6fb31d80542852c651fbb12c1f875a9f9f7654944b6054fbd6a2755f1eac851d3574df50e5bcf52b771784b7494278b1ee4954fcc101a27cd2caa6bed9d137b06ac60716f64745446165f75818f9ee4d0d02407e33f2cbe25398555191dc68ca32d57d986da35f029b57bc9ddbdb3c7286994688782975d4e91dfd0ae1aca248ac78df50ecf1a84b8a88577c1884bd97c96b3feea64f35e34b41ee47cc845f9240bfabb68c11e1dec3ae7aa4642af97341fb2358ec2c9fffb1c0bb90f375020e7a14c3c46c41766614442a0eeb6c5a55c6dc8d735ad8f724be9123a12f1416ed9404a070da645be79878b39e36eb461ec426c46a5d0201543fa3ccd8b0c305655aee8dbbae71e1f187bae5abe882e52a41dfb52a057704dbf359f993f0fde8bcab0f8ba7ec1f84e7386e8c72c81a6317bc937529063f8f5cf7b8753592629199a0e63773f9d1c63373738804b8267c989434168ecdfd0805e8936f99b5dffbab3a2c326a8bcf5881fe5f79cf58bea52d236abdfb1986331fabb9aab70f3e50acf81e2f5b4db83a73f9d0ec011f840fc5f62e5762cd4abfabebe5737d1486d65ad58f846c29bb1e94c7b20b04a34be7be0ec348f502dffb12f7e4140f8d70120ff1015664afa4c0dab33e5c04ea296ae48c0f4d7c67db9c319de481e018299990c727eb95b6746cc5bbfbdee52a77d96f2406b2f883eb3cce1deb571bc322dd113d69aac36e3816ca2256067391a1d10386503d2788eb5f3289ed462c3bea4951e2e9843cfa0ee70826c2d29ab31a902ccd9f82e43e56a6299b3f5c19ab010ee56c7d71031684ab754c1a442c386b93fa66dcc36f9c1d372434e75a5a7f8651ec4bb2b46ab61fc45a019abf8e20107e9a228ec07ecadfcb2f2373bf977cdedcdaa103bba3b70fb2ab373070f3fa88ef3ff54c1bf05df0350c3d9f8fc6d35734798bfe454da9128e2011e33e8b7602d3e45c160eb85ff49d722c1d049de00b151a938c5cb59861e19669b381f0ebcae398a93789ce8e2579aaf7b1493db08d71165d6c60396e0f2626b9f4609965d6c063fc071592e5eb58b707a942ab6a8a09192fd0bd3f0964c9ff7c978fbb46bd951f0d60c296f00d38c78bdee7f9e894b04b174a15aa68ff527376b3fc319996400f2e705cdf15f133a59a496402afc90824306d0f5c49993d3fa24ede9304f11fd30b31e7ce0517d9ea1919f2f5ef3ed1ede8f39872e17e0fbfdf1a9342dc65b192cb01dcbae1bbfab8b3fa2db08b09cd2aa9ad36ad9d4fc7039dafe688b1dff5986e172cc2e3476caa63ad6603568b2290252dc015c12323a980c6a347ec50efc9aea18c124bb21877b3807df36b71ad0e108f819988b8769cd1a6ec5d5b853939845187763ccc818d50146b912e3c76dbb7d893d787c898727be3b369c1c0526845b4ce2e842dbb120b2d7174203b3096f381743f4e0480206a13aee6f6514818dc77c5bf1e0476c1e391a71d2c58cc862063c5723bb0e7eb06e7e2d22252793c5b65c77c850530ef57f894145b332708371a06135382b7eea0782f8f7a88392c2be365934785685a2af96aa2b6e2035c3cb6f556071be1fb411f8c8497c041573e261a205d40b098ac2546cf2d25b7947c503ed6c9c9c3217a8695e1ca1b359ac92b91740344796243fac99189c0c46215df1a42478ebdb8c4a8d99e6ee985886de89c5d33f9485891da2023ce3d3c3b7b620c4231100c1911730f9d03e90ccf9cd10e4c7953e79a10913d683b3860db3c40f53f85ef77b9bdc108661a1d7b6c28d3c9f1c8bdd4d6110ba986c1f639de668a027740124ecdf54ab9e877f3208dad0139d434eb76ad3d6fb08ef20b6bdca5392d5e21ff9be075658192e70ff175beaa325397b45bdf9d5025935f9369d6a8bb9e368cab2beae3b891faeb1c9623104cacebffac39be98e324991983a268fce8226ef81184e4f2bab4b05f4c0111bcff4de5633fe26dda28197418470c59a254d18320afb3264ba857e0666e35e504d93054c8fc6e5e6bde8845abd33f6607d988da0e41831bb1228dcd83a894d094fdae1f592078d6d1b79dc8dc40d76e7b065b7ddb42b82773251dfd887fd0083d581deefd2cc8bf133f239aa7d014b67cd27eab9c40578449f61aef4831d1cef26902d886f29ada6624c45ef13caea199e8e98a14eb66559cb55296d7b1bfe87ff39c4e29598a014d723d245a2501301d2e9ac28caa8848532acc0c142b45f02e2daf692ba28decf4e0f6afcf5eeaa84e5282b91c3026d7c350bae653b2fcae8b77e9236348be3717552db2351cb289a4848cfaef7fcca4d246c91aeb619c7fdfc2a740736fd3677599d7e0092cd32274817188964b2be954bcfb3bc7928367be69d05688509f0b1edfbdb2138d766cff0bed83d67fea0ed79a6d02cee5ff6a4a6c6cd05f769cae141cc543af8705d1878953b63b3b1bb9f65e3c35891e9716959627b8bd8cda654dbaf44b2240144d587b2ee6b7c14d4246a920eeb5dd6adde20e4782f015a39b7e1287a3b00d93e7ae0dab496644aa5e833fc2334777c41b8935461c845d44f82fbdd821d413ed3b4a8c35ce5e36729b755c10400e66f49e012b7b1416744498d99093074574068230236c3559a25b4badfc4610cd4bca127b17434a76f10638e26cd77bdc8d9063398def2a36b115b381d03ea4a556aa608bde59c0e6662c0a1382d4bb26563e42b80d21c8400e4f48ccf62bbff0faa291cca6d5093cf12ac83979505bcf31682c225d9f5d02b43a83c4b0d9a9ceaab087b9acf6ec300f3e82f1fb348786704dfb536cdb65e1e35a8e68c9cd2490b198c1d0d46fb7f51ea8f5e210d3547c9577396a6619476871b3260ea49a5bb95825192688cff7e22520b821ceeeccc1f54471b76ae855c3733054be0ce00a4c44de27e45c2c0569de1b7c1621089f731fe64022e5b2225f3d85b71d4dba61a0a51b2a93687a33fa26f586da98f7b811221c717180d717546ef88e8ef37fdb381643f9eb32fbf327f37dc16f725b384d7bec64fb64a25836dd46a3ed3403ae2d9c751056d6db1983c0b36226bef498caa786c78f26a0e56b6fae8034df8fe9e76b466c6f67774c6bcdfa4429c3a5fb1edaa3f0e44f60f13a63c9ed19f360a30dcbdff3a30c8003a5c0eb51d8f1620fc58134550c46a7e66cfcb411c9bb151fe823ef2dbdfaad4ed4b54bd02740aad65163d30c43425c05032107fdb2de4b9be600fd35a33abda297087cd206cc56ade830c52524130ca577cc34f7538fd1bdb1c0608ede243a47cc6021447183509091511565b138126840859812db525691bd0b357bd6499e70ae3aa2d2711298dda1b4f274a6c24e31f548693c2ffb86ac957b00fe7fb802c72cf70977a116972fe9ccfdf206977c6137d152010132a6a3b01197769a418126b57ad67661c555d8c11ad8c09c8ba43a4ff55b28bf37ff03febf4688f30a3ab759b0088810c7e7d45eeeee778fdc9cd0efc719a84170d47246e9ed1e072799d7e2419bab5af06f3d319e2e19819237b6b5ba746d221796086570e1bf3365078d4c9806c7949e773c752665a73adfc3ee5d24fd17c653009ad1f3f5a0b3184c99f72dea417702391bcc4f2d1f924298c056d18b4083e075255799b77ed11b003cb5b54f26f28716582dffbcb3fbb9891c2b27ee8a0e3ea8e0412a13e63920ef0886e97b7b22aea7d22734459fe2f09007e16160b0770b6e5235c6cd19fd76b9305615018a0b1ec748a2daedb768680ec63b5c4cc8848221e474c7f3e24f339ce640534e682209d119c29652b95b4d63e1633b31f4c31b27f67ddd456c2816bf9f60457c36c1b6f011251a30b708cb218e25523f967c90a320eaa1e7d9aa8bcfc3c46d89881a9ca821ee324ee883aa7fcfb528e588e05e9e9cdaa7ae84ef5dabba76681d9b2b16af60b0ec3770e5d44b72fdfa193ba723875ea8bc93d50fb22b2ebb576826da6c4e1f7574e4d9ef140986fdc01b0334d8a646e7ac43d12c12463d8142236432e5f03ba68beec4c578016c396ac719e108a6ff7c1d2c7aaea8085dd176f716cbb815f944153657289625f22a8ee62e596d498ed2246ae8daa093280f5e33677ccdb95682faecf22d091c31fd8a0d541adcdb78090368ccdba3afda265ca1bd4bd412b236892ca41a629cdd6bd96529ba789a8f25f7122902f9bd121b050ea3075cf9c8ab7051ec2e7647b5e7ca81ab314863868c2519b0700b924d862fcae1ad13c08cece894ee7026ed0795166e8abac03f593285a8e82a05d0354a8b9e464e363660b7b2674a109397fbb0d191dcd32b1aad1ff7742b7a208ba423058329038ff7e54c963322b1ab821af6d500a996afdf94086293ec0089ebebc7996b76f3a315d7e515c5c56363c8fbf8f5af457bc8ee55ab884b2129cc064e0540315bb758441c25e2c4675972966581ce8dbe69cb52e6ed39b6ea6f752f1d2014cf5e30928815ddff44fc2b7260eafa9a9fb647f2f211ef3a79bd0d2d46d2e64db000db30350977c5b7638565c0db0115e7affbf3b554dc4a7066c50a6a22c6e75487d8624bc2c46a97f51a93009f747cb685af75ae2e8f79894f63e8a79ecae8548ccaf89006607adc82197ed1ceaad2f74f63cef83454e0cae3220d0c2d5ae37f90938cda02ef853e03358ee634707c806262752cb33dfd1e9061d032f8402c075293c33c3fc850ae7cf79cafb1f7629cffbaa6afe2873470ddae816f46877f5d1b463fd0cdc6564b17968058a014ac214bd49240ef7e939ab4220f1e3f641591db5c2a289f42e3f831f6743e03491e7bd97e3eb6edd8b9b7d31985a052bdeaf5682bb8eac75ad212a5fe79fb2ddd3c170336d7d96fc121d0700f71b0e12d1dfed19c372d999dddfe3e350f99803cae669208822fb126a440650c8dc39151f82cb26810edf96a13a198fceafd94b1ad15aef421f01ee62e527295adbb10fda8e3335369cc31297b6bb6597f19a429d73d6f68a6719909c846b825c858f82b4c8f432475812ebe8085e445beea7807c00d3a092e1b00fa02ae41fdf2a1013a7f1f87bf5b3ed8238fe94d07a8851ac2c1d8399af64ac964e2011f888ae935e0c24349127a339cca1b23e1039b89045df50918dc869803526f3f761c66b5a32cb3f370810af2f7a2e6deab47ba0bce10f5f1650776d84896b60f735282196208cc477e68762303830cdb687f9c9f9727bd938b170a4cf32aedbe132fea64c3c649b20ba74caebe8587e634d4d86ca8d7dc637a998b8dd921e9", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000140)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r5, 0x0, 0x0, 0x9000f4) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0x100, 0x4) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000440)=""/19, &(0x7f0000000240)=0x71) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9.929472517s ago: executing program 0 (id=186): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={0x0}, 0x1, 0x0, 0x0, 0x20049004}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x50, r0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80000, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f00002a1000/0x1000)=nil) mremap(&(0x7f0000a2f000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00005b7000/0x3000)=nil) madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) shutdown(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000200)="e9", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75d5bfeb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000140)) 9.803713057s ago: executing program 0 (id=187): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000002000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="60070111"], 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) pipe(0x0) unshare(0x42000000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000e6ff230012800e000100697036677265746170"], 0x44}, 0x1, 0xba01}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x76, &(0x7f00000000c0)={r8}, &(0x7f0000000140)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='br_fdb_add\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x5, 0x1, 0x0, r9}, @ldst={0x0, 0x0, 0x6, 0x1, 0xa, 0xfffffffffffffff0, 0xfffffffffffffffc}]}, &(0x7f0000000280)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xe, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r9, r9, r9, r9, r9, r9, r9, r9], &(0x7f00000004c0)=[{0x5, 0x2, 0xc, 0x6}, {0x0, 0x3, 0x6, 0x6}, {0x3, 0x2, 0x5, 0x7}, {0x3, 0x5, 0x0, 0x6}, {0x5, 0x4, 0xe, 0x5}], 0x10, 0x10001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000001f00000000000000b703000008000000b704000000000000140000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x90) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r11, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/83, 0x53}], 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) 8.933387468s ago: executing program 0 (id=190): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x8) sendto(r0, &(0x7f00000002c0)='%', 0x307fd8, 0x20000000000, 0x0, 0x0) 8.574400728s ago: executing program 0 (id=193): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 8.573704168s ago: executing program 0 (id=194): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0xfecc) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r1, 0x1}, 0x18) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x882) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000540), 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r1, r7, 0x2, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r9, &(0x7f0000000340)="113b5911cf8e6aecbeaa0e119df60f291e6478eeca6a6949ca68ac449bbf03937054984b45a8dab89184d9b85698309863a8427d0a6236b95ea9e8601941e485223c52f90e57e6c76af2a3f046277085bd1943ccec05b3dcf152e67945927b2f6cb559e40e76db6c4f82f423c520fa846df5dcc623678a922de22db485fc5157dd5956e7c234756f6cd403dab413014b43aae957b83d5bd6b8738f797292ebb02e6907b6", &(0x7f0000000400)=""/223}, 0x20) r10 = open(&(0x7f0000000500)='./file0\x00', 0x402000, 0x8) syz_open_pts(r10, 0x10d000) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 2.232520557s ago: executing program 3 (id=301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) 2.216852278s ago: executing program 3 (id=302): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1267, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0xf03affff) sendfile(r4, r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa401000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) ftruncate(r5, 0x20cf01) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) syz_io_uring_setup(0x6d6f, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 1.471062739s ago: executing program 3 (id=305): syz_read_part_table(0x59c, &(0x7f0000000b80)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x31f4c1, 0x81) ioctl$LOOP_CHANGE_FD(r0, 0x401070cd, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000ac0)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x3, @vifc_lcl_ifindex, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @broadcast, 0xffffffffffffffff, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393", 0x0, 0x8}, 0x3c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x1, 0x11, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="18002cbd7000fffcdf250300000005004971d1a2e41fcd7303000800000008000400eff9533e08000200030000000800020002000000080004000100000008000400ff000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4011}, 0x4881) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.433401722s ago: executing program 4 (id=306): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000009900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/19, 0x13}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x404c881, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x401}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4bfb, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}, @NHA_OIF={0x8, 0x5, r4}]}, 0x38}}, 0x0) getdents64(r0, &(0x7f00000007c0)=""/4116, 0x1014) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.033848645s ago: executing program 3 (id=313): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r4, &(0x7f0000000240)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) pselect6(0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x8001, 0x1, 0x38aa, 0x8000, 0x4, 0x80000000}, &(0x7f00000004c0)={0x7fff, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x28, 0x7fff}, &(0x7f0000000500), &(0x7f0000000600)={0x0}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, r6, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="10008100", 0x5dc, 0x0, &(0x7f0000000040)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) 941.274972ms ago: executing program 2 (id=315): r0 = inotify_init() r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) creat(&(0x7f0000000000)='./file0\x00', 0x0) 941.066242ms ago: executing program 2 (id=316): r0 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) creat(&(0x7f0000000000)='./file0\x00', 0x0) 940.801153ms ago: executing program 2 (id=317): r0 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) creat(&(0x7f0000000000)='./file0\x00', 0x0) (fail_nth: 1) 731.36249ms ago: executing program 3 (id=319): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={0x0}, 0x1, 0x0, 0x0, 0x20049004}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x50, r0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80000, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f00002a1000/0x1000)=nil) mremap(&(0x7f0000a2f000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00005b7000/0x3000)=nil) madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/223, 0xdf}], 0x1, 0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) shutdown(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000200)="e9", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75d5bfeb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000140)) 678.148394ms ago: executing program 2 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0xf00}, 0x0) 677.792104ms ago: executing program 2 (id=321): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x14, r5, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x408c5333, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0x80045300, 0x0) tkill(r3, 0x7) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x2287, &(0x7f0000000000)) 645.257307ms ago: executing program 3 (id=322): ftruncate(0xffffffffffffffff, 0x0) unshare(0x24020400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) poll(&(0x7f0000000340)=[{r2}], 0x1, 0xfffffdfe) 569.911303ms ago: executing program 4 (id=323): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000800)={{0x80, 0xc}, {0x7f, 0xcb}, 0x9a187af, 0x1, 0x3}) (async) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104110}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000004000085000000190000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) (async) clock_gettime(0x2, &(0x7f0000000500)={0x0, 0x0}) utimes(&(0x7f0000000880)='./file0\x00', &(0x7f0000000900)={{r4, r5/1000+60000}}) close(r3) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c50901000000000065000000000000001801000020646c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b7030000d52a3b4856000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000002a00)={r7, "b20ad57bfb31229b26ed39645924b016"}) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x0) (async, rerun: 32) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r10, 0x6, 0x2, &(0x7f0000000040)=0x101, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss={0x2, 0xfff}, @window, @window={0x3, 0x4}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) sendmmsg$inet(r10, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="e4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="54be00e20b410913658adbedfa", 0xd}, {&(0x7f0000001a00)="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", 0xff3}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}}], 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r9, &(0x7f0000000d80), 0x0, 0x10162, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) (async) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 424.328845ms ago: executing program 4 (id=325): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x61b, &(0x7f0000001100)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x80000001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x45d8, 0x16) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvfrom$unix(r1, 0x0, 0x0, 0x12122, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e40)=ANY=[@ANYBLOB="000000004c90020001000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"]) 308.655044ms ago: executing program 2 (id=329): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3}, 0x8) 275.961947ms ago: executing program 4 (id=330): syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x10100, 0x1, 0xfffffffe}, &(0x7f0000000080), &(0x7f0000000140)) ftruncate(0xffffffffffffffff, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 266.239888ms ago: executing program 1 (id=331): socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x24, 0x0, 0x0, 0x0) 224.073461ms ago: executing program 1 (id=332): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={0x0}, 0x1, 0x0, 0x0, 0x20049004}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x50, r0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80000, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f00002a1000/0x1000)=nil) mremap(&(0x7f0000a2f000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00005b7000/0x3000)=nil) madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/223, 0xdf}], 0x1, 0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) shutdown(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000200)="e9", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75d5bfeb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000140)) 223.539501ms ago: executing program 1 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=ANY=[], 0x0, 0xa00) 216.594422ms ago: executing program 4 (id=334): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x4) close(r1) socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x764, &(0x7f0000000f80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYBLOB="580de71750aef9"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) 167.455466ms ago: executing program 1 (id=335): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getflags(0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x3}, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000)=0x9, 0x4) 166.960326ms ago: executing program 1 (id=336): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000680)="08009d226da0d6c1", 0x11}], 0x1}, 0x0) 113.38908ms ago: executing program 1 (id=337): unshare(0x22020400) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) (async) listen(r0, 0x80080400) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0x48, [0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x15, 0x1, 0xfffd, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x11) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$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") 0s ago: executing program 4 (id=338): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c2000001a009b8a140000003b9b301f00"/28, 0x32) kernel console output (not intermixed with test programs): ] audit: type=1400 audit(1720484157.976:85): avc: denied { create } for pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.502482][ T29] audit: type=1400 audit(1720484157.976:86): avc: denied { write } for pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.522945][ T29] audit: type=1400 audit(1720484157.976:87): avc: denied { read } for pid=3071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.543396][ T29] audit: type=1400 audit(1720484157.986:88): avc: denied { mounton } for pid=3071 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.552256][ T3073] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.568264][ T29] audit: type=1400 audit(1720484157.986:89): avc: denied { mount } for pid=3071 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.600448][ T29] audit: type=1400 audit(1720484158.086:90): avc: denied { relabelto } for pid=3073 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.626116][ T29] audit: type=1400 audit(1720484158.086:91): avc: denied { write } for pid=3073 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 26.703038][ T3071] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.792866][ T3080] chnl_net:caif_netlink_parms(): no params data found [ 27.873439][ T3082] chnl_net:caif_netlink_parms(): no params data found [ 27.914041][ T3081] chnl_net:caif_netlink_parms(): no params data found [ 27.960284][ T3086] chnl_net:caif_netlink_parms(): no params data found [ 27.971012][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.978207][ T3080] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.985339][ T3080] bridge_slave_0: entered allmulticast mode [ 27.991931][ T3080] bridge_slave_0: entered promiscuous mode [ 28.010923][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.018095][ T3080] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.025264][ T3080] bridge_slave_1: entered allmulticast mode [ 28.031835][ T3080] bridge_slave_1: entered promiscuous mode [ 28.063803][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.071036][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.078268][ T3082] bridge_slave_0: entered allmulticast mode [ 28.084654][ T3082] bridge_slave_0: entered promiscuous mode [ 28.102298][ T3087] chnl_net:caif_netlink_parms(): no params data found [ 28.112392][ T3080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.121555][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.128680][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.135886][ T3082] bridge_slave_1: entered allmulticast mode [ 28.142111][ T3082] bridge_slave_1: entered promiscuous mode [ 28.155559][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.162692][ T3081] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.169846][ T3081] bridge_slave_0: entered allmulticast mode [ 28.176303][ T3081] bridge_slave_0: entered promiscuous mode [ 28.186863][ T3080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.210418][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.217722][ T3081] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.224860][ T3081] bridge_slave_1: entered allmulticast mode [ 28.231257][ T3081] bridge_slave_1: entered promiscuous mode [ 28.249911][ T3080] team0: Port device team_slave_0 added [ 28.270346][ T3080] team0: Port device team_slave_1 added [ 28.284530][ T3082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.298861][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.305975][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.313138][ T3086] bridge_slave_0: entered allmulticast mode [ 28.319658][ T3086] bridge_slave_0: entered promiscuous mode [ 28.336938][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.343899][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.369871][ T3080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.383993][ T3082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.398118][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.405202][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.412521][ T3086] bridge_slave_1: entered allmulticast mode [ 28.419152][ T3086] bridge_slave_1: entered promiscuous mode [ 28.426299][ T3081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.440238][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.447203][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.473183][ T3080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.494568][ T3081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.523733][ T3082] team0: Port device team_slave_0 added [ 28.535302][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.549267][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.556549][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.563743][ T3087] bridge_slave_0: entered allmulticast mode [ 28.570229][ T3087] bridge_slave_0: entered promiscuous mode [ 28.577234][ T3082] team0: Port device team_slave_1 added [ 28.582976][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.590069][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.597288][ T3087] bridge_slave_1: entered allmulticast mode [ 28.603681][ T3087] bridge_slave_1: entered promiscuous mode [ 28.610513][ T3081] team0: Port device team_slave_0 added [ 28.617086][ T3081] team0: Port device team_slave_1 added [ 28.623913][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.664138][ T3080] hsr_slave_0: entered promiscuous mode [ 28.670252][ T3080] hsr_slave_1: entered promiscuous mode [ 28.688907][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.698295][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.705261][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.731325][ T3081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.752169][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.759232][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.785144][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.796271][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.803224][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.829129][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.840779][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.850214][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.857190][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.883136][ T3081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.897247][ T3086] team0: Port device team_slave_0 added [ 28.929970][ T3086] team0: Port device team_slave_1 added [ 28.949763][ T3087] team0: Port device team_slave_0 added [ 28.957574][ T3082] hsr_slave_0: entered promiscuous mode [ 28.963638][ T3082] hsr_slave_1: entered promiscuous mode [ 28.969496][ T3082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.977078][ T3082] Cannot create hsr debugfs directory [ 28.995715][ T3087] team0: Port device team_slave_1 added [ 29.013240][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.020269][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.046238][ T3086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.063370][ T3081] hsr_slave_0: entered promiscuous mode [ 29.069502][ T3081] hsr_slave_1: entered promiscuous mode [ 29.075361][ T3081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.082954][ T3081] Cannot create hsr debugfs directory [ 29.095579][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.102562][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.128472][ T3086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.147701][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.154661][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.180606][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.191780][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.198796][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.224699][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.278972][ T3086] hsr_slave_0: entered promiscuous mode [ 29.285028][ T3086] hsr_slave_1: entered promiscuous mode [ 29.291151][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.298746][ T3086] Cannot create hsr debugfs directory [ 29.332941][ T3087] hsr_slave_0: entered promiscuous mode [ 29.339179][ T3087] hsr_slave_1: entered promiscuous mode [ 29.345170][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.352857][ T3087] Cannot create hsr debugfs directory [ 29.428629][ T3080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.439252][ T3080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.450126][ T3080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.472998][ T3080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.540431][ T3082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.551989][ T3082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.561244][ T3082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.570213][ T3082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.591586][ T3081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.602799][ T3081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.611759][ T3081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.620561][ T3081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.656530][ T3087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.671370][ T3087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.681140][ T3087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.693204][ T3087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.730579][ T3086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.740631][ T3086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.750699][ T3086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.762006][ T3086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.782360][ T3080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.806498][ T3080] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.829588][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.836710][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.860367][ T3081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.872418][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.879551][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.929282][ T3080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.942320][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.963495][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.972704][ T3081] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.988594][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.996623][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.003699][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.013739][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.020964][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.033815][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.053061][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.060170][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.071327][ T3086] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.083264][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.098312][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.105397][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.119552][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.126658][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.142274][ T3080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.151741][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.158953][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.168903][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.176010][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.197410][ T3086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.207905][ T3086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.221163][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.228263][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.282391][ T3082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.292922][ T3082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.358657][ T3081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.383889][ T3086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.422125][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.442735][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.503173][ T3080] veth0_vlan: entered promiscuous mode [ 30.527949][ T3080] veth1_vlan: entered promiscuous mode [ 30.567066][ T3081] veth0_vlan: entered promiscuous mode [ 30.579657][ T3081] veth1_vlan: entered promiscuous mode [ 30.593805][ T3080] veth0_macvtap: entered promiscuous mode [ 30.617583][ T3080] veth1_macvtap: entered promiscuous mode [ 30.638655][ T3081] veth0_macvtap: entered promiscuous mode [ 30.653820][ T3086] veth0_vlan: entered promiscuous mode [ 30.665331][ T3087] veth0_vlan: entered promiscuous mode [ 30.672260][ T3081] veth1_macvtap: entered promiscuous mode [ 30.687750][ T3087] veth1_vlan: entered promiscuous mode [ 30.694385][ T3086] veth1_vlan: entered promiscuous mode [ 30.711008][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.720889][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.743246][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.753840][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.764623][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.774215][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.784764][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.796011][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.805017][ T3080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.813786][ T3080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.822600][ T3080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.831332][ T3080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.848041][ T3081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.856785][ T3081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.865543][ T3081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.874561][ T3081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.886110][ T3082] veth0_vlan: entered promiscuous mode [ 30.897732][ T3087] veth0_macvtap: entered promiscuous mode [ 30.906280][ T3086] veth0_macvtap: entered promiscuous mode [ 30.914956][ T3082] veth1_vlan: entered promiscuous mode [ 30.923436][ T3087] veth1_macvtap: entered promiscuous mode [ 30.934770][ T3086] veth1_macvtap: entered promiscuous mode [ 30.952924][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.963520][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.973433][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.983870][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.997778][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.014309][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.024851][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.034773][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.045259][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.056705][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.070344][ T3087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.079129][ T3087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.087886][ T3087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.096621][ T3087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.107738][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.118301][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.128191][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.138627][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.148485][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.158998][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.169609][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.184963][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 31.184979][ T29] audit: type=1400 audit(1720484162.676:115): avc: denied { read write } for pid=3080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.218150][ T29] audit: type=1400 audit(1720484162.676:116): avc: denied { open } for pid=3080 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.242336][ T29] audit: type=1400 audit(1720484162.676:117): avc: denied { ioctl } for pid=3080 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.267884][ T29] audit: type=1400 audit(1720484162.696:118): avc: denied { open } for pid=3222 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.286787][ T29] audit: type=1400 audit(1720484162.696:119): avc: denied { perfmon } for pid=3222 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.307322][ T29] audit: type=1400 audit(1720484162.696:120): avc: denied { kernel } for pid=3222 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.328860][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.339447][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.349498][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.359966][ T29] audit: type=1400 audit(1720484162.816:121): avc: denied { prog_load } for pid=3222 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.360010][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.360023][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.360038][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.362621][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.378884][ T29] audit: type=1400 audit(1720484162.816:122): avc: denied { bpf } for pid=3222 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.391305][ T3228] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.399381][ T29] audit: type=1400 audit(1720484162.826:123): avc: denied { write } for pid=3222 comm="syz.3.4" name="001" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.417214][ T3082] veth0_macvtap: entered promiscuous mode [ 31.436847][ T29] audit: type=1400 audit(1720484162.856:124): avc: denied { map_create } for pid=3222 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.500011][ T3082] veth1_macvtap: entered promiscuous mode [ 31.512459][ T3086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.521464][ T3086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.530228][ T3086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.539035][ T3086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.556908][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.567458][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.577292][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.578196][ T3224] loop1: detected capacity change from 0 to 2048 [ 31.587718][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.587734][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.614364][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.624230][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.634675][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.646871][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.661524][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.672084][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.681992][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.692515][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.702466][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.713162][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.722662][ T3224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.723192][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.745567][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.757215][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.759682][ T3224] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.781176][ T3224] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 31.793510][ T3224] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.793510][ T3224] [ 31.794833][ T3232] process 'syz.3.6' launched './file0' with NULL argv: empty string added [ 31.803239][ T3224] EXT4-fs (loop1): Total free blocks count 0 [ 31.803262][ T3224] EXT4-fs (loop1): Free/Dirty block details [ 31.803275][ T3224] EXT4-fs (loop1): free_blocks=2415919104 [ 31.803290][ T3224] EXT4-fs (loop1): dirty_blocks=16 [ 31.803346][ T3224] EXT4-fs (loop1): Block reservation details [ 31.803357][ T3224] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 31.827653][ T3082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.855670][ T3082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.864394][ T3082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.873162][ T3082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.910858][ T3224] syz.1.2 (3224) used greatest stack depth: 10472 bytes left [ 31.920168][ T3080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.961701][ T3239] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 31.988963][ T3239] FAULT_INJECTION: forcing a failure. [ 31.988963][ T3239] name failslab, interval 1, probability 0, space 0, times 1 [ 32.001674][ T3239] CPU: 0 PID: 3239 Comm: syz.3.7 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 32.011506][ T3239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 32.021633][ T3239] Call Trace: [ 32.024916][ T3239] [ 32.027849][ T3239] dump_stack_lvl+0xf2/0x150 [ 32.032535][ T3239] dump_stack+0x15/0x20 [ 32.036699][ T3239] should_fail_ex+0x229/0x230 [ 32.041425][ T3239] ? alloc_slab_obj_exts+0x32/0x80 [ 32.046666][ T3239] __should_failslab+0x92/0xa0 [ 32.051433][ T3239] should_failslab+0x9/0x20 [ 32.055946][ T3239] __kmalloc_node_noprof+0xa8/0x380 [ 32.061164][ T3239] alloc_slab_obj_exts+0x32/0x80 [ 32.066117][ T3239] __memcg_slab_post_alloc_hook+0x31b/0x650 [ 32.072169][ T3239] ? io_alloc_page_table+0x3b/0x100 [ 32.077374][ T3239] __kmalloc_noprof+0x203/0x370 [ 32.082238][ T3239] io_alloc_page_table+0x3b/0x100 [ 32.087266][ T3239] ? kmalloc_trace_noprof+0x10b/0x2a0 [ 32.092691][ T3239] io_rsrc_data_alloc+0x7c/0x1a0 [ 32.097678][ T3239] io_sqe_buffers_register+0xde/0x3a0 [ 32.103063][ T3239] ? __fget_files+0x1da/0x210 [ 32.107771][ T3239] __se_sys_io_uring_register+0xa15/0x1190 [ 32.113601][ T3239] __x64_sys_io_uring_register+0x55/0x70 [ 32.119295][ T3239] x64_sys_call+0x2c2/0x2d70 [ 32.123958][ T3239] do_syscall_64+0xc9/0x1c0 [ 32.128476][ T3239] ? clear_bhb_loop+0x55/0xb0 [ 32.133160][ T3239] ? clear_bhb_loop+0x55/0xb0 [ 32.137854][ T3239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.143761][ T3239] RIP: 0033:0x7fb029585bd9 [ 32.148189][ T3239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.167930][ T3239] RSP: 002b:00007fb028807048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 32.176355][ T3239] RAX: ffffffffffffffda RBX: 00007fb029713f60 RCX: 00007fb029585bd9 [ 32.184360][ T3239] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 32.192343][ T3239] RBP: 00007fb0288070a0 R08: 0000000000000000 R09: 0000000000000000 [ 32.200316][ T3239] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 32.208287][ T3239] R13: 000000000000000b R14: 00007fb029713f60 R15: 00007ffdd0c23ec8 [ 32.216385][ T3239] [ 32.232174][ T3244] loop2: detected capacity change from 0 to 1024 [ 32.268411][ T3245] loop1: detected capacity change from 0 to 128 [ 32.276932][ T3244] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 32.277488][ T3245] FAT-fs (loop1): Unrecognized mount option "0x0000000000000000ÿÿÿÿÿÿ" or missing value [ 32.293968][ T3244] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 32.411815][ T3266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14'. [ 32.498659][ T3272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 32.597681][ T3280] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 32.624406][ T3282] FAULT_INJECTION: forcing a failure. [ 32.624406][ T3282] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.637668][ T3282] CPU: 0 PID: 3282 Comm: syz.0.18 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 32.647579][ T3282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 32.657764][ T3282] Call Trace: [ 32.661068][ T3282] [ 32.663996][ T3282] dump_stack_lvl+0xf2/0x150 [ 32.668647][ T3282] dump_stack+0x15/0x20 [ 32.672808][ T3282] should_fail_ex+0x229/0x230 [ 32.677568][ T3282] should_fail+0xb/0x10 [ 32.681813][ T3282] should_fail_usercopy+0x1a/0x20 [ 32.686847][ T3282] _copy_from_user+0x1e/0xd0 [ 32.691505][ T3282] copy_msghdr_from_user+0x54/0x2a0 [ 32.696769][ T3282] __sys_sendmsg+0x17d/0x280 [ 32.701439][ T3282] __x64_sys_sendmsg+0x46/0x50 [ 32.706224][ T3282] x64_sys_call+0xb25/0x2d70 [ 32.710898][ T3282] do_syscall_64+0xc9/0x1c0 [ 32.715402][ T3282] ? clear_bhb_loop+0x55/0xb0 [ 32.720079][ T3282] ? clear_bhb_loop+0x55/0xb0 [ 32.724787][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.730686][ T3282] RIP: 0033:0x7fd887a77bd9 [ 32.735101][ T3282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.754710][ T3282] RSP: 002b:00007fd886cf9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.763126][ T3282] RAX: ffffffffffffffda RBX: 00007fd887c05f60 RCX: 00007fd887a77bd9 [ 32.771160][ T3282] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 32.779197][ T3282] RBP: 00007fd886cf90a0 R08: 0000000000000000 R09: 0000000000000000 [ 32.787199][ T3282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.795171][ T3282] R13: 000000000000000b R14: 00007fd887c05f60 R15: 00007ffdb66ecd38 [ 32.803147][ T3282] [ 32.828861][ T3284] loop0: detected capacity change from 0 to 128 [ 32.837764][ T3284] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ01777777777777777777777" or missing value [ 32.881318][ T3286] loop2: detected capacity change from 0 to 128 [ 32.911386][ T3288] FAULT_INJECTION: forcing a failure. [ 32.911386][ T3288] name failslab, interval 1, probability 0, space 0, times 0 [ 32.924338][ T3288] CPU: 1 PID: 3288 Comm: syz.1.21 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 32.934245][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 32.944296][ T3288] Call Trace: [ 32.947593][ T3288] [ 32.950521][ T3288] dump_stack_lvl+0xf2/0x150 [ 32.955198][ T3288] dump_stack+0x15/0x20 [ 32.959363][ T3288] should_fail_ex+0x229/0x230 [ 32.964112][ T3288] ? shmem_alloc_inode+0x34/0x50 [ 32.969045][ T3288] __should_failslab+0x92/0xa0 [ 32.973806][ T3288] should_failslab+0x9/0x20 [ 32.978330][ T3288] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 32.984199][ T3288] shmem_alloc_inode+0x34/0x50 [ 32.988964][ T3288] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 32.994440][ T3288] alloc_inode+0x3c/0x160 [ 32.998801][ T3288] new_inode+0x1d/0x130 [ 33.002969][ T3288] shmem_get_inode+0x258/0x740 [ 33.007753][ T3288] __shmem_file_setup+0x127/0x1f0 [ 33.012801][ T3288] shmem_file_setup+0x3b/0x50 [ 33.017523][ T3288] __se_sys_memfd_create+0x31d/0x600 [ 33.022811][ T3288] __x64_sys_memfd_create+0x31/0x40 [ 33.028102][ T3288] x64_sys_call+0x28b7/0x2d70 [ 33.032815][ T3288] do_syscall_64+0xc9/0x1c0 [ 33.037394][ T3288] ? clear_bhb_loop+0x55/0xb0 [ 33.042166][ T3288] ? clear_bhb_loop+0x55/0xb0 [ 33.046907][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.052843][ T3288] RIP: 0033:0x7efe71c03bd9 [ 33.057334][ T3288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.077020][ T3288] RSP: 002b:00007efe70e84e28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 33.085444][ T3288] RAX: ffffffffffffffda RBX: 0000000000000513 RCX: 00007efe71c03bd9 [ 33.093413][ T3288] RDX: 00007efe70e84f00 RSI: 0000000000000000 RDI: 00007efe71c71d24 [ 33.101380][ T3288] RBP: 0000000020000c00 R08: 00007efe70e84bc7 R09: 00007efe70e84e50 [ 33.109359][ T3288] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000100 [ 33.117418][ T3288] R13: 00007efe70e84f00 R14: 00007efe70e84ec0 R15: 0000000020000080 [ 33.125397][ T3288] [ 33.164041][ T3292] mmap: syz.1.23 (3292) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.240214][ T3307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.249079][ T3307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.311465][ T3315] loop1: detected capacity change from 0 to 256 [ 33.385418][ T3331] FAULT_INJECTION: forcing a failure. [ 33.385418][ T3331] name failslab, interval 1, probability 0, space 0, times 0 [ 33.398143][ T3331] CPU: 0 PID: 3331 Comm: syz.0.34 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 33.408064][ T3331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.418133][ T3331] Call Trace: [ 33.421448][ T3331] [ 33.424412][ T3331] dump_stack_lvl+0xf2/0x150 [ 33.429093][ T3331] dump_stack+0x15/0x20 [ 33.433290][ T3331] should_fail_ex+0x229/0x230 [ 33.438272][ T3331] ? io_alloc_async_data+0x4a/0xb0 [ 33.443476][ T3331] __should_failslab+0x92/0xa0 [ 33.448266][ T3331] should_failslab+0x9/0x20 [ 33.452854][ T3331] __kmalloc_noprof+0xa5/0x370 [ 33.457733][ T3331] io_alloc_async_data+0x4a/0xb0 [ 33.462713][ T3331] io_prep_rw+0x2ec/0x440 [ 33.467147][ T3331] io_prep_readv+0x57/0x1d0 [ 33.471672][ T3331] io_submit_sqes+0x64c/0x1080 [ 33.476461][ T3331] ? __rcu_read_unlock+0x4e/0x70 [ 33.481473][ T3331] ? xa_load+0xb9/0xe0 [ 33.485601][ T3331] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 33.491161][ T3331] ? __fget_files+0x1da/0x210 [ 33.495901][ T3331] ? fput+0x13b/0x180 [ 33.499943][ T3331] ? ksys_write+0x178/0x1b0 [ 33.504457][ T3331] __x64_sys_io_uring_enter+0x78/0x90 [ 33.509850][ T3331] x64_sys_call+0x25ab/0x2d70 [ 33.514541][ T3331] do_syscall_64+0xc9/0x1c0 [ 33.519173][ T3331] ? clear_bhb_loop+0x55/0xb0 [ 33.523884][ T3331] ? clear_bhb_loop+0x55/0xb0 [ 33.528572][ T3331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.534546][ T3331] RIP: 0033:0x7fd887a77bd9 [ 33.539019][ T3331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.558667][ T3331] RSP: 002b:00007fd886cf9048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 33.567126][ T3331] RAX: ffffffffffffffda RBX: 00007fd887c05f60 RCX: 00007fd887a77bd9 [ 33.575107][ T3331] RDX: 0000000000000000 RSI: 0000000000000567 RDI: 0000000000000004 [ 33.583119][ T3331] RBP: 00007fd886cf90a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.591218][ T3331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.599193][ T3331] R13: 000000000000000b R14: 00007fd887c05f60 R15: 00007ffdb66ecd38 [ 33.607245][ T3331] [ 33.717171][ T3360] loop4: detected capacity change from 0 to 512 [ 33.717884][ T3359] loop1: detected capacity change from 0 to 512 [ 33.723757][ T3360] ext2: Unknown parameter 'subj_role' [ 33.738151][ T3359] ext2: Unknown parameter 'subj_role' [ 33.786745][ T3268] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 33.791685][ T3074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 33.870134][ T3367] bpf: Bad value for 'mode' [ 33.933698][ T3367] loop1: detected capacity change from 0 to 512 [ 33.940973][ T3367] EXT4-fs error (device loop1): ext4_get_journal_inode:5752: comm syz.1.44: inode #196608: comm syz.1.44: iget: illegal inode # [ 33.954656][ T3367] EXT4-fs (loop1): Remounting filesystem read-only [ 33.961378][ T3367] EXT4-fs (loop1): no journal found [ 33.966620][ T3367] EXT4-fs (loop1): can't get journal size [ 33.972655][ T3367] EXT4-fs (loop1): failed to initialize system zone (-22) [ 33.980235][ T3367] EXT4-fs (loop1): mount failed [ 33.990472][ T3382] loop4: detected capacity change from 0 to 736 [ 33.997496][ T3382] ======================================================= [ 33.997496][ T3382] WARNING: The mand mount option has been deprecated and [ 33.997496][ T3382] and is ignored by this kernel. Remove the mand [ 33.997496][ T3382] option from the mount to silence this warning. [ 33.997496][ T3382] ======================================================= [ 34.032709][ T3382] iso9660: Bad value for 'mode' [ 34.311948][ T3389] loop2: detected capacity change from 0 to 128 [ 34.321595][ T3389] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.334668][ T3389] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.391491][ T3087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.496437][ T3403] loop0: detected capacity change from 0 to 164 [ 34.542636][ T3405] loop2: detected capacity change from 0 to 512 [ 34.549286][ T3405] ext2: Unknown parameter 'subj_role' [ 34.573024][ T3407] loop0: detected capacity change from 0 to 512 [ 34.580757][ T3407] ext2: Unknown parameter 'subj_role' [ 34.617287][ T3268] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 34.672405][ T3422] loop0: detected capacity change from 0 to 128 [ 34.681790][ T3422] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.701393][ T3422] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.805169][ T3086] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.893016][ T3444] loop0: detected capacity change from 0 to 512 [ 34.899771][ T3444] ext2: Unknown parameter 'subj_role' [ 34.920286][ T3268] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 35.012339][ T3461] syz.1.75 uses obsolete (PF_INET,SOCK_PACKET) [ 35.033271][ T3461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 35.035855][ T3465] loop0: detected capacity change from 0 to 128 [ 35.042148][ T3461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 35.060240][ T3461] sit0: Master is either lo or non-ether device [ 35.067921][ T3468] FAULT_INJECTION: forcing a failure. [ 35.067921][ T3468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.069777][ T3465] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.081071][ T3468] CPU: 1 PID: 3468 Comm: syz.2.78 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 35.081130][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 35.081144][ T3468] Call Trace: [ 35.081151][ T3468] [ 35.081159][ T3468] dump_stack_lvl+0xf2/0x150 [ 35.081195][ T3468] dump_stack+0x15/0x20 [ 35.081261][ T3468] should_fail_ex+0x229/0x230 [ 35.081302][ T3468] should_fail+0xb/0x10 [ 35.094895][ T3465] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.103143][ T3468] should_fail_usercopy+0x1a/0x20 [ 35.103174][ T3468] _copy_from_iter+0xd3/0xb00 [ 35.179024][ T3468] ? kmalloc_reserve+0x16e/0x190 [ 35.183973][ T3468] ? __build_skb_around+0x196/0x1f0 [ 35.189260][ T3468] ? __alloc_skb+0x217/0x300 [ 35.193924][ T3468] ? __virt_addr_valid+0x1dd/0x240 [ 35.199086][ T3468] ? __check_object_size+0x35b/0x510 [ 35.204390][ T3468] netlink_sendmsg+0x460/0x6e0 [ 35.209311][ T3468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.214618][ T3468] __sock_sendmsg+0x140/0x180 [ 35.219328][ T3468] ____sys_sendmsg+0x312/0x410 [ 35.224103][ T3468] __sys_sendmsg+0x1e9/0x280 [ 35.228743][ T3468] __x64_sys_sendmsg+0x46/0x50 [ 35.233519][ T3468] x64_sys_call+0xb25/0x2d70 [ 35.238122][ T3468] do_syscall_64+0xc9/0x1c0 [ 35.242639][ T3468] ? clear_bhb_loop+0x55/0xb0 [ 35.247394][ T3468] ? clear_bhb_loop+0x55/0xb0 [ 35.252117][ T3468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.258024][ T3468] RIP: 0033:0x7f5f34936bd9 [ 35.262439][ T3468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.282141][ T3468] RSP: 002b:00007f5f33bb8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.290561][ T3468] RAX: ffffffffffffffda RBX: 00007f5f34ac4f60 RCX: 00007f5f34936bd9 [ 35.298570][ T3468] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 35.306554][ T3468] RBP: 00007f5f33bb80a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.314569][ T3468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.322543][ T3468] R13: 000000000000000b R14: 00007f5f34ac4f60 R15: 00007ffc8e4e8ec8 [ 35.330534][ T3468] [ 35.379041][ T3086] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.417991][ T3477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 35.475858][ T3483] Zero length message leads to an empty skb [ 35.660068][ T3502] loop4: detected capacity change from 0 to 128 [ 35.660482][ T3501] loop0: detected capacity change from 0 to 128 [ 35.679922][ T3501] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 35.681010][ T3502] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.718236][ T3502] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.812317][ T3082] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.943812][ T3508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3508 comm=syz.4.93 [ 35.981893][ T3511] loop4: detected capacity change from 0 to 128 [ 36.291391][ T3516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3516 comm=syz.2.96 [ 36.330071][ T3518] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.343644][ T3518] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 36.392345][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 36.392370][ T29] audit: type=1400 audit(1720484167.886:333): avc: denied { bind } for pid=3521 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.417808][ T29] audit: type=1400 audit(1720484167.886:334): avc: denied { name_bind } for pid=3521 comm="syz.2.99" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 36.438398][ T29] audit: type=1400 audit(1720484167.886:335): avc: denied { node_bind } for pid=3521 comm="syz.2.99" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 36.505024][ T29] audit: type=1400 audit(1720484167.966:336): avc: denied { listen } for pid=3521 comm="syz.2.99" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.531112][ T3528] loop1: detected capacity change from 0 to 128 [ 36.540915][ T3528] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.554288][ T3528] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.644950][ T29] audit: type=1400 audit(1720484168.136:337): avc: denied { bind } for pid=3536 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.664285][ T29] audit: type=1400 audit(1720484168.136:338): avc: denied { connect } for pid=3536 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.687714][ T3080] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.716163][ T3540] loop0: detected capacity change from 0 to 2048 [ 36.728544][ T3540] EXT4-fs: Ignoring removed bh option [ 36.747871][ T3540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.779457][ T29] audit: type=1400 audit(1720484168.266:339): avc: denied { mounton } for pid=3539 comm="syz.0.107" path="/29/file1/file0/bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.815660][ T3540] loop0: detected capacity change from 2048 to 0 [ 36.838737][ T3086] syz-executor: attempt to access beyond end of device [ 36.838737][ T3086] loop0: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 36.908268][ T463] kworker/u8:4: attempt to access beyond end of device [ 36.908268][ T463] loop0: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 36.922224][ T463] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4480: inode #18: block 6: comm kworker/u8:4: unable to read itable block [ 36.937879][ T463] kworker/u8:4: attempt to access beyond end of device [ 36.937879][ T463] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 36.951307][ T463] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 36.961268][ T463] EXT4-fs (loop0): I/O error while writing superblock [ 36.968994][ T3538] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.979396][ T3538] syz.0.105: attempt to access beyond end of device [ 36.979396][ T3538] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 36.992604][ T3538] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 37.001726][ T3538] EXT4-fs (loop0): I/O error while writing superblock [ 37.008986][ T3541] kmmpd-loop0: attempt to access beyond end of device [ 37.008986][ T3541] loop0: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 37.022483][ T3541] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 37.189301][ T3552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 37.198326][ T3552] (unnamed net_device) (uninitialized): option arp_validate: invalid value (205) [ 37.208952][ T29] audit: type=1326 audit(1720484168.716:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3551 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe71c03bd9 code=0x7ffc0000 [ 37.232341][ T29] audit: type=1326 audit(1720484168.716:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3551 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe71c03bd9 code=0x7ffc0000 [ 37.255814][ T29] audit: type=1326 audit(1720484168.716:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3551 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe71c03bd9 code=0x7ffc0000 [ 37.279872][ T3552] loop1: detected capacity change from 0 to 8192 [ 37.298484][ T463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.349687][ T463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.362557][ T3560] capability: warning: `syz.1.112' uses deprecated v2 capabilities in a way that may be insecure [ 37.417364][ T3563] loop1: detected capacity change from 0 to 128 [ 37.437479][ T3563] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.451695][ T463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.466141][ T3563] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.525148][ T463] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.561137][ T3573] loop2: detected capacity change from 0 to 4096 [ 37.568714][ T3573] EXT4-fs: Ignoring removed nobh option [ 37.574408][ T3573] EXT4-fs: Ignoring removed i_version option [ 37.589822][ T3573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.610481][ T463] bridge_slave_1: left allmulticast mode [ 37.614742][ T3080] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.616224][ T463] bridge_slave_1: left promiscuous mode [ 37.630929][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.639781][ T463] bridge_slave_0: left allmulticast mode [ 37.645455][ T463] bridge_slave_0: left promiscuous mode [ 37.651160][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.665075][ T3087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.757127][ T3587] loop2: detected capacity change from 0 to 2048 [ 37.768244][ T3587] EXT4-fs: Ignoring removed bh option [ 37.787955][ T3587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.836644][ T3587] loop2: detected capacity change from 2048 to 0 [ 37.851294][ T463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.866293][ T3087] syz-executor: attempt to access beyond end of device [ 37.866293][ T3087] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 37.885574][ T463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.896542][ T2379] kworker/u8:6: attempt to access beyond end of device [ 37.896542][ T2379] loop2: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 37.903308][ T463] bond0 (unregistering): Released all slaves [ 37.916207][ T2379] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4480: inode #18: block 6: comm kworker/u8:6: unable to read itable block [ 37.930871][ T2379] kworker/u8:6: attempt to access beyond end of device [ 37.930871][ T2379] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 37.944389][ T2379] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 37.954364][ T2379] EXT4-fs (loop2): I/O error while writing superblock [ 37.963743][ T3087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.977186][ T3087] syz-executor: attempt to access beyond end of device [ 37.977186][ T3087] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 37.990717][ T3087] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 38.001992][ T3087] EXT4-fs (loop2): I/O error while writing superblock [ 38.011958][ T3590] kmmpd-loop2: attempt to access beyond end of device [ 38.011958][ T3590] loop2: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 38.025440][ T3590] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 38.074651][ T3566] chnl_net:caif_netlink_parms(): no params data found [ 38.099486][ T463] hsr_slave_0: left promiscuous mode [ 38.105314][ T463] hsr_slave_1: left promiscuous mode [ 38.112729][ T463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.120178][ T463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.129976][ T463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.137511][ T463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.147866][ T463] veth1_macvtap: left promiscuous mode [ 38.153530][ T463] veth0_macvtap: left promiscuous mode [ 38.159091][ T463] veth1_vlan: left promiscuous mode [ 38.164401][ T463] veth0_vlan: left promiscuous mode [ 38.248912][ T463] team0 (unregistering): Port device team_slave_1 removed [ 38.259147][ T463] team0 (unregistering): Port device team_slave_0 removed [ 38.334899][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.342083][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.349256][ T3566] bridge_slave_0: entered allmulticast mode [ 38.355759][ T3566] bridge_slave_0: entered promiscuous mode [ 38.362944][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.370112][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.377320][ T3566] bridge_slave_1: entered allmulticast mode [ 38.383815][ T3566] bridge_slave_1: entered promiscuous mode [ 38.406825][ T3566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.420034][ T3566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.447455][ T3566] team0: Port device team_slave_0 added [ 38.454350][ T3566] team0: Port device team_slave_1 added [ 38.480603][ T3566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.487635][ T3566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.513690][ T3566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.559092][ T3566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.566274][ T3566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.592285][ T3566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.624616][ T3642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'. [ 38.633590][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 38.658927][ T3566] hsr_slave_0: entered promiscuous mode [ 38.668140][ T3566] hsr_slave_1: entered promiscuous mode [ 38.674123][ T3566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.682054][ T3566] Cannot create hsr debugfs directory [ 38.708412][ T3644] loop1: detected capacity change from 0 to 2048 [ 38.744154][ T3644] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz.1.128: bad orphan inode 8192 [ 38.758865][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.792143][ T463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.832001][ T3615] chnl_net:caif_netlink_parms(): no params data found [ 38.861247][ T3659] netlink: 'syz.1.128': attribute type 15 has an invalid length. [ 38.869072][ T3659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 38.883399][ T463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.908924][ T3080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.979940][ T463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.004002][ T3688] FAULT_INJECTION: forcing a failure. [ 39.004002][ T3688] name failslab, interval 1, probability 0, space 0, times 0 [ 39.016707][ T3688] CPU: 1 PID: 3688 Comm: syz.4.133 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 39.026704][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 39.036773][ T3688] Call Trace: [ 39.040052][ T3688] [ 39.043023][ T3688] dump_stack_lvl+0xf2/0x150 [ 39.047625][ T3688] dump_stack+0x15/0x20 [ 39.051839][ T3688] should_fail_ex+0x229/0x230 [ 39.056533][ T3688] ? __anon_vma_prepare+0x73/0x310 [ 39.061678][ T3688] __should_failslab+0x92/0xa0 [ 39.066478][ T3688] should_failslab+0x9/0x20 [ 39.071038][ T3688] kmem_cache_alloc_noprof+0x4c/0x290 [ 39.076416][ T3688] ? pte_alloc_one+0xbd/0xf0 [ 39.081036][ T3688] __anon_vma_prepare+0x73/0x310 [ 39.086005][ T3688] ? handle_mm_fault+0x1b6e/0x2a80 [ 39.091128][ T3688] handle_mm_fault+0x1c03/0x2a80 [ 39.096091][ T3688] exc_page_fault+0x296/0x650 [ 39.100879][ T3688] asm_exc_page_fault+0x26/0x30 [ 39.105728][ T3688] RIP: 0010:__put_user_4+0x11/0x20 [ 39.110867][ T3688] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 39.130630][ T3688] RSP: 0018:ffffc900012d3d78 EFLAGS: 00050206 [ 39.136761][ T3688] RAX: 0000000000034000 RBX: 0000000000000000 RCX: 0000000020000000 [ 39.144754][ T3688] RDX: 00000000000004de RSI: 0000000000000000 RDI: ffff8881010347fc [ 39.152827][ T3688] RBP: 0000000000005411 R08: 00018881010347f7 R09: 0000000000000000 [ 39.160810][ T3688] R10: 0001ffffffffffff R11: ffff88810125d280 R12: 0000000000005411 [ 39.168775][ T3688] R13: ffffffff85557740 R14: ffff888101034680 R15: 0000000020000000 [ 39.176854][ T3688] qrtr_ioctl+0x17d/0x2c0 [ 39.181309][ T3688] sock_do_ioctl+0x81/0x260 [ 39.185820][ T3688] sock_ioctl+0x470/0x640 [ 39.190292][ T3688] ? __pfx_sock_ioctl+0x10/0x10 [ 39.195144][ T3688] __se_sys_ioctl+0xd3/0x150 [ 39.199750][ T3688] __x64_sys_ioctl+0x43/0x50 [ 39.204336][ T3688] x64_sys_call+0x1581/0x2d70 [ 39.209111][ T3688] do_syscall_64+0xc9/0x1c0 [ 39.213633][ T3688] ? clear_bhb_loop+0x55/0xb0 [ 39.218405][ T3688] ? clear_bhb_loop+0x55/0xb0 [ 39.223098][ T3688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.229043][ T3688] RIP: 0033:0x7f0abf27bbd9 [ 39.233508][ T3688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.253115][ T3688] RSP: 002b:00007f0abe4fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.261535][ T3688] RAX: ffffffffffffffda RBX: 00007f0abf409f60 RCX: 00007f0abf27bbd9 [ 39.269506][ T3688] RDX: 0000000020000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 39.277506][ T3688] RBP: 00007f0abe4fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.285472][ T3688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.293462][ T3688] R13: 000000000000000b R14: 00007f0abf409f60 R15: 00007ffecd156418 [ 39.301434][ T3688] [ 39.323580][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.330984][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.345568][ T3615] bridge_slave_0: entered allmulticast mode [ 39.352460][ T3697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.136'. [ 39.359343][ T3615] bridge_slave_0: entered promiscuous mode [ 39.370595][ T463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.397091][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.404276][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.411704][ T3615] bridge_slave_1: entered allmulticast mode [ 39.418248][ T3615] bridge_slave_1: entered promiscuous mode [ 39.438378][ T3615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.457094][ T3615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.492285][ T463] bridge_slave_1: left allmulticast mode [ 39.498066][ T463] bridge_slave_1: left promiscuous mode [ 39.503719][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.511966][ T463] bridge_slave_0: left allmulticast mode [ 39.517995][ T463] bridge_slave_0: left promiscuous mode [ 39.523762][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.600945][ T463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.611134][ T463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.621390][ T463] bond0 (unregistering): Released all slaves [ 39.630153][ T3615] team0: Port device team_slave_0 added [ 39.637029][ T3615] team0: Port device team_slave_1 added [ 39.664704][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.671813][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.697753][ T3615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.709255][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.716250][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.742273][ T3615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.770575][ T3615] hsr_slave_0: entered promiscuous mode [ 39.776669][ T3615] hsr_slave_1: entered promiscuous mode [ 39.782680][ T3615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.790323][ T3615] Cannot create hsr debugfs directory [ 39.821314][ T463] hsr_slave_0: left promiscuous mode [ 39.831391][ T463] hsr_slave_1: left promiscuous mode [ 39.837480][ T463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.845050][ T463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.852880][ T463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.860359][ T463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.870124][ T463] veth1_macvtap: left promiscuous mode [ 39.875727][ T463] veth0_macvtap: left promiscuous mode [ 39.881335][ T463] veth1_vlan: left promiscuous mode [ 39.886654][ T463] veth0_vlan: left promiscuous mode [ 39.977325][ T463] team0 (unregistering): Port device team_slave_1 removed [ 39.989524][ T463] team0 (unregistering): Port device team_slave_0 removed [ 40.058694][ T3566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.068451][ T3566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.084729][ T3566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.094018][ T3566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.165229][ T3566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.184457][ T3566] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.193234][ T3723] loop1: detected capacity change from 0 to 136 [ 40.210213][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.217366][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.256406][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.263613][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.362581][ T3566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.373100][ T3566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.503377][ T3566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.512289][ T3764] loop1: detected capacity change from 0 to 1024 [ 40.526090][ T3764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.558092][ T3615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.568161][ T3764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.570478][ T3615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.589391][ T3764] netlink: 'syz.1.151': attribute type 4 has an invalid length. [ 40.610048][ T3615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.628410][ T3764] netlink: 'syz.1.151': attribute type 17 has an invalid length. [ 40.654524][ T3615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.673560][ T3566] veth0_vlan: entered promiscuous mode [ 40.703878][ T3566] veth1_vlan: entered promiscuous mode [ 40.740081][ T3566] veth0_macvtap: entered promiscuous mode [ 40.754887][ T3566] veth1_macvtap: entered promiscuous mode [ 40.780724][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.791407][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.801264][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.811720][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.821613][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.832080][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.843166][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.850841][ T3790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.153'. [ 40.880980][ T3615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.902118][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.912664][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.921424][ T3801] loop4: detected capacity change from 0 to 128 [ 40.922568][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.939270][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.949413][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.959883][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.971768][ T3776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.973650][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.985407][ T3801] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.990809][ T3566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.008857][ T3566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.017638][ T3566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.026517][ T3566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.037901][ T3801] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.083438][ T463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.112908][ T3615] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.133443][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.140648][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.162263][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.169396][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.177866][ T3082] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.196531][ T463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.223321][ T3615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.233763][ T3615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.279256][ T463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.355486][ T3845] dccp_invalid_packet: P.Data Offset(100) too large [ 41.366226][ T463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.410761][ T3615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.526081][ T463] bridge_slave_1: left allmulticast mode [ 41.531851][ T463] bridge_slave_1: left promiscuous mode [ 41.537673][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.549436][ T3853] loop0: detected capacity change from 0 to 512 [ 41.556836][ T463] bridge_slave_0: left allmulticast mode [ 41.562508][ T463] bridge_slave_0: left promiscuous mode [ 41.568333][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.576442][ T3853] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.600006][ T3853] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz.0.162: iget: bad i_size value: -6917529027641081756 [ 41.627234][ T3853] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.162: couldn't read orphan inode 17 (err -117) [ 41.655557][ T3853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.671988][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 41.672004][ T29] audit: type=1400 audit(1720484173.176:424): avc: denied { setattr } for pid=3852 comm="syz.0.162" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.676111][ T3853] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.162: bg 0: block 65: padding at end of block bitmap is not set [ 41.719886][ T3853] Quota error (device loop0): write_blk: dquota write failed [ 41.725792][ T463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.727559][ T3853] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 41.746357][ T3853] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.162: Failed to acquire dquot type 0 [ 41.759521][ T463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.771577][ T463] bond0 (unregistering): Released all slaves [ 41.784951][ T3853] syz.0.162 (3853) used greatest stack depth: 9736 bytes left [ 41.794289][ T3566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.812012][ T3872] loop4: detected capacity change from 0 to 512 [ 41.836501][ T3872] ext4: Unknown parameter 'func' [ 41.867197][ T3812] chnl_net:caif_netlink_parms(): no params data found [ 41.898847][ T3872] loop4: detected capacity change from 0 to 256 [ 41.914392][ T463] hsr_slave_0: left promiscuous mode [ 41.955930][ T463] hsr_slave_1: left promiscuous mode [ 41.962020][ T463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.969501][ T463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.995133][ T463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.002626][ T463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.024753][ T463] veth1_macvtap: left promiscuous mode [ 42.030317][ T463] veth0_macvtap: left promiscuous mode [ 42.035876][ T463] veth1_vlan: left promiscuous mode [ 42.041111][ T463] veth0_vlan: left promiscuous mode [ 42.139582][ T3925] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.152379][ T463] team0 (unregistering): Port device team_slave_1 removed [ 42.162547][ T463] team0 (unregistering): Port device team_slave_0 removed [ 42.208093][ T3912] netlink: 9 bytes leftover after parsing attributes in process `syz.0.168'. [ 42.217784][ T3928] loop4: detected capacity change from 0 to 256 [ 42.232048][ T3912] gretap0: entered promiscuous mode [ 42.233718][ T3928] FAT-fs (loop4): codepage cp1250 not found [ 42.247249][ T3921] netlink: 5 bytes leftover after parsing attributes in process `syz.0.168'. [ 42.262513][ T3921] 0ªX¹¦D: renamed from gretap0 [ 42.274903][ T3921] 0ªX¹¦D: left promiscuous mode [ 42.279908][ T3921] 0ªX¹¦D: entered allmulticast mode [ 42.286614][ T3921] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 42.311969][ T3615] veth0_vlan: entered promiscuous mode [ 42.338693][ T29] audit: type=1400 audit(1720484173.836:425): avc: denied { write } for pid=3932 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.342182][ T3615] veth1_vlan: entered promiscuous mode [ 42.365244][ T3934] netlink: 'syz.0.170': attribute type 4 has an invalid length. [ 42.365442][ T29] audit: type=1400 audit(1720484173.836:426): avc: denied { listen } for pid=3932 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 42.373049][ T3934] netlink: 17 bytes leftover after parsing attributes in process `syz.0.170'. [ 42.404656][ T29] audit: type=1400 audit(1720484173.906:427): avc: denied { create } for pid=3923 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 42.427798][ T29] audit: type=1400 audit(1720484173.926:428): avc: denied { ioctl } for pid=3932 comm="syz.0.170" path="socket:[6135]" dev="sockfs" ino=6135 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.465777][ T3812] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.472920][ T3812] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.484251][ T3940] loop0: detected capacity change from 0 to 512 [ 42.484903][ T3939] loop4: detected capacity change from 0 to 512 [ 42.491213][ T3812] bridge_slave_0: entered allmulticast mode [ 42.503084][ T3940] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.516303][ T3940] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.529750][ T3812] bridge_slave_0: entered promiscuous mode [ 42.529890][ T3939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.550953][ T3812] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.558110][ T3812] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.565576][ T3940] EXT4-fs (loop0): 1 truncate cleaned up [ 42.571571][ T3940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.581113][ T3939] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 42.585150][ T29] audit: type=1400 audit(1720484174.076:429): avc: denied { accept } for pid=3932 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 42.593075][ T3812] bridge_slave_1: entered allmulticast mode [ 42.613688][ T3939] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.617879][ T3812] bridge_slave_1: entered promiscuous mode [ 42.631322][ T3939] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 42.648714][ T3939] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 42.659973][ T3939] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.172: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 42.660037][ T3615] veth0_macvtap: entered promiscuous mode [ 42.661602][ T3615] veth1_macvtap: entered promiscuous mode [ 42.698834][ T3939] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.172: couldn't read orphan inode 13 (err -117) [ 42.700090][ T3812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.723714][ T3939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.738667][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.749205][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.759131][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.769598][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.779456][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.790006][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.804418][ T3615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.814376][ T3812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.827422][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.837940][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.847788][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.858245][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.868099][ T3615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.878560][ T3615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.889482][ T3615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.911334][ T3615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.920226][ T3615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.929089][ T3615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.937908][ T3615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.949374][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.993880][ T3812] team0: Port device team_slave_0 added [ 43.002515][ T3812] team0: Port device team_slave_1 added [ 43.035300][ T29] audit: type=1400 audit(1720484174.526:430): avc: denied { mount } for pid=3615 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.063510][ T3812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.070568][ T3812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.096576][ T3812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.151916][ T3812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.159464][ T3812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.185707][ T3812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.227234][ T3566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.228668][ T3994] loop2: detected capacity change from 0 to 512 [ 43.282038][ T3994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.299275][ T4001] loop4: detected capacity change from 0 to 128 [ 43.313196][ T3994] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.328485][ T3812] hsr_slave_0: entered promiscuous mode [ 43.334721][ T3812] hsr_slave_1: entered promiscuous mode [ 43.348072][ T4001] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.355998][ T3580] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.357091][ T4001] vhci_hcd: invalid port number 219 [ 43.367505][ T3615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.370972][ T4001] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 43.407538][ T4001] FAULT_INJECTION: forcing a failure. [ 43.407538][ T4001] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 43.410449][ T3941] chnl_net:caif_netlink_parms(): no params data found [ 43.420886][ T4001] CPU: 0 PID: 4001 Comm: syz.4.177 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 43.437644][ T4001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 43.447851][ T4001] Call Trace: [ 43.451168][ T4001] [ 43.454133][ T4001] dump_stack_lvl+0xf2/0x150 [ 43.458741][ T4001] dump_stack+0x15/0x20 [ 43.462931][ T4001] should_fail_ex+0x229/0x230 [ 43.467664][ T4001] __should_fail_alloc_page+0xfd/0x110 [ 43.473126][ T4001] __alloc_pages_noprof+0x109/0x360 [ 43.478336][ T4001] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 43.483730][ T4001] vma_alloc_folio_noprof+0x176/0x2d0 [ 43.489196][ T4001] handle_mm_fault+0xd2c/0x2a80 [ 43.494068][ T4001] exc_page_fault+0x296/0x650 [ 43.498755][ T4001] asm_exc_page_fault+0x26/0x30 [ 43.503657][ T4001] RIP: 0010:__put_user_4+0x11/0x20 [ 43.508847][ T4001] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 43.528459][ T4001] RSP: 0018:ffffc900012c3c88 EFLAGS: 00050206 [ 43.534593][ T4001] RAX: 00000000ffffffe0 RBX: 0000000000000000 RCX: 0000000020000084 [ 43.542668][ T4001] RDX: 0000000000000922 RSI: 0000000000000000 RDI: ffff888102ed6f5c [ 43.550757][ T4001] RBP: 0000000000000000 R08: 0001888102ed6f5f R09: 0000000000000000 [ 43.558736][ T4001] R10: 0001ffffffffffff R11: 0001c900012c3c00 R12: 0000000000000000 [ 43.566709][ T4001] R13: 0000000020000080 R14: ffff888104786f00 R15: ffff888102ed6f00 [ 43.574772][ T4001] processcompl+0x20a/0x430 [ 43.579293][ T4001] usbdev_ioctl+0x23b/0x3e10 [ 43.584004][ T4001] ? ioctl_has_perm+0x28b/0x2e0 [ 43.588863][ T4001] ? do_vfs_ioctl+0x99e/0x1560 [ 43.593638][ T4001] ? selinux_file_ioctl+0x2f7/0x380 [ 43.598922][ T4001] ? __fget_files+0x1da/0x210 [ 43.603664][ T4001] ? __pfx_usbdev_ioctl+0x10/0x10 [ 43.608759][ T4001] __se_sys_ioctl+0xd3/0x150 [ 43.613361][ T4001] __x64_sys_ioctl+0x43/0x50 [ 43.618022][ T4001] x64_sys_call+0x1581/0x2d70 [ 43.622740][ T4001] do_syscall_64+0xc9/0x1c0 [ 43.627253][ T4001] ? clear_bhb_loop+0x55/0xb0 [ 43.631942][ T4001] ? clear_bhb_loop+0x55/0xb0 [ 43.636639][ T4001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.642634][ T4001] RIP: 0033:0x7f0abf27bbd9 [ 43.647073][ T4001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.666704][ T4001] RSP: 002b:00007f0abe4fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.675194][ T4001] RAX: ffffffffffffffda RBX: 00007f0abf409f60 RCX: 00007f0abf27bbd9 [ 43.683168][ T4001] RDX: 0000000000000000 RSI: 000000004008550c RDI: 0000000000000004 [ 43.691194][ T4001] RBP: 00007f0abe4fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.699201][ T4001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.707176][ T4001] R13: 000000000000000b R14: 00007f0abf409f60 R15: 00007ffecd156418 [ 43.715192][ T4001] [ 43.843683][ T4026] loop4: detected capacity change from 0 to 1024 [ 43.893880][ T4026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.909515][ T4036] loop0: detected capacity change from 0 to 128 [ 43.919888][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.948581][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.955881][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.965964][ T3941] bridge_slave_0: entered allmulticast mode [ 43.978273][ T3941] bridge_slave_0: entered promiscuous mode [ 43.985069][ T4032] netlink: 'syz.2.185': attribute type 4 has an invalid length. [ 43.992773][ T4032] netlink: 17 bytes leftover after parsing attributes in process `syz.2.185'. [ 44.047655][ T4032] loop2: detected capacity change from 0 to 512 [ 44.061204][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.068544][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.080948][ T4032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.093759][ T3941] bridge_slave_1: entered allmulticast mode [ 44.105102][ T4032] EXT4-fs (loop2): 1 truncate cleaned up [ 44.111495][ T3941] bridge_slave_1: entered promiscuous mode [ 44.118043][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.126048][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.152693][ T3941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.205967][ T3941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.227335][ T29] audit: type=1400 audit(1720484175.726:431): avc: denied { read } for pid=4063 comm="syz.4.188" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.275256][ T3941] team0: Port device team_slave_0 added [ 44.282136][ T3941] team0: Port device team_slave_1 added [ 44.299878][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.306872][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.332912][ T3941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.352798][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.359911][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.385942][ T3941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.418404][ T3941] hsr_slave_0: entered promiscuous mode [ 44.424832][ T3941] hsr_slave_1: entered promiscuous mode [ 44.430911][ T3941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.439357][ T3941] Cannot create hsr debugfs directory [ 44.548479][ T3941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.599200][ T3941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.648701][ T3941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.729279][ T3941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.773990][ T3615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.868500][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 44.957643][ T3812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.985190][ T3812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.018569][ T3941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.027171][ T4152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.192'. [ 45.041070][ T3941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.051604][ T3812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.073502][ T3941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.095463][ T3812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.105356][ T4150] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 45.111746][ T4150] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 45.115085][ T3941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.133580][ T4150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 45.167848][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 45.189873][ T4172] loop2: detected capacity change from 0 to 256 [ 45.262883][ T3812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.285506][ T3812] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.301050][ T3144] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.303524][ T4176] loop2: detected capacity change from 0 to 2048 [ 45.308178][ T3144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.341831][ T3144] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.349007][ T3144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.360226][ T4176] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.198: bad orphan inode 8192 [ 45.383538][ T4176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.420588][ T3941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.446686][ T3941] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.458659][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.465818][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.479745][ T4195] netlink: 'syz.2.198': attribute type 15 has an invalid length. [ 45.487589][ T4195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 45.516083][ T3941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.526545][ T3941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.541913][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.549065][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.575107][ T3812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.600807][ T3615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.695325][ T3941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.727917][ T4229] loop2: detected capacity change from 0 to 1024 [ 45.733682][ T4227] vlan2: entered allmulticast mode [ 45.737944][ T4229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.739554][ T4227] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 45.762635][ T3615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.771858][ T4227] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 45.809080][ T3812] veth0_vlan: entered promiscuous mode [ 45.818878][ T3812] veth1_vlan: entered promiscuous mode [ 45.848046][ T3941] veth0_vlan: entered promiscuous mode [ 45.859604][ T3941] veth1_vlan: entered promiscuous mode [ 45.869138][ T3812] veth0_macvtap: entered promiscuous mode [ 45.881047][ T3812] veth1_macvtap: entered promiscuous mode [ 45.901320][ T3941] veth0_macvtap: entered promiscuous mode [ 45.908575][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.919236][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.929104][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.939600][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.949531][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.960103][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.970025][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.980472][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.991540][ T3812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.002767][ T3941] veth1_macvtap: entered promiscuous mode [ 46.010970][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.021563][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.031405][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.042093][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.052075][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.062619][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.072460][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.082987][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.095099][ T3812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.106997][ T3812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.115913][ T3812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.124703][ T3812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.133561][ T3812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.162501][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.173179][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.183149][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.193621][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.203542][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.214012][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.223925][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.234388][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.244293][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.254741][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.267916][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.281013][ T4253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.213'. [ 46.293534][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.304209][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.314048][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.324523][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.334358][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.344885][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.354768][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.366205][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.376308][ T3941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.386875][ T3941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.399535][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.411409][ T3941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.420282][ T3941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.428986][ T3941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.437773][ T3941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.495409][ T4260] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5 sclass=netlink_xfrm_socket pid=4260 comm=syz.1.156 [ 46.741456][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 46.741473][ T29] audit: type=1400 audit(1720484179.236:515): avc: denied { mount } for pid=4286 comm="syz.4.222" name="/" dev="ramfs" ino=7821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 46.746797][ T4290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 46.779422][ T4291] loop1: detected capacity change from 0 to 512 [ 46.786146][ T4291] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.797596][ T4291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 46.807874][ T4291] System zones: 1-12 [ 46.814179][ T4291] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.223: casefold flag without casefold feature [ 46.847747][ T4291] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.223: couldn't read orphan inode 15 (err -117) [ 46.883736][ T29] audit: type=1400 audit(1720484179.376:516): avc: denied { unmount } for pid=3082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 46.915029][ T4291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.930207][ T4295] netlink: 'syz.4.224': attribute type 4 has an invalid length. [ 46.938202][ T4295] netlink: 17 bytes leftover after parsing attributes in process `syz.4.224'. [ 46.957613][ T4295] loop4: detected capacity change from 0 to 512 [ 46.975669][ T29] audit: type=1400 audit(1720484179.456:517): avc: denied { create } for pid=4289 comm="syz.1.223" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.977135][ T3812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.006715][ T4295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.018627][ T4295] EXT4-fs (loop4): 1 truncate cleaned up [ 47.024949][ T4295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.098440][ T4299] FAULT_INJECTION: forcing a failure. [ 47.098440][ T4299] name failslab, interval 1, probability 0, space 0, times 0 [ 47.111372][ T4299] CPU: 0 PID: 4299 Comm: syz.1.225 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 47.121450][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 47.131511][ T4299] Call Trace: [ 47.134859][ T4299] [ 47.137825][ T4299] dump_stack_lvl+0xf2/0x150 [ 47.142450][ T4299] dump_stack+0x15/0x20 [ 47.146716][ T4299] should_fail_ex+0x229/0x230 [ 47.151441][ T4299] ? device_add+0x89/0x790 [ 47.155962][ T4299] __should_failslab+0x92/0xa0 [ 47.160801][ T4299] should_failslab+0x9/0x20 [ 47.165445][ T4299] kmalloc_trace_noprof+0x4b/0x2a0 [ 47.170607][ T4299] ? netdev_register_kobject+0x63/0x230 [ 47.176213][ T4299] device_add+0x89/0x790 [ 47.180499][ T4299] netdev_register_kobject+0x100/0x230 [ 47.186105][ T4299] register_netdevice+0x8b9/0xdd0 [ 47.191196][ T4299] veth_newlink+0x3da/0x820 [ 47.195743][ T4299] ? __pfx_veth_newlink+0x10/0x10 [ 47.200918][ T4299] rtnl_newlink+0xefd/0x1690 [ 47.205591][ T4299] ? security_capable+0x64/0x80 [ 47.210537][ T4299] ? ns_capable+0x7d/0xb0 [ 47.214900][ T4299] ? __pfx_rtnl_newlink+0x10/0x10 [ 47.220045][ T4299] rtnetlink_rcv_msg+0x85e/0x910 [ 47.225038][ T4299] ? memcg_list_lru_alloc+0xd2/0x740 [ 47.230387][ T4299] ? mod_objcg_state+0x3a5/0x4e0 [ 47.235428][ T4299] ? xas_load+0x3ae/0x3d0 [ 47.239783][ T4299] ? skb_release_data+0x583/0x5a0 [ 47.244851][ T4299] ? kmem_cache_free+0xd8/0x280 [ 47.249791][ T4299] ? nlmon_xmit+0x51/0x60 [ 47.254173][ T4299] ? __kfree_skb+0x102/0x150 [ 47.258782][ T4299] ? consume_skb+0x57/0x180 [ 47.263403][ T4299] ? nlmon_xmit+0x51/0x60 [ 47.267764][ T4299] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 47.273079][ T4299] ? __dev_queue_xmit+0xb21/0x1e50 [ 47.278207][ T4299] ? ref_tracker_free+0x3a5/0x410 [ 47.283267][ T4299] netlink_rcv_skb+0x12c/0x230 [ 47.288149][ T4299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.293637][ T4299] rtnetlink_rcv+0x1c/0x30 [ 47.298077][ T4299] netlink_unicast+0x58d/0x660 [ 47.302926][ T4299] netlink_sendmsg+0x5ca/0x6e0 [ 47.307779][ T4299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.313142][ T4299] __sock_sendmsg+0x140/0x180 [ 47.317848][ T4299] ____sys_sendmsg+0x312/0x410 [ 47.322716][ T4299] __sys_sendmsg+0x1e9/0x280 [ 47.327381][ T4299] __x64_sys_sendmsg+0x46/0x50 [ 47.332163][ T4299] x64_sys_call+0xb25/0x2d70 [ 47.336857][ T4299] do_syscall_64+0xc9/0x1c0 [ 47.341393][ T4299] ? clear_bhb_loop+0x55/0xb0 [ 47.346086][ T4299] ? clear_bhb_loop+0x55/0xb0 [ 47.350858][ T4299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.356871][ T4299] RIP: 0033:0x7f4cdc29bbd9 [ 47.361308][ T4299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.380967][ T4299] RSP: 002b:00007f4cdb51d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.389383][ T4299] RAX: ffffffffffffffda RBX: 00007f4cdc429f60 RCX: 00007f4cdc29bbd9 [ 47.397387][ T4299] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 47.405383][ T4299] RBP: 00007f4cdb51d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 47.413425][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.421402][ T4299] R13: 000000000000000b R14: 00007f4cdc429f60 R15: 00007ffd33bc3858 [ 47.429436][ T4299] [ 47.482182][ T4304] loop1: detected capacity change from 0 to 128 [ 47.506007][ T4304] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 47.764750][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.999969][ T4330] syzkaller0: entered promiscuous mode [ 48.005637][ T4330] syzkaller0: entered allmulticast mode [ 48.016844][ T29] audit: type=1400 audit(1720484180.516:518): avc: denied { setattr } for pid=4329 comm="syz.2.234" path="/dev/net/tun" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 48.060518][ T29] audit: type=1400 audit(1720484180.556:519): avc: denied { name_bind } for pid=4329 comm="syz.2.234" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 48.201298][ T4348] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 48.209112][ T4348] netlink: 17 bytes leftover after parsing attributes in process `syz.2.239'. [ 48.226227][ T4348] loop2: detected capacity change from 0 to 512 [ 48.233183][ T4348] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.244539][ T4348] EXT4-fs (loop2): 1 truncate cleaned up [ 48.251039][ T4348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.269289][ T29] audit: type=1326 audit(1720484180.766:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.3.240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f608576dbd9 code=0x0 [ 48.370469][ T29] audit: type=1326 audit(1720484180.866:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4349 comm="syz.3.240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f608576dbd9 code=0x0 [ 48.523189][ T29] audit: type=1400 audit(1720484181.016:522): avc: denied { read } for pid=4353 comm="syz.1.241" name="event2" dev="devtmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.546425][ T29] audit: type=1400 audit(1720484181.016:523): avc: denied { open } for pid=4353 comm="syz.1.241" path="/dev/input/event2" dev="devtmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.691764][ T29] audit: type=1400 audit(1720484181.186:524): avc: denied { read } for pid=4363 comm="syz.1.243" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.797898][ T4382] loop1: detected capacity change from 0 to 1024 [ 48.804837][ T4382] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 48.814568][ T4382] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.825262][ T4382] jbd2_journal_init_inode: Cannot locate journal superblock [ 48.832622][ T4382] EXT4-fs (loop1): Could not load journal inode [ 49.062526][ T3615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.306417][ T4419] loop4: detected capacity change from 0 to 256 [ 49.313389][ T4419] FAT-fs (loop4): Unrecognized mount option "u€f8=1" or missing value [ 49.721156][ T4425] FAULT_INJECTION: forcing a failure. [ 49.721156][ T4425] name failslab, interval 1, probability 0, space 0, times 0 [ 49.733997][ T4425] CPU: 1 PID: 4425 Comm: syz.1.261 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 49.743994][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 49.754053][ T4425] Call Trace: [ 49.757341][ T4425] [ 49.760339][ T4425] dump_stack_lvl+0xf2/0x150 [ 49.764953][ T4425] dump_stack+0x15/0x20 [ 49.769252][ T4425] should_fail_ex+0x229/0x230 [ 49.774073][ T4425] ? skb_clone+0x154/0x1f0 [ 49.778501][ T4425] __should_failslab+0x92/0xa0 [ 49.783307][ T4425] should_failslab+0x9/0x20 [ 49.787821][ T4425] kmem_cache_alloc_noprof+0x4c/0x290 [ 49.793282][ T4425] skb_clone+0x154/0x1f0 [ 49.797616][ T4425] __netlink_deliver_tap+0x2bd/0x4c0 [ 49.802934][ T4425] netlink_unicast+0x63b/0x660 [ 49.807721][ T4425] netlink_sendmsg+0x5ca/0x6e0 [ 49.812509][ T4425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.817852][ T4425] __sock_sendmsg+0x140/0x180 [ 49.822605][ T4425] ____sys_sendmsg+0x312/0x410 [ 49.827442][ T4425] __sys_sendmsg+0x1e9/0x280 [ 49.832067][ T4425] __x64_sys_sendmsg+0x46/0x50 [ 49.836992][ T4425] x64_sys_call+0xb25/0x2d70 [ 49.841587][ T4425] do_syscall_64+0xc9/0x1c0 [ 49.846101][ T4425] ? clear_bhb_loop+0x55/0xb0 [ 49.850800][ T4425] ? clear_bhb_loop+0x55/0xb0 [ 49.855538][ T4425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.861455][ T4425] RIP: 0033:0x7f4cdc29bbd9 [ 49.865933][ T4425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.885653][ T4425] RSP: 002b:00007f4cdb51d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.894119][ T4425] RAX: ffffffffffffffda RBX: 00007f4cdc429f60 RCX: 00007f4cdc29bbd9 [ 49.902165][ T4425] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 49.910182][ T4425] RBP: 00007f4cdb51d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.918152][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.926121][ T4425] R13: 000000000000000b R14: 00007f4cdc429f60 R15: 00007ffd33bc3858 [ 49.934102][ T4425] [ 50.059614][ T4434] loop1: detected capacity change from 0 to 512 [ 50.067053][ T4434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.080303][ T4434] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.087495][ T4434] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.265: bg 0: block 248: padding at end of block bitmap is not set [ 50.101921][ T4434] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.265: Failed to acquire dquot type 1 [ 50.115166][ T4434] EXT4-fs (loop1): 1 truncate cleaned up [ 50.121579][ T4434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.138476][ T4434] syz.1.265 (4434) used greatest stack depth: 9392 bytes left [ 50.241111][ T4444] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 50.283132][ T4447] FAULT_INJECTION: forcing a failure. [ 50.283132][ T4447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.296320][ T4447] CPU: 0 PID: 4447 Comm: syz.2.269 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 50.306344][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 50.316405][ T4447] Call Trace: [ 50.319728][ T4447] [ 50.322661][ T4447] dump_stack_lvl+0xf2/0x150 [ 50.327341][ T4447] dump_stack+0x15/0x20 [ 50.331513][ T4447] should_fail_ex+0x229/0x230 [ 50.336379][ T4447] should_fail+0xb/0x10 [ 50.340557][ T4447] should_fail_usercopy+0x1a/0x20 [ 50.345667][ T4447] _copy_from_user+0x1e/0xd0 [ 50.350338][ T4447] __io_register_rsrc_update+0x2aa/0xc80 [ 50.355993][ T4447] ? should_fail_ex+0xd7/0x230 [ 50.360797][ T4447] io_register_rsrc_update+0x108/0x120 [ 50.366312][ T4447] __se_sys_io_uring_register+0xa35/0x1190 [ 50.372135][ T4447] __x64_sys_io_uring_register+0x55/0x70 [ 50.377782][ T4447] x64_sys_call+0x2c2/0x2d70 [ 50.382471][ T4447] do_syscall_64+0xc9/0x1c0 [ 50.387033][ T4447] ? clear_bhb_loop+0x55/0xb0 [ 50.391720][ T4447] ? clear_bhb_loop+0x55/0xb0 [ 50.396449][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.402399][ T4447] RIP: 0033:0x7f073bff6bd9 [ 50.406852][ T4447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.426540][ T4447] RSP: 002b:00007f073b278048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 50.434957][ T4447] RAX: ffffffffffffffda RBX: 00007f073c184f60 RCX: 00007f073bff6bd9 [ 50.442994][ T4447] RDX: 0000000020000600 RSI: 0000000000000010 RDI: 0000000000000004 [ 50.451039][ T4447] RBP: 00007f073b2780a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.459061][ T4447] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 50.467039][ T4447] R13: 000000000000000b R14: 00007f073c184f60 R15: 00007ffd9c288178 [ 50.475025][ T4447] [ 50.578385][ T4451] x_tables: duplicate entry at hook 1 [ 50.584587][ T4451] __nla_validate_parse: 2 callbacks suppressed [ 50.584669][ T4451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 50.590280][ T4452] loop3: detected capacity change from 0 to 128 [ 50.896136][ T3812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.125090][ T4473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.215231][ T4440] syz.4.267 (4440) used greatest stack depth: 8368 bytes left [ 51.226592][ T4479] loop1: detected capacity change from 0 to 1024 [ 51.234331][ T4479] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.245415][ T4479] EXT4-fs (loop1): group descriptors corrupted! [ 51.601602][ T4528] netlink: 'syz.2.298': attribute type 4 has an invalid length. [ 51.609393][ T4528] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.298'. [ 51.621392][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 52.509426][ T4558] FAULT_INJECTION: forcing a failure. [ 52.509426][ T4558] name failslab, interval 1, probability 0, space 0, times 0 [ 52.522186][ T4558] CPU: 0 PID: 4558 Comm: syz.2.307 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 52.532196][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 52.542322][ T4558] Call Trace: [ 52.545618][ T4558] [ 52.548562][ T4558] dump_stack_lvl+0xf2/0x150 [ 52.553187][ T4558] dump_stack+0x15/0x20 [ 52.557441][ T4558] should_fail_ex+0x229/0x230 [ 52.562157][ T4558] ? dst_alloc+0xc0/0x100 [ 52.566567][ T4558] __should_failslab+0x92/0xa0 [ 52.571469][ T4558] should_failslab+0x9/0x20 [ 52.576069][ T4558] kmem_cache_alloc_noprof+0x4c/0x290 [ 52.576103][ T4558] dst_alloc+0xc0/0x100 [ 52.576148][ T4558] rt_dst_clone+0x3b/0x2f0 [ 52.576170][ T4558] NF_HOOK+0x68/0x1f0 [ 52.576228][ T4558] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 52.576255][ T4558] ip_mc_output+0x207/0x350 [ 52.576278][ T4558] ? __pfx_dst_output+0x10/0x10 [ 52.576297][ T4558] ? __pfx_ip_mc_output+0x10/0x10 [ 52.576321][ T4558] ip_push_pending_frames+0x16d/0x180 [ 52.576350][ T4558] raw_sendmsg+0xd3f/0xe50 [ 52.576395][ T4558] ? __pfx_raw_sendmsg+0x10/0x10 [ 52.576422][ T4558] inet_sendmsg+0xc5/0xd0 [ 52.576449][ T4558] __sock_sendmsg+0x102/0x180 [ 52.576555][ T4558] __sys_sendto+0x1e5/0x260 [ 52.576582][ T4558] __x64_sys_sendto+0x78/0x90 [ 52.576603][ T4558] x64_sys_call+0x16d7/0x2d70 [ 52.576632][ T4558] do_syscall_64+0xc9/0x1c0 [ 52.576745][ T4558] ? clear_bhb_loop+0x55/0xb0 [ 52.576853][ T4558] ? clear_bhb_loop+0x55/0xb0 [ 52.576883][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.576954][ T4558] RIP: 0033:0x7f073bff6bd9 [ 52.576972][ T4558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.576996][ T4558] RSP: 002b:00007f073b278048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 52.577090][ T4558] RAX: ffffffffffffffda RBX: 00007f073c184f60 RCX: 00007f073bff6bd9 [ 52.577103][ T4558] RDX: 0000000000000024 RSI: 0000000020000640 RDI: 0000000000000003 [ 52.577116][ T4558] RBP: 00007f073b2780a0 R08: 0000000020002400 R09: 0000000000000010 [ 52.577131][ T4558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.577144][ T4558] R13: 000000000000000b R14: 00007f073c184f60 R15: 00007ffd9c288178 [ 52.577169][ T4558] [ 52.677834][ T4568] loop3: detected capacity change from 0 to 2048 [ 52.737808][ T4568] Alternate GPT is invalid, using primary GPT. [ 52.788311][ T4568] loop3: p2 p3 p7 [ 52.800169][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 52.800186][ T29] audit: type=1400 audit(1720484185.296:628): avc: denied { getopt } for pid=4567 comm="syz.3.305" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.871819][ T29] audit: type=1400 audit(1720484185.366:629): avc: denied { create } for pid=4578 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 52.872302][ T4579] program syz.2.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.918896][ T29] audit: type=1400 audit(1720484185.416:630): avc: denied { watch watch_reads } for pid=4582 comm="syz.2.315" path="/45/file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.962854][ T4587] FAULT_INJECTION: forcing a failure. [ 52.962854][ T4587] name failslab, interval 1, probability 0, space 0, times 0 [ 52.975573][ T4587] CPU: 0 PID: 4587 Comm: syz.2.317 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 52.985606][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 52.995692][ T4587] Call Trace: [ 52.998988][ T4587] [ 53.001913][ T4587] dump_stack_lvl+0xf2/0x150 [ 53.006518][ T4587] dump_stack+0x15/0x20 [ 53.010681][ T4587] should_fail_ex+0x229/0x230 [ 53.015382][ T4587] ? getname_flags+0x86/0x360 [ 53.020072][ T4587] __should_failslab+0x92/0xa0 [ 53.024883][ T4587] should_failslab+0x9/0x20 [ 53.029408][ T4587] kmem_cache_alloc_noprof+0x4c/0x290 [ 53.034828][ T4587] getname_flags+0x86/0x360 [ 53.039371][ T4587] getname+0x19/0x20 [ 53.043309][ T4587] do_sys_openat2+0x67/0x120 [ 53.048043][ T4587] __x64_sys_creat+0x66/0x90 [ 53.052707][ T4587] x64_sys_call+0x2365/0x2d70 [ 53.057391][ T4587] do_syscall_64+0xc9/0x1c0 [ 53.061896][ T4587] ? clear_bhb_loop+0x55/0xb0 [ 53.066633][ T4587] ? clear_bhb_loop+0x55/0xb0 [ 53.071317][ T4587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.077286][ T4587] RIP: 0033:0x7f073bff6bd9 [ 53.081697][ T4587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.101329][ T4587] RSP: 002b:00007f073b278048 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 53.109752][ T4587] RAX: ffffffffffffffda RBX: 00007f073c184f60 RCX: 00007f073bff6bd9 [ 53.117788][ T4587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 53.125756][ T4587] RBP: 00007f073b2780a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.133736][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.141783][ T4587] R13: 000000000000000b R14: 00007f073c184f60 R15: 00007ffd9c288178 [ 53.149776][ T4587] [ 53.190576][ T29] audit: type=1400 audit(1720484185.676:631): avc: denied { map } for pid=4593 comm="syz.2.320" path="socket:[9357]" dev="sockfs" ino=9357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 53.467694][ T4614] loop4: detected capacity change from 0 to 1024 [ 53.487065][ T4614] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 53.510194][ T4614] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.548686][ T4614] EXT4-fs (loop4): invalid journal inode [ 53.564741][ T4614] EXT4-fs (loop4): can't get journal size [ 53.577665][ T4614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.593730][ T29] audit: type=1400 audit(1720484186.096:632): avc: denied { read } for pid=4613 comm="syz.4.325" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.623104][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.704356][ T29] audit: type=1400 audit(1720484186.196:633): avc: denied { create } for pid=4649 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.723320][ T4644] loop4: detected capacity change from 0 to 2048 [ 53.733472][ T29] audit: type=1400 audit(1720484186.216:634): avc: denied { setopt } for pid=4649 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.752941][ T29] audit: type=1400 audit(1720484186.216:635): avc: denied { write } for pid=4649 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.774911][ T4644] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.334: bad orphan inode 8192 [ 53.787475][ T4644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.788601][ T4652] loop1: detected capacity change from 0 to 1024 [ 53.806353][ T29] audit: type=1400 audit(1720484186.306:636): avc: denied { create } for pid=4643 comm="syz.4.334" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.826538][ T29] audit: type=1400 audit(1720484186.306:637): avc: denied { read write open } for pid=4643 comm="syz.4.334" path="/83/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.850502][ T4652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.854582][ T4644] netlink: 'syz.4.334': attribute type 15 has an invalid length. [ 53.861634][ T4652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.866986][ T4644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'. [ 53.891538][ T4657] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.901845][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.902597][ T4657] vhci_hcd: invalid port number 23 [ 53.946153][ T4652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.955690][ T3166] ================================================================== [ 53.963798][ T3166] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 53.971995][ T3166] [ 53.974326][ T3166] read-write to 0xffff888100630bb8 of 8 bytes by task 4652 on cpu 1: [ 53.982503][ T3166] __filemap_remove_folio+0x1c5/0x2c0 [ 53.987928][ T3166] __remove_mapping+0x341/0x470 [ 53.992806][ T3166] remove_mapping+0x22/0x90 [ 53.997337][ T3166] mapping_try_invalidate+0x288/0x3e0 [ 54.002735][ T3166] invalidate_mapping_pages+0x27/0x40 [ 54.008114][ T3166] invalidate_bdev+0x58/0x70 [ 54.012745][ T3166] ext4_put_super+0x51b/0x7e0 [ 54.017429][ T3166] generic_shutdown_super+0xde/0x210 [ 54.022712][ T3166] kill_block_super+0x2a/0x70 [ 54.027389][ T3166] ext4_kill_sb+0x44/0x80 [ 54.031726][ T3166] deactivate_locked_super+0x7d/0x1c0 [ 54.037096][ T3166] deactivate_super+0x9f/0xb0 [ 54.041769][ T3166] cleanup_mnt+0x268/0x2e0 [ 54.046184][ T3166] __cleanup_mnt+0x19/0x20 [ 54.050630][ T3166] task_work_run+0x13a/0x1a0 [ 54.055255][ T3166] do_exit+0x5d5/0x1710 [ 54.059443][ T3166] do_group_exit+0x102/0x150 [ 54.064055][ T3166] get_signal+0xf2f/0x1080 [ 54.068483][ T3166] arch_do_signal_or_restart+0x95/0x4b0 [ 54.074042][ T3166] syscall_exit_to_user_mode+0x59/0x130 [ 54.079594][ T3166] do_syscall_64+0xd6/0x1c0 [ 54.084116][ T3166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.090010][ T3166] [ 54.092330][ T3166] read to 0xffff888100630bb8 of 8 bytes by task 3166 on cpu 0: [ 54.099878][ T3166] nr_blockdev_pages+0x7c/0xd0 [ 54.104653][ T3166] si_meminfo+0x87/0xd0 [ 54.108818][ T3166] update_defense_level+0x49/0x5b0 [ 54.113966][ T3166] defense_work_handler+0x1f/0x80 [ 54.118995][ T3166] process_scheduled_works+0x483/0x9a0 [ 54.124464][ T3166] worker_thread+0x526/0x720 [ 54.129055][ T3166] kthread+0x1d1/0x210 [ 54.133125][ T3166] ret_from_fork+0x4b/0x60 [ 54.137540][ T3166] ret_from_fork_asm+0x1a/0x30 [ 54.142315][ T3166] [ 54.144635][ T3166] value changed: 0x0000000000000008 -> 0x0000000000000003 [ 54.151741][ T3166] [ 54.154071][ T3166] Reported by Kernel Concurrency Sanitizer on: [ 54.160206][ T3166] CPU: 0 PID: 3166 Comm: kworker/0:6 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 54.170350][ T3166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 54.180399][ T3166] Workqueue: events_long defense_work_handler [ 54.186470][ T3166] ================================================================== [ 54.329486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811160e600: rx timeout, send abort [ 54.337736][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811160fe00: rx timeout, send abort [ 54.345996][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811160e600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 54.360307][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811160fe00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.